Privacy Policy

Updated: 4 October 2026

Grafikare Tasarım ve Teknoloji Ltd. Şti. (Türkiye) and Grafikare B.V. (the Netherlands) — together "Grafikare", "we" — take the protection of your personal data seriously. This Privacy Policy explains what data we collect on grafikare.com, how we use it, how long we keep it and which rights you have.

1. Data controllers

Visitors from Türkiye are served by Grafikare Tasarım ve Teknoloji Ltd. Şti., Ümraniye / İstanbul. Visitors from the EU/EEA are served by Grafikare B.V., Leiden, the Netherlands. Contact for both: info@grafikare.com.

2. Personal data we collect

Identity & contact: name, e-mail, phone, company (contact and quote forms).
Project information: the description, budget range and preferences you submit with a request.
Technical data: IP address, browser, operating system, visit time, pages viewed, referrer, UTM parameters.
Cookie data: strictly necessary, analytics and marketing cookies (see the Cookie Policy).
Customer transaction data: quotes, contracts, invoices and project correspondence.

3. Purposes and legal bases

Responding to requests and preparing offers — performance of a contract / pre-contractual steps.
Managing projects, contracts and invoicing — performance of a contract and legal obligation.
Improving the website, statistics and security — legitimate interest.
Analytics and marketing cookies, newsletters — your consent, which you may withdraw at any time.

In Türkiye the legal bases follow KVKK art. 5–6; in the EU/EEA they follow GDPR art. 6.

4. Recipients

Data is shared only as necessary with our infrastructure providers (hosting, e-mail, analytics), professional advisers and competent authorities. International transfers follow KVKK art. 9 and GDPR Chapter V respectively.

5. Retention

Personal data is kept for as long as the purpose requires and for statutory limitation periods, after which it is deleted or anonymised. Form submissions that do not lead to a project are deleted within 24 months.

6. Your rights

You may request access, rectification, erasure, restriction, portability and object to processing, and withdraw consent at any time by writing to info@grafikare.com. EU/EEA residents may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens); Turkish residents with the Personal Data Protection Authority (KVKK).

7. Security

We apply technical and organisational measures including TLS encryption, access control, logging and backups.

8. Updates

This policy may be updated; the current version is always published on this page.