Privacy Notice

This notice is issued by HEY Mimarlık as data controller under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (the "Law") and the related Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform. It explains how your personal data is processed when you use this website, submit the quote form or contact us.

1. Data controller

Your personal data is processed by HEY Mimarlık acting as data controller.

Address: Ziya Gökalp Mah. Süleyman Demirel Bulvarı,
Mall of İstanbul The Office No: 7E, Kat 17, D. 136
Başakşehir 34490 İstanbul
Phone: +90 532 710 59 41
E-mail: [email protected]

2. Personal data we process

We only collect what you choose to share with us.

a) Quote and contact form

Identity and contact data: your name, phone number and, if provided, e-mail address.
Enquiry details: type of space, approximate floor area, budget range, style preference, city and whatever you write in the message field.
Transaction security data: the IP address used when the form was submitted.

Only name, phone number and type of space are required. Your enquiry reaches us even if you leave the other fields empty.

b) Clicks on contact links

When a phone or WhatsApp link on the site is clicked, we record the type of click, its time, the page it happened on, the IP address, the language preference and the device and browser type. This record exists to show which pages lead to contact, not to identify you; it contains neither your name nor your phone number.

c) Cookies and measurement

Apart from strictly necessary cookies, no cookie runs before you consent. Measurement tools load only after you accept. See the Cookie Policy for details.

d) Server logs

Our hosting provider keeps standard access logs (IP address, request time, requested address). These are used only for security and fault diagnosis.

3. Purposes of processing

Receiving, assessing and responding to quote and information requests
Conducting pre-contractual discussions and, where a contract is concluded, performing it
Determining the service that fits your enquiry and carrying out preliminary work
Measuring and improving the effectiveness of our contact channels and site content
Maintaining site security and preventing automated or unsolicited form submissions
Meeting legal obligations and responding to requests from competent authorities

We do not use your data for marketing without your explicit consent and we do not add you to a mailing list.

4. Legal grounds

Processing is based on the following grounds in Article 5 of the Law:

Art. 5/2-c — directly related to the conclusion or performance of a contract: the identity, contact and enquiry data you provide in the quote form.
Art. 5/2-ç — compliance with a legal obligation: records we are required by law to retain.
Art. 5/2-f — legitimate interests: IP and click data processed for site security, prevention of unsolicited submissions and measurement of contact channel performance. This is carried out with minimal data and without prejudice to your fundamental rights.
Art. 5/1 — explicit consent: non-essential cookies are written only if you consent through the banner. You may withdraw your consent at any time.
Art. 5/2-f — legitimate interest: the cookieless, identifier-free count that runs without consent relies on this ground.

5. Method of collection

Data is collected through website forms, clicks on contact links and, where you consent, cookies, by wholly or partly automated means.

6. Retention periods

Quote requests: three years from receipt if no business relationship follows. If one does, for the applicable limitation periods following the end of that relationship.
IP address in the quote form: 180 days. The IP address is then removed from the record automatically; the request itself remains as a commercial record.
Contact click records: 180 days, after which the record is deleted in full.
Cookies: for the session or for the period stated in the Cookie Policy, depending on type.

Deletion runs as a scheduled daily task rather than manually.

7. Transfers

We do not sell your personal data and do not share it with third parties for marketing. Transfers are limited to the following:

Within Türkiye: to our hosting and e-mail service providers, so the service can be delivered technically (Art. 8 of the Law).
To authorities: to public institutions where we are legally required to provide information.
Abroad: the measurement tool (Google Analytics) may process data outside Türkiye because of the provider's infrastructure. This also applies when you do not consent: in that case the data sent is cookieless and carries no identifier (the page opened, its language, approximate location and device type), but it is still processed abroad. If you consent, measurement cookies are added as well. In both cases the transfer relies on one of the appropriate safeguards under Article 9 of the Law as amended by Law No. 7499, such as an adequacy decision or a standard contract. If you want no data to leave the country at all, you can block access to googletagmanager.com in your browser; no feature of the site depends on it.

8. Your rights

Under Article 11 of the Law you may ask us to:

Confirm whether your personal data is processed and, if so, request information about it
Learn the purpose of processing and whether the data is used accordingly
Know the third parties to whom data is transferred in Türkiye or abroad
Have incomplete or inaccurate data corrected
Have your data erased or destroyed under the conditions of Article 7
Have any correction, erasure or destruction notified to third parties to whom the data was transferred
Object to a result against you arising from analysis carried out solely by automated systems
Claim compensation for damage suffered as a result of unlawful processing

9. How to apply

You may submit your request in writing to the address above, or from an e-mail address registered in our records, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller. Your application should state your name, your Turkish ID number if you are a Turkish citizen, an address for service and the subject of your request.

We respond as soon as possible and in any case within thirty days, free of charge. Where the request entails a cost, a fee set by the Personal Data Protection Board may apply.

If your application is rejected, our response is unsatisfactory or we fail to respond in time, you may lodge a complaint with the Personal Data Protection Board within thirty days of learning our response and in any case within sixty days of the application date.

10. Updates

This notice is updated when the data we collect or the applicable legislation changes. The current version is always published on this page.