Personal Data Protection Notice
A concise English notice about the processing of personal data submitted through Creaticio assessments and enquiry forms.
Data controller
This notice relates to personal data collected through the Creaticio Agency website and its services. The data controller’s registered legal name, postal address and contact email are presented below; “Creaticio Agency” is a trade-facing brand name and should not be mistaken for an unverified legal entity.
Categories of personal data
We may receive your name, company, professional email address, optional phone number, website, markets of interest, enquiry details and messages. In Growth Audit™ and Export Readiness Score™, your responses, category scores, total score and indicative recommendations may be linked to your enquiry. Limited technical and referral information, such as anti-abuse identifiers and UTM parameters, may also be processed.
Purposes of processing
We use information to respond to enquiries, generate requested assessment outputs, consider a potential service relationship, manage follow-ups and proposals, protect the website, and fulfil legal obligations. We do not treat a business enquiry as automatic consent to unrelated promotional mailing.
Collection method and legal bases
Data is collected directly through forms and technically as you use the site. Depending on the particular activity, lawful grounds under Article 5 of Turkish Law No. 6698 can include steps connected with a contract (5/2(c)), compliance with a legal obligation (5/2(ç)), legitimate interests subject to balancing (5/2(f)), or explicit consent where required.
Recipients and international transfers
Information may be shared to the extent necessary with hosting, business email, IT support or CRM service providers, relevant advisers, and authorities where legally required. Actual processors and hosting locations must be confirmed against the live service inventory. Transfers outside Türkiye require an applicable mechanism under Article 9 of the KVKK, including appropriate safeguards when required.
Retention and security
We retain records only for the purposes and periods permitted or required under applicable law, then apply appropriate deletion, destruction or anonymisation. Access controls and proportionate safeguards are used; absolute security cannot be guaranteed.
Your rights under Article 11
You may request confirmation of processing, information about the purposes and recipients, correction, erasure or destruction where conditions apply, notification to recipients, objection to certain solely automated outcomes, and remedies for unlawful processing, subject to applicable legal requirements.
How to contact us
Please use the data protection contact details below. Identification and formal request procedures may be required under Turkish legislation.