1. Identity of the data controller
Your personal data may be processed by Dobo Creative Agency as the data controller under Turkish Law No. 6698, within the scope described below.
Company: Dobo Creative Agency
Address: Üniversite Mh. Civan Sk. No:1 Allure Tower K:25 D:356 34320 Avcılar İstanbul
Email: info@dobo.com.tr
2. Categories of personal data that may be processed
- Identity and contact information: first name, surname, email address and telephone number.
- Enquiry and transaction information: company or brand name, service of interest, project/request details and correspondence.
- System security: IP address, access times, browser/device information and error or security logs.
- Marketing and analytics: cookie preferences and website usage data, only if the relevant technology is enabled and lawful conditions are satisfied.
3. Purposes and legal grounds for processing
| Processing activity | Purpose | Legal basis |
|---|---|---|
| Receiving contact and proposal requests | Assess requests, respond, understand service needs and manage a potential business relationship. | Law No. 6698, Art. 5(2)(c): directly related to entering into or performing a contract; where applicable, Art. 5(2)(f): legitimate interests. |
| Managing project discussions and correspondence | Follow up enquiries, discuss proposals and scope, and manage correspondence history. | Law No. 6698, Arts. 5(2)(c) and 5(2)(f). |
| Website and system security | Detect or prevent misuse, attacks, unauthorised access and technical faults. | Law No. 6698, Art. 5(2)(f): legitimate interests of the data controller. |
| Legal and administrative obligations | Respond to competent authorities, comply with legal requirements and establish or protect rights. | Law No. 6698, Arts. 5(2)(ç) and 5(2)(e). |
| Analytics or marketing technologies | Measure site performance or conduct marketing activities. | Explicit consent or another applicable processing condition under the law, depending on the activity. Where consent is required, the relevant technology is not activated without it. |
4. How personal data is collected
Personal data may be collected by automated or partially automated electronic means through website contact/proposal forms, email correspondence, technical visit logs and, where permitted, cookies or similar technologies.
5. Sharing personal data
Your personal data may be shared only as necessary for the processing purpose with hosting, server, email, security and infrastructure providers, legal/technical advisers and legally authorised public authorities.
Each disclosure should be limited to necessary recipients and subject to appropriate data-security safeguards.
6. International transfers
Where a technical service is located abroad, personal data is transferred internationally only when the conditions and appropriate safeguards in Article 9 of Law No. 6698 are satisfied. Transfers do not take place without a lawful basis.
7. Retention period
Personal data is retained for the period required by its processing purpose and any mandatory legal retention period. When the purpose and lawful basis cease, data is erased, destroyed or anonymised in accordance with applicable law.
8. Your rights as a data subject
Under Article 11 of Law No. 6698, you may apply to the data controller to:
- Find out whether your personal data is processed,
- Request information if your personal data has been processed,
- Learn the purpose of processing and whether data is used accordingly,
- Learn which third parties, in Türkiye or abroad, receive your data,
- Request correction of incomplete or inaccurate data,
- Request erasure or destruction where statutory conditions are met,
- Request notification of corrections, erasure or destruction to third parties to whom data was disclosed,
- Object to an adverse outcome arising solely from automated analysis,
- Seek compensation for damage caused by unlawful processing
These rights are available under the conditions specified by law.
9. How to apply
You may submit requests under the law in writing to Üniversite Mh. Civan Sk. No:1 Allure Tower K:25 D:356 34320 Avcılar İstanbul or by other methods permitted by applicable law.
If you use an email address previously provided to Dobo Creative Agency and registered in our systems, you may also send your request to info@dobo.com.tr. Registered electronic mail (KEP), secure electronic signatures, mobile signatures and other legally permitted methods may also be used.
Your request should include your name, signature if submitted in writing, information necessary to verify your identity, notification address, available email/phone details and a clear description of the request. Requests are handled as soon as possible and no later than 30 days, depending on their nature.
10. Separate information and explicit consent
This general notice does not replace activity-specific information required at the point of collection. Where data is collected via a contact or proposal form, the relevant information is provided alongside the form. Where processing relies on explicit consent, the consent statement is kept separate from the information notice.