GDPR & DATA PROTECTION NOTICE
Data Subject Information Notice pursuant to GDPR and Turkish KVKK
1. Identity of the Data Controller
TRIOARCHITECTS ("Company", "we", or "TRIO") acts as the data controller regarding the personal data processed through our website (trioarchitects.com.tr/en/), digital platforms, and direct communications. We adhere strictly to applicable data protection legislation, including the EU General Data Protection Regulation (GDPR) and Turkish Law No. 6698 on the Protection of Personal Data (KVKK).
2. Legal Bases for Processing (GDPR Art. 6)
We process personal data on the following legal bases:
Consent (Art. 6(1)(a))
Where you explicitly choose to subscribe to updates or provide voluntary career portfolio materials.
Contractual (Art. 6(1)(b))
To take necessary steps at your request prior to entering into an architectural services contract or employment relationship.
Legitimate Interest (Art. 6(1)(f))
To safeguard our digital infrastructure against security breaches, manage client inquiries, and improve architectural service delivery.
Legal Duty (Art. 6(1)(c))
To fulfill statutory and regulatory duties under applicable national laws.
3. Categories of Personal Data
Identity & Contact
Full name, email address, telephone number, business affiliation.
Recruitment Data
Résumé/CV, architectural portfolio files, education history, work samples.
Technical Telemetry
Anonymized server logs, IP addresses, browser agents, and security event indicators.
4. International Data Transfers
When utilizing cloud services (such as Cloudflare edge caching or enterprise mail servers), transfers of personal data are conducted under appropriate safeguards, including Standard Contractual Clauses (SCCs) and high-grade data encryption in transit and at rest. We do not sell or monetize personal data under any circumstances.
5. Your Rights as a Data Subject
Under the GDPR and KVKK, you possess the following rights:
- Request access to copies of your personal data,
- Request rectification of inaccurate or incomplete records,
- Request erasure of your data ("right to be forgotten") where permissible by law,
- Restrict or object to specific processing operations,
- Data portability to receive structured, machine-readable exports of data you provided,
- Lodge a complaint with a competent supervisory data protection authority.
6. Exercise of Rights & Inquiries
To submit a data access or deletion request, please reach out to our data privacy team: