PRIVACY
Last updated: 6 October 2026
Who is responsible
This notice explains how aiva.com.tr handles personal data under the Turkish Personal Data Protection Law (KVKK, No. 6698) and, for visitors from the EU, the General Data Protection Regulation (GDPR). The controller is AIVA Creative Studio. You can reach us at hello@aiva.com.tr.
What we collect
- Contact form: your name, company, email address, the services you select and what you write about your project.
- Visit statistics (only with your consent): through Google Analytics, the pages viewed, time on site, device and browser type, approximate location (country, city) and how you reached the site.
- Technical logs: the server hosting the site keeps standard access logs such as IP address, time and requested page, for security and to keep the service running.
Why, and on what legal basis
- We use form data to answer your request, prepare a quote and handle the conversation. Basis: steps prior to entering a contract and our legitimate interest (GDPR Art. 6(1)(b) and (f); KVKK Art. 5(2)(c) and (f)).
- We use visit statistics to improve the site. Basis: your consent (GDPR Art. 6(1)(a); KVKK Art. 5(1)). Without consent, Google Analytics is never loaded.
- Technical logs keep the site secure. Basis: our legitimate interest (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
Who receives the data
We don't sell your data or share it for advertising. It only goes to these service providers, as far as the service requires:
- Web3Forms: delivers your form message to our inbox.
- Google (Google Analytics): processes visit statistics, only with your consent.
- Hostinger: hosts the website and our email.
- Frankfurter (European Central Bank rates): on this English page your browser fetches the current exchange rate to show prices in US dollars; no personal data is sent beyond the technical request.
Some of these providers process data outside Turkey and the EU. Form data is transferred to carry out your request; analytics data on the basis of your consent.
How long we keep it
- Form messages: for the duration of the conversation and up to 2 years after; if it turns into a business relationship, statutory retention periods apply.
- Google Analytics data is deleted automatically after 14 months.
- Server access logs are kept for the period set by the hosting provider.
Cookies and local storage
| Name | Purpose | Duration |
|---|---|---|
| aiva-consent | Remembers your cookie choice (browser storage). | Until you clear it |
| aiva-fx-try-usd / -eur | Caches the current exchange rate on the English and German pages (browser storage). | 6 hours |
| _ga, _ga_* | Google Analytics: tells visits apart. Set only with your consent. | Up to 2 years |
You can change your choice at any time. If you withdraw consent, the Google Analytics cookies are deleted.
Your rights
You can ask whether we process your data and request a copy, correction or deletion. You can also restrict or object to processing, ask for data portability and withdraw consent at any time, without affecting processing done before. If you are in the EU, you can complain to your local data protection authority; in Turkey, to the Personal Data Protection Authority (KVKK).
Send requests to hello@aiva.com.tr. We reply free of charge within 30 days.