Data Protection Notice (KVKK)
Last updated: 4 August 2026
Under Turkish Personal Data Protection Law no. 6698, this notice explains how personal data is processed in our enquiry and contact flows.
Data controller and contact
Vitrin is the data controller for processing carried out through this site. You can reach us at hi@nysa.tr. The registered trade name and service address are stated separately in the company records.
Personal data processed
Name, email address, brand or company name, sector, budget range, project note, contact consent, and limited connection logs kept for security purposes.
Purposes and legal grounds
To receive, assess and answer enquiries; to run pre-contract scoping and correspondence; to maintain information security and service continuity; to meet legal obligations and defend rights in disputes.
Processing relies on pre-contractual steps taken at your request, legal obligations, legitimate interests, and explicit consent where required.
How data is collected
Data may be collected electronically through the enquiry form, email correspondence and hosting security logs, by automated or partly automated means. Cart and booking state inside the interactive demos stays in your browser and is never transmitted to us.
Transfers
Personal data may be shared, only as far as necessary, with authorised staff, hosting and email providers, legally competent public authorities, or advisers in the event of a dispute. Providers are chosen with appropriate data protection and security terms.
Your rights
Under article 11 you may ask whether your data is processed, request information, learn the purpose and whether it is used accordingly, know the third parties it is shared with, request correction of incomplete or inaccurate data, request erasure or destruction, ask that these actions be notified to third parties, object to outcomes of automated analysis, and claim compensation for damages.
Making a request
Write to hi@nysa.tr with enough information to verify your identity and a description of your request. Requests are answered within the methods and timeframes set by applicable legislation.