// DATA PROTECTION // PRIVACY
KVKK • GDPR • CCPA • COPPAPrivacy Policy
Last Updated: July 31, 2026
ZTN Studio ("Company", "we") attaches great importance to protecting the personal data of our visitors and users. This Privacy Policy details how your personal data is collected, processed, stored, and protected when using our website (ztnstudio.com) and our mobile/web applications.
1. Types of Data Collected and Methods
ZTN Studio may process the following types of personal data when using our platforms and mobile/web applications, automatically or directly provided by you:
- Automatic Technical Data: Server access logs, anonymized IP addresses, browser type, operating system, language preferences, and technical access timestamps.
- Contact Data: Name, surname, email address, company information, and message contents submitted via contact forms or email.
- App and Usage Data: Anonymized usage metrics collected to enhance the performance, stability, and user experience of our mobile/web applications (e.g., Noor).
2. Purposes of Personal Data Processing
Your personal data is processed in accordance with Articles 5 and 6 of Law No. 6698 (KVKK) and GDPR provisions for the following purposes:
- Ensuring the cybersecurity, continuity, and optimum performance of our website and applications.
- Responding to inquiries, project requests, technical support, and feedback submitted via contact forms.
- Analyzing infrastructure scalability, detecting system vulnerabilities, and preventing abuse.
- Fulfilling legal information retention, regulatory reporting, and disclosure obligations to competent authorities.
3. Data Security, Server Locations and Retention Periods
Your personal data is protected using appropriate technical and administrative security measures during transfer and storage. Data is stored securely in compliance with security requirements; access permissions are restricted on a role- and need-based basis. Infrastructure uses TLS/SSL transmission security protocols, secure one-way hashing algorithms (argon2, etc.) for sensitive data, and access-controlled database services.
Servers utilized in our service infrastructure may be located in Türkiye and Germany. Data transfers and processing activities involving servers located in Germany are conducted in full compliance with Article 9 of Law No. 6698 (KVKK) regarding cross-border data transfers and related secondary legislation.
Your personal data is retained in accordance with the principles of proportionality and purpose limitation under Article 4 of the KVKK:
- Tax legislation records and documents are retained for 5 years (Tax Procedural Law No. 213, Art. 253).
- Commercial books and documents are retained for 10 years (Turkish Commercial Code No. 6102, Art. 82).
- Data whose processing purpose no longer exists is erased, destroyed, or anonymized in periodic destruction cycles.
4. Cookies and Local Storage
Our platform utilizes essential technical cookies and browser Local Storage solely for user session management, language/theme preference retention, and basic navigation functionality.
ZTN Studio platforms strictly do not use third-party advertising, marketing, or tracking cookies that profile users across websites. You may restrict or clear cookies via browser settings; however, blocking essential cookies may limit certain platform functions.
5. Data Sharing with Third Parties and Transfer
Under no circumstances does ZTN Studio sell, rent, or transfer your personal data to third parties for commercial, advertising, or marketing purposes. Data privacy forms the foundation of our independent product studio values.
Your personal data may only be disclosed to technical infrastructure providers essential for service delivery (isolated PostgreSQL/Redis hosting, CDN, and secure email delivery services) under confidentiality agreements and to authorized judicial/administrative authorities upon reasonable legal demand.
6. User Rights (GDPR & KVKK)
As a data subject, under Article 11 of Law No. 6698 (KVKK) and GDPR regulations, you hold the following rights:
- To learn whether your personal data is processed and request information if processed.
- To learn the purpose of processing and whether data is used in accordance with its purpose.
- To know third parties to whom data is transferred domestically or abroad, and request correction of incomplete or inaccurate data.
- To request erasure or destruction (right to be forgotten) under Article 7 of KVKK and demand notification of such actions to third-party recipients.
7. Contact and Data Controller
For any questions, requests, or applications regarding this Privacy Policy, personal data processing, or exercising your KVKK/GDPR rights, you may contact the ZTN Studio data controller team directly.
You may submit inquiries via the Contact Form on our site or through our contact email. Your requests will be evaluated free of charge within 30 (thirty) days at the latest, with written or electronic responses provided.
8. Mobile Applications and Store Data Labels (App Data Nutrition Labels)
Mobile applications developed and published by ZTN Studio (e.g., Noor) strictly comply with Apple App Store and Google Play Store privacy standards and "App Data Nutrition" label requirements.
Required device permissions (local notifications, theme settings, local data storage, etc.) are processed locally on the device solely for application functionality. Unless explicitly stated, in-app data, personal preferences, and usage habits are not transmitted to external servers or third-party analytics tools.
9. Children's Privacy (COPPA Compliance)
ZTN Studio platforms and mobile applications do not target and do not knowingly collect personal data from children under the age of 13 (or applicable local statutory threshold).
We strongly recommend parents and legal guardians supervise children's internet activity. If we become aware that personal data of a child under 13 has been inadvertently collected, such data is immediately deleted and destroyed from our databases.
10. Privacy Statement for US/California Residents (CCPA / CPRA)
Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents hold specific rights regarding their personal data.
California residents have the right to know categories of personal data collected, request deletion, and opt out of the sale or sharing of their personal information ("Do Not Sell or Share My Personal Information"). ZTN Studio does not sell, rent, or share personal information for marketing purposes under any circumstances.
Have Privacy Questions?
Contact us regarding the use of your personal data or your GDPR/privacy rights.