This text explains in plain language how your personal data is handled when you visit the WYN website or contact us about a project.
Who is the data controller?
The data controller for this website and the communication processes carried out through WYN is the site operator trading under the WYN Studio brand. The official trade name, address and application channel will also be published here once our company details are finalised.
The terms “WYN”, “we” and “site” on this page refer to the WYN website, communication channels and the project consultations carried out through them.
Which data do we collect, and when?
We do not ask every visitor for the same information. The extent of the data depends on how you contact us.
- Contact information: Your name, e-mail address, phone or WhatsApp details, when you ask us a question or request a project meeting.
- Project details: Your company, your role, the purpose of your project, your current infrastructure, your budget range and the brief notes you voluntarily share.
- Technical records: Records such as IP address, date-time information, browser and device type that may be needed for site security and error analysis.
- Preferences: If a language or cookie preference panel is used in future, the limited information needed to remember your choice.
Why do we use this data?
When a visitor writes to us saying “we want to build a new e-commerce infrastructure”, we use that message only to reply and prepare a proper first meeting. Contact information is not turned into an unsolicited mailing list.
- To understand, answer and plan the first meeting for your request.
- To evaluate the scope, technology and working model that suits you.
- To keep the site secure and detect abuse and technical errors.
- To fulfil legal obligations and, where needed, protect a right.
- With your explicit consent, to apply the measurement or communication preferences you choose.
Under which legal framework do we operate?
Depending on the nature of the processing activity, we rely on legal grounds such as being directly related to establishing or performing a contract, a legal obligation, establishing or protecting a right, the data controller’s legitimate interest, and explicit consent where needed. We do not use the same ground for every purpose; when the purpose changes, so does the assessment.
If optional analytics, advertising or personalisation tools are introduced we keep them separate from required cookies and ask for your preferences explicitly.
Who is it shared with?
We never sell your data. Only to the extent necessary for a project or communication process to run, there may be limited sharing with suppliers we receive hosting, e-mail, communication, security, backup or technical support services from. In that case the supplier is expected to process only for the given service and apply appropriate security measures.
We do not disclose your data to other people or organisations except for lawful requests from authorised public bodies or cases where protecting a right makes it mandatory.
How long do we keep it?
A contact message is kept for as long as needed to answer the request and carry out any project meeting. If a project relationship is established, contract and accounting records may be kept for the periods set by the relevant legislation. Technical security records are deleted or anonymised after a reasonable period necessary for the purpose.
When a deletion request is made for specific data, we delete, destroy or anonymise it unless there is a valid reason such as a retention obligation or an ongoing dispute.
What are your rights?
Under the Personal Data Protection Law No. 6698 you can learn whether data about you is processed, ask which data is processed and for what purpose, request correction of incomplete or incorrect data, and request deletion or destruction when the conditions arise. You also have the right to learn the third parties data was transferred to, to object to the processing result, and to claim compensation if you suffer damage due to unlawful processing.
How can you make an application?
You can send your request, together with information sufficient for us to verify your identity, through the official channel on ourContact page. Writing the request clearly, understandably and stating which right you wish to use speeds the process up.
Applications are concluded as soon as possible and within the period set by legislation, depending on the nature of the request. If an application is rejected, the answer is insufficient, or no answer is given in time, the person retains the right to apply to the Personal Data Protection Authority.