StemMaker Atölye

Privacy Notice

Last updated: 28 October 2026

This notice is provided by SVR AEROTECH UZAY VE HAVACILIK TEKNOLOJİLERİ, as data controller, under Turkish Personal Data Protection Law No. 6698 (“KVKK”). In case of any discrepancy, the Turkish version prevails.

1. Data controller

SVR AEROTECH UZAY VE HAVACILIK TEKNOLOJİLERİ
Address: Ada Mahallesi, Kumru Sokak No:13/A, Merkez, Sinop, Türkiye
Phone: 0 (544) 741 69 28

2. Personal data we process

  • Identity and contact: the parent’s or guardian’s full name, phone number and email address shared via WhatsApp, phone, email or in person when applying or asking for information.
  • Participant details: the participant’s full name, age, workshop of interest and any notes. Data of participants under 18 is provided by their parent or guardian.
  • Customer interactions: requests and messages sent by phone, WhatsApp or email.
  • Security data: access logs kept by the hosting server when you visit the website (IP address, browser details, time of access).
  • Images: photos and videos taken during workshops and events. These are published on the website or social media only with the explicit consent of the parent or guardian.
  • Marketing: the optional consent to receive announcements and the date it was given.
  • Digital badge: the participant’s name and completed programme, used to issue a badge on the Dijital Rozet platform.

3. Purposes

  • Receiving and assessing applications and contacting applicants,
  • Matching participants with a suitable workshop, group and term, and running enrolment and programmes,
  • Responding to requests and complaints,
  • Keeping the website secure and preventing misuse,
  • Issuing verifiable digital badges to participants who complete a programme,
  • Meeting legal obligations and responding to competent authorities,
  • With consent, showcasing workshop activities and sending announcements about new terms and events.

4. Legal grounds

  • Necessity for entering into or performing a contract (KVKK Art. 5/2-c): assessing applications and enrolment,
  • Compliance with legal obligations (Art. 5/2-ç),
  • Legitimate interest, provided it does not harm your fundamental rights (Art. 5/2-f): website security and access logs,
  • Explicit consent (Art. 5/1): publishing photos and videos; consent for commercial electronic messages under Law No. 6563.

5. How data is collected

Data is collected through WhatsApp, phone, email and in-person meetings, by automated and non-automated means. Access logs are generated automatically by the hosting server when you visit the site.

6. Transfers

We do not sell personal data or share it with third parties for advertising. Data is stored with our hosting provider, whose servers are located in Türkiye, and may be disclosed to competent public authorities where legally required. Data needed for digital badges may be shared with the Dijital Rozet platform. No personal data is transferred abroad through the website itself. If you choose to apply or ask questions on WhatsApp, your messages are carried by WhatsApp (Meta Platforms) and may be processed on servers abroad; this happens in line with Article 9 of the KVKK because you chose that channel and to answer your request. If you prefer not to use WhatsApp, you can contact us by phone, email or in person. The map on the Contact page is loaded from Google only if you choose “Load map”; see the Cookie Policy.

7. Retention

Data from applications that do not lead to enrolment is kept for up to 1 year from the application date; data of enrolled participants is kept for the periods required by law. After that, data is deleted, destroyed or anonymised. You can withdraw your marketing consent at any time.

8. Your rights under Article 11

You may ask us whether your data is processed and request information about it; learn the purpose of processing and whether it is used accordingly; know the third parties to whom it is transferred in Türkiye or abroad; request correction of incomplete or inaccurate data; request deletion or destruction under Article 7; request that third parties be notified of such corrections or deletions; object to a decision against you resulting solely from automated processing; and claim compensation for damage caused by unlawful processing.

9. How to apply

You may send your request, together with information identifying you, through the following channels:

Requests are answered free of charge as soon as possible and within 30 days at the latest. If the process involves an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.