Privacy Policy

Last Updated: 19.02.2025

At Istanbul Portrait, the privacy and security of your personal data is important to us. This Privacy Policy explains how information collected through www.istanbulportrait.com ("Site") is used, shared, and protected. By using our site, you are deemed to have accepted the practices stated in this policy.

1. DATA CONTROLLER

Pursuant to the Personal Data Protection Law No. 6698 ("PDPL"), your personal data may be processed by Istanbul Portrait Photography as the data controller within the scope explained below.

Data Controller:
Istanbul Portrait Photography
Address: Sultanmurat Mah. Oyuklu Sok. No:4/7, 34295 Küçükçekmece/Istanbul/Türkiye
Email: info@istanbulportrait.com
Telephone: +90 536 709 37 24

2. PERSONAL DATA COLLECTED

We may process the following personal data:

2.1. Identity and Contact Information

Name and surname
Email address
Telephone number
Residential address
Date of birth (if required)
Identity document information (if required)

2.2. Reservation and Payment Information

Reservation date and time
Selected package information
Payment method
Invoice information
Credit card information (processed in accordance with PCI DSS standards)

2.3. Account and Profile Information

Username and password
Profile picture (if uploaded)
Account preferences
Past reservations

2.4. Content and Photographs

Images created during photography sessions
Images uploaded by you to our site
Comments and feedback

2.5. Technical Information

IP address
Browser type and version
Device information
Operating system
Pages visited
Behavior and interactions on the site
Access times and dates

3. PURPOSES OF PROCESSING PERSONAL DATA

We process your personal data for the following purposes:

To provide you with our photography services and manage your reservation process
To create and manage your user account
To process your payments and maintain financial records
To fulfill our legal obligations
To provide customer service and answer your questions
To improve the user experience on our site
To identify and resolve technical issues
To provide information about our services
To conduct marketing and promotional activities (with your consent)
To prevent fraud and other illegal activities
To ensure compliance with company policies and legal regulations

4. LEGAL BASIS FOR PROCESSING PERSONAL DATA

The legal basis for processing your personal data is as follows:

Explicit Consent: We obtain your explicit consent for certain processing activities, such as marketing communications.
Performance of Contract: We process your personal data to fulfill our contract with you.
Legitimate Interest: We may process your data for our legitimate interests, such as improving our services or preventing fraud.
Legal Obligation: We process your data to comply with legal obligations, such as tax laws.
Establishment and Protection of Rights: We may process your data to protect our legal rights or defend against legal claims.

5. TRANSFER OF PERSONAL DATA

Your personal data may be transferred to the following recipient groups:

5.1. Service Providers

We may share your data with our business partners and service providers (e.g., payment processors, cloud storage providers, email service providers). These companies are obligated to process your data only in accordance with our instructions and in compliance with this privacy policy.

5.2. Legal Requirements

We may share your personal data with authorized public institutions and judicial authorities when necessary to fulfill a legal obligation.

5.3. Business Transfers

In the event of a sale, merger, or restructuring of our company, your personal data may be transferred as part of the transaction. In such a case, we will take necessary measures to protect your data.

5.4. International Transfers

Your personal data may be transferred abroad through our service providers whose servers are located outside the country. In such cases, necessary security measures will be taken in accordance with Article 9 of the PDPL.

6. COOKIES AND SIMILAR TECHNOLOGIES

Our Site uses cookies and similar technologies. Cookies are small text files placed on your device by a website. They enable our Site to operate more efficiently and provide you with a personalized experience.

The types of cookies we use are:

Essential Cookies: Cookies that are necessary for the proper functioning of the Site.
Preference Cookies: Cookies that allow us to remember your preferences when using the Site.
Analytical Cookies: Cookies that help us understand how visitors use the Site.
Marketing Cookies: Cookies used to display advertisements relevant to your interests.

You can manage or disable cookies through your browser settings. However, disabling certain cookies may cause some features of the Site to function improperly.

7. DATA SECURITY

We implement appropriate technical and administrative measures to ensure the security of your personal data. These measures include encrypted data transfer, up-to-date security software, regular security assessments, and data security training for our employees.

However, we would like to note that it is not possible to guarantee 100% security in data transfers over the internet or electronic storage. Therefore, while we make reasonable efforts to protect your personal data, we may not be able to provide absolute security.

8. DATA RETENTION PERIOD

We retain your personal data for as long as necessary for the purposes for which they were collected or as required by our legal obligations. These periods depend on:

The duration of our contract with you
Legal retention obligations (e.g., 5-10 years for tax and accounting records)
The need for defense against potential legal claims (considering statute of limitations)
Whether consent given by you has been withdrawn

When retention periods expire, your personal data is securely deleted, destroyed, or anonymized.

9. DATA SUBJECT RIGHTS

Pursuant to Article 11 of the PDPL, you have the following rights regarding your personal data:

To learn whether your personal data is being processed
To request information if your personal data has been processed
To learn the purpose of processing your personal data and whether it is used in accordance with this purpose
To know the third parties to whom your personal data is transferred domestically or internationally
To request the rectification of incomplete or inaccurate personal data
To request the erasure or destruction of your personal data under the conditions set forth in Article 7 of the PDPL
To request notification of the rectification, erasure, or destruction operations to third parties to whom your personal data has been transferred
To object to an outcome that is to your detriment resulting from analysis of your processed data exclusively through automated systems
To claim compensation for damages arising from the unlawful processing of your personal data

To exercise these rights, you may apply in writing to our data controller email address specified above. We will conclude your application free of charge as soon as possible and within 30 days at the latest.

10. CHILDREN'S PRIVACY

Our Site is not directed at children under the age of 18, and we do not knowingly collect personal data from children under 18. If we learn that we have inadvertently collected personal data from a child under 18, we will take the necessary steps to delete this data immediately.

11. CHANGES TO THE PRIVACY POLICY

We may update this Privacy Policy from time to time. Updates will take effect on the date they are published on the Site. When we make significant changes, we will inform you through the Site or via email.

We recommend that you regularly visit this page to check the most current version of this Privacy Policy.

12. CONTACT

If you have questions or concerns about this Privacy Policy, please contact us using the information below:

Istanbul Portrait Photography
Address: Sultanmurat Mah. Oyuklu Sok. No:4/7, 34295 Küçükçekmece/Istanbul/Türkiye
Email: privacy@istanbulportrait.com
Telephone: +90 536 709 37 24

Privacy-policy