Privacy Notice

This notice explains how we handle personal data when you visit againstcreative.com, use our brief form or contact us. It is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and, for our work through the Munich office and for people in the European Union, under the General Data Protection Regulation ("GDPR").

1. Controller

Against Creative
Istanbul office: Caferağa, Moda Cd. No:5, 34734 Kadıköy / Istanbul, Türkiye
Munich office: Wurzerstraße 11, 80539 München, Germany
Email: hello@againstcreative.com
Phone: +90 553 138 10 93

2. What we process

Identity: first and last name
Contact: phone number and email address
Request details: company or brand, the services you are interested in, budget range, preferred start and your message
Correspondence: anything you share with us by WhatsApp, email or phone
Technical data: IP address, date and time, browser details and the page requested, written to the server logs when you visit the site

3. Why we process it

To review your request, prepare a quote and get back to you
To hold pre-contract talks and run projects
To keep the website secure and available
To meet our legal obligations and protect our rights in any dispute

4. How we collect it and on what basis

We collect personal data through the brief form, WhatsApp, email, phone and the website's server logs, partly by automated means. The brief form does not store anything on this website: when you submit it, your details open in WhatsApp as a prepared message, and they only reach us when you send that message.

Legal bases:

Steps prior to a contract and performing a contract (KVKK Art. 5/2-c, GDPR Art. 6(1)(b)): quotes and project talks
Legal obligations (KVKK Art. 5/2-ç, GDPR Art. 6(1)(c))
Establishing, exercising or defending legal claims (KVKK Art. 5/2-e)
Legitimate interests that do not override your rights (KVKK Art. 5/2-f, GDPR Art. 6(1)(f)): site security, server logs and showing our work
Your consent (KVKK Art. 5/1, GDPR Art. 6(1)(a)): where none of the above applies, and for transfers abroad that require consent

5. Recipients and transfers abroad

We share personal data only as far as needed for the purposes above, with:

Hostinger, which hosts this website (server logs)
WhatsApp (Meta), which carries your message when you send the brief form
Vimeo, the video platform that shows our work (when videos and thumbnails load on a page)
Our Munich office (for projects in Germany)
Our accountants, legal and tax advisers, and public authorities where the law requires it

Some of these providers process data outside Türkiye and the European Economic Area, including in the United States. Transfers follow Article 9 of the KVKK and Chapter V of the GDPR, for example on the basis of an adequacy decision such as the EU-U.S. Data Privacy Framework where the provider is certified, standard contractual clauses or your explicit consent. By ticking the consent box and sending the prepared WhatsApp message, you consent to your request reaching us this way. You can also simply email us instead.

6. How long we keep it

We keep personal data for as long as the purpose requires. If a contract follows, statutory retention periods apply (for example, ten years for commercial records under Turkish commercial law). Server logs are kept by the hosting provider for a limited period. When the period ends, the data is deleted, destroyed or anonymised.

7. Cookies and outside content

This site does not use advertising or tracking cookies. A small technical marker without personal data is kept in your browser's session storage for the page transition and is removed when you close the tab.

The list of our work and its thumbnails load from Vimeo. Your browser connects to Vimeo's servers to do this, which shares your IP address with Vimeo. Videos play in Vimeo's do-not-track mode. Our Instagram posts are delivered through our own server, so your browser does not connect to Instagram while you browse the site. If you click a post, Instagram opens and its own privacy terms apply.

8. Your rights

Under Article 11 of the KVKK and Articles 15 to 21 of the GDPR you may:

Find out whether we process your personal data and request information about it
Learn the purpose of processing and whether data is used accordingly
Know the third parties in Türkiye or abroad to whom data is transferred
Ask for incomplete or inaccurate data to be corrected
Ask for data to be erased or destroyed
Ask for corrections and erasures to be passed on to recipients
Restrict processing and receive your data in a portable format (GDPR)
Object to processing based on legitimate interests, and to results that are to your detriment and come solely from automated analysis
Withdraw your consent at any time, without affecting earlier processing
Claim compensation for damage caused by unlawful processing

9. How to apply

Send your request, with enough information for us to confirm your identity, to hello@againstcreative.com or in writing to our Istanbul office. We reply free of charge within 30 days. If your request is refused, the reply is insufficient or there is no reply in time, you can complain to the Turkish Personal Data Protection Board. If you are in the EU, you can also complain to the supervisory authority where you live or to the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht).

We do not make decisions based solely on automated processing. You are not obliged to provide personal data, but without your contact details we cannot answer your request.