This Website Visitors Privacy Notice explains how personal data is processed when you visit ad1film.com or bahar.ad1film.com.
This Notice applies to general website visits. Personal data submitted through the Project Review Form, Bahar or workshop-related processes is covered by the relevant separate privacy notice available through the Privacy Centre.
1. Data Controller
The data controller is
AD1 FİLM PRODÜKSİYON TİCARET ANONİM ŞİRKETİ
(“AD1 FILM” or the “Company”).
Current corporate and registered-office information is available on the
Legal Notice and Company Information page.
2. Personal Data That May Be Processed
Depending on how the websites are accessed and the preferences selected, the following categories of personal data may be processed:
- Connection and log data:
IP address, access date and time, requested page, referring page,
server records, error records and security events. - Device and browser data:
browser type, operating system, device type, language preferences,
screen characteristics and similar technical information. - Cookie and identifier data:
session identifiers, cookie identifiers, consent preferences and
similar online identifiers. - Website-usage data:
pages visited, navigation events, interaction information, approximate
location derived from technical data and website-performance records. - Security-verification data:
technical information generated through services used to distinguish
legitimate visitors from automated or harmful traffic. - Analytics and campaign-measurement data:
information generated through analytics or promotional measurement
technologies where the visitor has provided the required permission.
AD1 FILM does not intentionally request special-category personal data through an ordinary website visit.
3. Purposes of Processing
Personal data may be processed for the following purposes:
- Providing and displaying the websites and their essential functions;
- Maintaining website and information-security controls;
- Detecting and preventing spam, misuse, malicious traffic and unauthorised access;
- Managing server capacity, traffic routing, performance and technical continuity;
- Identifying and resolving technical faults and compatibility issues;
- Recording and applying cookie and privacy preferences;
- Understanding general website performance and visitor interaction where permitted;
- Measuring the effectiveness of promotional activity where optional permission has been provided;
- Complying with applicable legal obligations and authorised public requests;
- Establishing, exercising or protecting the legal rights of the Company or third parties.
4. Collection Methods
Personal data is collected automatically or electronically through website servers, hosting infrastructure, WordPress, security and traffic services, cookies, tags, pixels, browser technologies and similar
technical tools.
The websites may use services provided through Cloudflare, Google Analytics, Google reCAPTCHA, Meta Pixel and hosting or technical-service providers, subject to the visitor’s applicable cookie preferences.
5. Legal Grounds
Personal data required for essential website operation, security, technical continuity, legal compliance and protection of rights may be processed on the legal grounds that processing:
- is necessary for the Company to comply with its legal obligations;
- is necessary for the establishment, exercise or protection of a right; or
- is necessary for the legitimate interests of the Company, provided that
the fundamental rights and freedoms of the data subject are not adversely affected.
Non-essential analytics, advertising or campaign-measurement technologies are used on the basis of the visitor’s prior, specific and freely given consent where consent is legally required.
Refusal of optional cookies does not prevent access to the essential functions of the websites.
6. Recipients and Service Providers
Personal data may be disclosed, to the extent necessary for the relevant purpose, to the following recipient groups:
- Hosting, infrastructure and technical-support providers;
- Website security, content-delivery and traffic-management providers;
- Analytics and measurement providers where the relevant permission has been provided;
- Professional advisers supporting legal, technical or information-security processes;
- Courts, administrative authorities and other legally authorised public bodies where required by law.
Access to personal data within AD1 FILM is limited to authorised persons who require access for the relevant technical, administrative or legal purpose.
7. Transfers Outside Türkiye
The hosting infrastructure used for the websites is located in Germany. Certain technical, security, analytics and measurement service providers, including Cloudflare, Google and Meta services, may process or make personal data accessible outside Türkiye.
Transfers outside Türkiye are carried out only where a lawful transfer condition exists and, where required, an appropriate safeguard or another legally recognised transfer mechanism has been established in accordance
with Article 9 of the Turkish Personal Data Protection Law.
Optional technologies involving overseas processing are activated only in accordance with the visitor’s applicable preferences and the relevant legal requirements.
8. Cookies
Essential cookies may be used to support website security, session continuity, consent records and functions expressly requested by the visitor.
Analytics, performance, advertising and campaign-measurement cookies are not treated as essential and are used only in accordance with the visitor’s cookie preferences and applicable legal requirements.
Information about individual cookies, providers, purposes and storage periods is available in the
Cookie Policy.
9. Retention
Personal data is retained only for the period reasonably necessary for the relevant technical, security, analytics or legal purpose and for any applicable statutory retention period.
Server and security records may be retained for the period required to monitor security incidents, investigate technical issues and protect legal rights.
Cookie-specific storage periods are stated separately in the Cookie Policy. Consent and preference records may be retained for the period necessary to demonstrate and apply the visitor’s choices.
Data is deleted, destroyed or anonymised when the relevant processing purpose and applicable retention requirement have ended.
10. Data Security
AD1 FILM applies appropriate technical and organisational measures to support the confidentiality, integrity and availability of personal data.
These measures may include access restrictions, security monitoring, software updates, traffic protection, logging, backup controls and management of authorised service providers.
11. Children and Workshop Pages
The Project Review Form is intended for persons aged eighteen or over. Privacy information concerning workshop applicants, participants under eighteen and their parents or legal guardians is provided through the
separate Workshop Participants and Parents Privacy Notice.
12. Rights of Data Subjects
Under Article 11 of the Turkish Personal Data Protection Law No. 6698, data subjects may request:
- confirmation of whether their personal data is processed;
- information about processing where personal data has been processed;
- information about the purpose of processing and whether data is used consistently with that purpose;
- information about third parties to whom personal data has been transferred in Türkiye or abroad;
- correction of incomplete or inaccurate personal data;
- deletion or destruction of personal data where the applicable conditions are met;
- notification of relevant correction, deletion or destruction operations to recipients;
- objection to a result arising against the person through processing exclusively by automated systems; and
- compensation where damage has resulted from unlawful processing.
Application methods and the information required for a valid request are explained on the Data Subject Request Form page.
13. Changes to This Notice
This Notice may be updated following changes to website technologies, service providers, processing activities or applicable legal requirements. The current version becomes effective when published on this page.
14. Applicable Law, Competent Authorities and Language
This Notice is governed by the laws of the Republic of Türkiye, including the Turkish Personal Data Protection Law No. 6698. Mandatory application and complaint rights before the Turkish Personal Data Protection Authority and any other legally competent authority are reserved.
For disputes not subject to a mandatory authority or mandatory venue, the Courts and Enforcement Offices of Antalya, Türkiye shall have jurisdiction.
In the event of any difference or inconsistency between the Turkish and English versions of this Notice, the Turkish version shall prevail.