privacy

suvetuz, the owner of this site, is the data controller for the purposes of the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where it applies, the EU and UK General Data Protection Regulation.

This notice explains what personal data is processed when you visit www.suvetuz.com, why, on what legal basis, who it reaches, and what rights you have.

Contact: info@suvetuz.com

This is an artist's catalogue. There is no contact form, no account, no cart and no checkout, and nothing is knowingly collected from visitors.

• Visiting this site places no cookies in your browser at all, which is why you are not asked to accept any.
• There is no advertising network, no social media tracker and no personalised advertising.
• Visit statistics are collected without cookies, and without following anyone from one day to the next or from one site to another.
• Opening a page sends no request to any address other than this site's own: the typefaces, the photographs and the video are all served from this domain.
• Your data is never sold and never shared with third parties for marketing.

a) Technical connection logs. Your IP address, browser and operating system, the page you requested, the date and time of the request and the referring address, if any, are recorded automatically by the hosting infrastructure. Purpose: keeping the site secure and available, and detecting faults and abuse. Basis: legitimate interests (KVKK art. 5/2-f; GDPR art. 6(1)(f)).

b) Visit statistics. The site uses Vercel Web Analytics. It sets no cookies; it tells visitors apart using a hash generated from your incoming request that is valid for a single day and reset automatically after it. According to the provider's documentation this means a visitor cannot be tracked between different days or between different websites, and the data is reduced to aggregated statistics.

The information that may be recorded with each data point is: the timestamp, the address visited and its page template, the referring address, filtered query parameters, a location derived from your IP address (country, region, city), operating system and version, browser and version, device type, and the version of the measurement script. Purpose: understanding which work draws interest and improving the catalogue. Basis: legitimate interests (KVKK art. 5/2-f; GDPR art. 6(1)(f)).

c) What you send by email. There is no form here; contact is made by writing directly to the published address, info@suvetuz.com. When you do, your name, your email address and the content of your message reach us. Purpose: answering you and assessing acquisition, commission and collaboration enquiries. Basis: steps taken at your request prior to a contract, and legitimate interests (KVKK art. 5/2-c and 5/2-f; GDPR art. 6(1)(b) and 6(1)(f)).

d) Information inside published content. The catalogued works and the exhibition records may name people, organisations, venues and events. This is drawn from public sources or from what the people concerned have themselves published, and appears here for artistic expression, promotion and archival purposes. You may ask at any time for something published about you to be removed.

No cookies of any kind are used on this site — not essential, not analytics, not advertising. That is why you are not asked to accept any. There is also no admin area, no membership area and no sign-in screen.

Your browser talks only to this site's own domain. The typefaces are served with the site rather than fetched from a font network, and the photographs and the video in the masthead are served from this domain too. There is no embedded video player, no map, no social media widget and no externally hosted script.

The developer credit at the foot of the page points to an outside address, but a request is only made there if you tap the link — opening the page is not enough.

If analytics or similar cookies are ever introduced, your explicit consent will be requested before any such cookie is set, and this notice will be updated at the same time.

The following providers supply the infrastructure the site runs on, and data is processed technically within it:

• Vercel — hosting, technical logs and visit statistics.
• GoDaddy — domain registration and DNS.
• Microsoft — email service for info@suvetuz.com.

All of the providers listed above are established outside Turkey and their servers are located outside Turkey. Processing the technical logs, the visit statistics and email correspondence therefore constitutes a transfer abroad within the meaning of KVKK art. 9.

The transfer is limited to the data required to serve the site and to answer you. No data is transferred abroad for marketing, profiling or advertising.

Information may also be shared with public authorities where they make a lawful request, to the extent the legislation requires (KVKK art. 8/2-a).

• Technical logs: for the hosting provider's own retention period, after which they are deleted automatically.
• Visit statistics: kept in aggregate only, and contain nothing that can be traced to a person. The hash that tells visitors apart is discarded permanently after twenty-four hours. How far back the aggregated statistics can be read depends on the provider's subscription plan, and the provider states that it may hold the data for longer than that window.
• Email correspondence: kept for as long as the enquiry or working relationship requires, then deleted once no legal retention duty remains.

Under KVKK art. 11 you have the right to learn whether your personal data is processed, to request information about it, to learn the purpose of processing and whether the data is used accordingly, to know the third parties in Turkey or abroad to whom it is transferred, to have it corrected if it is incomplete or inaccurate, to request its erasure or destruction under art. 7, to require that any correction or erasure be notified to those third parties, to object to a result reached solely by automated analysis that is adverse to you, and to claim compensation for damage caused by unlawful processing.

If you are in the EEA or the UK, you additionally have the rights of access, rectification, erasure, restriction of processing, objection and data portability under the GDPR, and the right to lodge a complaint with your local supervisory authority. No automated decision-making or profiling is carried out on this site.

Write to info@suvetuz.com, stating your name and clearly describing what you are asking for.

Requests are answered free of charge as soon as possible and in any case within thirty days of reaching us. Where responding involves a separate cost, the fee set by the Turkish Personal Data Protection Board may be charged.

If you would prefer to make a written application by post, ask at the address above and a postal address will be provided.

If your request is refused, the answer is inadequate, or no answer is given in time, you may complain to the Turkish Personal Data Protection Board or, in the EEA or UK, to your local supervisory authority.

This notice may be updated as the site changes technically. The current version is always published on this page, and the date at the top shows when it last changed.

All works, drawings, photographs and text on this site belong to suvetuz and may not be reproduced, distributed, altered or used commercially without permission.