This notice explains, under Turkish Personal Data Protection Law No. 6698 (“KVKK”), for what purposes and how Fietto Creative processes your personal data, and which cookies we use on this site.
1. Personal data we process
- Contact form: your name, email address or phone number, subject and message; to prevent abuse, the IP address and browser information at the time of submission
- Site X-Ray (free website audit): the website address you ask us to analyse; if you request the full report, your email address, optionally your name and phone number, your newsletter preference, the campaign you arrived from (e.g. utm parameters, ad click ID) and, to prevent abuse, your IP address
- WhatsApp, phone and email conversations: your name, contact details and the content of the conversation
- Data collected through cookies (only if you allow it): the pages you visit, your interactions on the site (e.g. tapping a WhatsApp or phone link, submitting a form), device and browser information, approximate location, the ad or source you came from, and cookie identifiers. See section 3 for details.
- Technical data: standard access logs kept on the site’s hosting server for security purposes (IP address, date/time)
All site files, including fonts, are served from our own server. Unless you give consent, the site loads no analytics or advertising code at all.
2. Purposes and legal grounds
- Replying to your quote and information requests and scheduling calls (KVKK Art. 5/2-c: necessary for entering into a contract)
- Preparing the Site X-Ray report you request, emailing it to you and following up on it (Art. 5/2-c)
- If you opt in, sending emails about digital growth content and campaigns (Art. 5/1: explicit consent; commercial electronic message consent under Law No. 6563). You can withdraw this consent at any time.
- If you opt in, measuring how the site is used (analytics cookies) and measuring the results of our ad campaigns and showing you relevant ads (advertising cookies) (Art. 5/1: explicit consent)
- Delivering and supporting the services we provide to our clients (Art. 5/2-c)
- Fulfilling legal obligations (Art. 5/2-ç) and keeping the site secure (Art. 5/2-f: legitimate interest)
3. Cookies
A cookie is a small file a website stores in your browser. On your first visit a banner asks you to choose Accept, Decline or Settings. Declining is as easy as accepting and does not limit your use of the site in any way. Your choice is stored in your browser for 6 months; after that we ask again.
- Necessary: an entry in your browser’s local storage (
fc_consent) that remembers your choice. It does not track you and is not shared; kept for 6 months. Always on. - Analytics (with your consent): Google Analytics 4 (via Google Tag Manager). Measures, in aggregate, which pages are visited and which links are used. Example cookies:
_ga,_ga_*; kept for up to 2 years. - Advertising (with your consent): Google Ads and Meta Pixel (Facebook/Instagram). Measures whether visits from our ads lead to a request or contact, and lets these platforms show you relevant ads. Example cookies:
_gcl_au,_gcl_aw,_fbp,_fbc; usually kept for 90 days.
The legal ground for analytics and advertising cookies is the explicit consent you give in the banner (KVKK Art. 5/1). If you do not consent, this code is never loaded and no data is sent to Google or Meta. You can change or withdraw your consent at any time via the Cookie preferences link at the bottom of every page; when you withdraw it, the related cookies are deleted from your browser. You can also delete or block cookies in your browser settings.
4. Transfers
Your personal data is shared only to the extent needed to deliver the service: with the hosting, email and messaging providers we use (e.g. WhatsApp/Meta) and, where legally required, with competent public authorities. The website address analysed with Site X-Ray is sent to Google PageSpeed Insights for a mobile speed measurement; no personal data is sent with it.
Transfers to Google and Meta: if you allow analytics or advertising cookies, the cookie data listed in section 1 is processed by Google (Google Ireland Ltd. / Google LLC) and, if you allow advertising, by Meta (Meta Platforms Ireland Ltd. / Meta Platforms, Inc.). Their servers are located outside Türkiye, including in the USA, so the data is transferred abroad. This transfer is based on the explicit consent you give in the banner (KVKK Art. 5/1 and Art. 9). Google and Meta may also process this data under their own policies: Google Privacy Policy, Meta Privacy Policy.
The name, email, phone number and message you type into our forms are never sent to Google or Meta. Your data is never sold.
5. Retention
Site X-Ray report files are deleted automatically after 30 days; newsletter consent is kept until withdrawn. Cookie lifetimes are listed in section 3. Request and correspondence records are kept for at most 2 years after the request is concluded; records relating to client contracts are kept for the statutory retention periods. At the end of the period they are deleted or anonymised.
6. OSPITA AI
For details on guest data processed by OSPITA AI, the AI assistant we provide to hotels, see the OSPITA AI Privacy Policy; for deletion requests, see the Data Deletion Instructions.
7. Your rights (KVKK Art. 11)
You have the right to learn whether your personal data is processed, to request information about it, to learn the purpose of processing, to know the third parties in Türkiye or abroad it is transferred to, to request correction if it is incomplete or inaccurate and to request its deletion or destruction, to object to a result against you arising from analysis by automated systems, and to claim compensation if you suffer damage. You can withdraw your explicit consent at any time; withdrawal does not affect processing carried out before it.
You can send your request in writing to info@fiettocreative.com or to 30 Ağustos Zafer Mah. Barbaros Bulvarı A Blok No: 25A İç Kapı No: 11, Nilüfer / Bursa; we reply within 30 days at the latest.
© 2026 Fietto Creative · A sole proprietorship owned by Talha Balaban.