Privacy Notice

1. Data Controller

Your personal data is processed by Ancora Mimarlık as data controller, within the scope described below, under the Turkish Personal Data Protection Law No. 6698 («KVKK») and, where applicable, the EU General Data Protection Regulation (GDPR).

Address: Adnan Kahveci Mah. Anadolu Cad. No:20 Elitpark Evleri Daire:7, 34528 Beylikdüzü / İstanbul
E-mail: [email protected]
Phone: +90 541 849 82 00

2. Personal Data We Process

We only process the data you actively submit through our website:

• Contact form: name, e-mail address, phone number, subject and message.
• Quotation form: name, company, e-mail address, phone number, fair name and date, stand type, floor area and message.
• Job application form: name, e-mail address, phone number, position applied for, message and the information contained in your CV.
• Technical data: your IP address and the submission timestamp, recorded solely to prevent abuse of our forms.

Please do not include special categories of personal data (health, religion, union membership, biometric data, etc.) in your CV. We do not request such data as part of our recruitment process.

3. Purposes of Processing

• Responding to enquiries, requests and complaints, and managing communications
• Preparing quotations and conducting pre-contractual and contractual processes
• Evaluating job applications and managing recruitment
• Ensuring website security and preventing automated or malicious form submissions
• Complying with our legal obligations

4. Collection Method and Legal Bases

Data is collected electronically when you complete a form on our website. The legal bases are:

• Performance of a contract or pre-contractual steps (KVKK Art. 5/2-c; GDPR Art. 6(1)(b)): quotation and contract processes
• Legitimate interests (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)): responding to enquiries, assessing applications and site security
• Legal obligation (KVKK Art. 5/2-ç; GDPR Art. 6(1)(c)): statutory retention and disclosure duties

Where none of these apply, we process your data only on the basis of your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing carried out beforehand.

5. Recipients and Transfers

Your data may be shared with our hosting and e-mail service providers, strictly to the extent required to deliver those services, and with public authorities where legally required.

Data is stored on servers located in Türkiye as a rule. Where our providers' infrastructure requires a transfer abroad, such transfer is carried out in accordance with KVKK Art. 9 (adequacy decision, appropriate safeguards or the statutory exceptions) and, where the GDPR applies, Chapter V thereof.

6. Cookies

This website uses strictly necessary cookies only. We do not use advertising, marketing, profiling or third-party analytics cookies (such as Google Analytics or Meta Pixel).

• Session cookie: maintains session integrity for form submissions; stored for the browser session or a maximum of 120 minutes.
• Security (CSRF) cookie: verifies that a form submission genuinely originates from you.
• Your cookie choice: stored in your browser's local storage and never transmitted to our servers.

Strictly necessary cookies are required for the site to function and do not require consent. You may delete or block cookies in your browser settings, but form submission may then stop working.

7. Retention Periods

• Contact and quotation requests: 3 years from resolution of the request
• Quotations that become contracts: 10 years from the end of the contractual relationship
• Job applications and CVs: 1 year from the date of application
• Submission records (IP and timestamp): 1 year

At the end of the applicable period, data is deleted, destroyed or anonymised.

8. Data Security

We apply appropriate technical and organisational measures against unlawful processing and unauthorised access. Traffic is encrypted with SSL/TLS, access to the administration panel is restricted, and CV files are not stored in publicly accessible directories — they can only be retrieved by authorised users.

9. Automated Decision-Making

Your personal data is not subject to automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.

10. Your Rights

You have the right to learn whether your personal data is processed; to request information about the processing; to learn its purpose and whether it is used accordingly; to know the third parties to whom it is transferred at home or abroad; to request rectification of incomplete or inaccurate data; to request erasure or destruction; to request that such actions be notified to third parties; to object to results arising from analysis carried out solely by automated means; and to claim compensation for damage caused by unlawful processing. Where the GDPR applies, you additionally have the rights to restriction of processing, to data portability and to object to processing based on legitimate interests.

11. How to Exercise Your Rights

Please send your request, together with information verifying your identity, to [email protected] or in writing to Adnan Kahveci Mah. Anadolu Cad. No:20 Elitpark Evleri Daire:7, 34528 Beylikdüzü / İstanbul. We will respond free of charge within 30 days at the latest. If your request is refused or not answered in time, you may lodge a complaint with the Turkish Personal Data Protection Board within 30 days of learning our response and in any event within 60 days of your application. If you are in the EU/EEA, you may also lodge a complaint with your local supervisory authority.

12. Updates

This notice is updated when necessary; the current version is always published on this page.

Last updated: 27 August 2026