Data Protection Notice (KVKK)

Last updated: 4 August 2026

Under Turkish Personal Data Protection Law no. 6698, this notice explains how personal data is processed in our enquiry and contact flows.

Data controller and contact

Vitrin is the data controller for processing carried out through this site. You can reach us at hi@nysa.tr. The registered trade name and service address are stated separately in the company records.

Personal data processed

Name, email address, brand or company name, sector, budget range, project note, contact consent, and limited connection logs kept for security purposes.

Purposes and legal grounds

To receive, assess and answer enquiries; to run pre-contract scoping and correspondence; to maintain information security and service continuity; to meet legal obligations and defend rights in disputes.

Processing relies on pre-contractual steps taken at your request, legal obligations, legitimate interests, and explicit consent where required.

How data is collected

Data may be collected electronically through the enquiry form, email correspondence and hosting security logs, by automated or partly automated means. Cart and booking state inside the interactive demos stays in your browser and is never transmitted to us.

Transfers

Personal data may be shared, only as far as necessary, with authorised staff, hosting and email providers, legally competent public authorities, or advisers in the event of a dispute. Providers are chosen with appropriate data protection and security terms.

Your rights

Under article 11 you may ask whether your data is processed, request information, learn the purpose and whether it is used accordingly, know the third parties it is shared with, request correction of incomplete or inaccurate data, request erasure or destruction, ask that these actions be notified to third parties, object to outcomes of automated analysis, and claim compensation for damages.

Making a request

Write to hi@nysa.tr with enough information to verify your identity and a description of your request. Requests are answered within the methods and timeframes set by applicable legislation.

This is an operational draft written against the site's structure. The registered name, address, data registry entry and retention processes must be verified against the company's real records by a legal adviser. In case of conflict the Turkish text prevails.