Privacy policy and KVKK information notice

The data controller, in the sense the law defines, is the business identified below.

Registered name

Recep Salih Mercan

Trading name

Yalova Boyacı

Responsible person

Recep Salih Mercan

Service area

Yalova and its districts

Address

İsmet Paşa Mahallesi, Mercan Sokak, 77770 Merkez/Yalova

Telephone

+90 539 395 39 09

Email for requests

[email protected]

There is no working form on this site at the moment. When the quote form goes live it will ask for these fields only:

• Your name
• Your telephone number
• Your email address, optional: you can leave it blank
• Your district or neighbourhood
• The type of work you want
• Your message, as free text

Nothing else is asked. No identity number, no date of birth, no title deed details, no payment or card details. There is no membership, no account and no password on this site.

What the data is used for

There is one purpose: getting back to you. Understanding what you need, arranging an on-site survey if one is needed, and sending you a written quote.

The data is not added to a marketing list, you are not sent promotional messages you did not ask for, it is not used to profile you and it is not sold to anyone.

Legal basis

The legal basis for the contact form is the explicit consent you give when you fill it in and send it. That basis is Article 5, first paragraph, of the law.

You do not have to use the form. A phone call gets you the same result and leaves no written record behind. You can withdraw your consent at any time; the moment you do, your record is deleted, and it costs you nothing.

Records that arrive through the form are kept for at most 12 months and then deleted.

The reason for that period is simple. A painting job does not finish in a single message. Weeks can pass between the survey and the quote, work gets postponed to the autumn, and after the job is done people come back under the workmanship guarantee. That is why the record is kept for a while.

The 12 month period is an upper limit, not an obligation to hold the data for that long. If you want it deleted sooner, it is deleted on request.

Nobody. Form data is not passed to ad networks, data brokers, call centres, lead platforms or any other business.

There is one technical exception. The email and hosting infrastructure that carries your message to us necessarily touches its contents in transit. Those providers are data processors in the sense of the law, not controllers, and they have no right to use your data for their own purposes.

The name of the hosting and email provider, and the country the server sits in, will be added to this section once the business registration details are complete. Because that detail is not written here yet, we make no statement at all about transfers abroad: making one before it can be verified would simply be false.

This site writes no cookies to your browser. No analytics cookie, no advertising cookie, no preference cookie. It does not use localStorage or sessionStorage either.

No third party script is loaded: no Google Analytics, no Tag Manager, no Meta pixel, no embedded map, no embedded video, no chat widget, no comment service. Every file, fonts included, is served from this site's own server. The site's content security policy blocks externally hosted scripts at the browser level too, so this is not a promise, it is an enforced restriction.

That is why you see no cookie banner here. We did not hide the banner: there has never been a cookie to consent to.

Your language choice is not stored in a cookie either. The language is in the address itself: Turkish pages at the root, English pages under /en, Arabic pages under /ar. We do not look at your browser language setting and redirect you to a different language.

On the server side, technical access logs may be kept, as they are on every web server. Those logs store nothing in your browser and are not used by us to profile visitors or target advertising. This section will be made precise once the hosting provider is named in this text.

The law gives you the right to:

• Learn whether your personal data is being processed
• Request information about it if it has been processed
• Learn the purpose of processing and whether the data is used in line with that purpose
• Know the third parties in Turkey or abroad to whom the data has been transferred
• Ask for the data to be corrected if it is incomplete or inaccurate
• Ask for the data to be erased or destroyed, within the conditions of Article 7 of the law
• Ask that any correction, erasure or destruction be notified to third parties the data was transferred to
• Object to an outcome against you that results purely from automated analysis of your data
• Claim compensation if you suffer loss because your data was processed unlawfully

How to exercise these rights

You can send your request in writing, or by the other methods set out by the Turkish Personal Data Protection Authority. The request has to identify you clearly and state plainly what you are asking for. Making a request is free.

A request is answered within thirty days at the latest. If the answer does not meet your request, or no answer arrives in time, you can file a complaint with the Personal Data Protection Board.

The site is served over HTTPS, so what you type into a form does not travel in readable form across the network in between. Only the person preparing the quote has access to incoming form records.

Even so, no transfer over the internet can be called absolutely safe. Please do not send sensitive data such as an identity number or bank and card details through the form; we do not ask for any of it in the first place.

When this text changes, the version and the last updated date at the top of the page change with it. Changes are not made silently.

How we correct a published detail, and how we make the correction visible, is written on a separate page: Corrections Policy