Murat Köksal Art ("we", "us", "our") is a photography and videography studio based in Göreme, Cappadocia, Türkiye. This policy explains what personal data we collect when you contact us, book a session, or visit muratkoksalart.com, and how we handle it in line with the EU General Data Protection Regulation (GDPR) and Türkiye's KVKK.
1. Who is the data controller
Murat Köksal Art is the controller of your personal data. For any privacy question you can reach us at
info@muratkoksalart.com.
2. What we collect
- Contact details you send us (name, email, phone, WhatsApp, Instagram handle).
- Booking details (date, location, package, hotel pick-up address, any creative notes).
- Photos and videos we capture of you during the session you booked.
- Payment confirmations (we do not store full card details).
- Basic analytics (anonymised page views, device, country) to improve the site.
3. Why we use it
- To answer enquiries and prepare your shoot (legal basis: contract / your request).
- To deliver edited photos and videos and provide after-shoot support (contract).
- To send invoices and meet tax obligations (legal obligation).
- To showcase selected work on our website and Instagram — only with your explicit consent (consent).
- To run and secure the website (legitimate interest).
4. Sharing your data
We never sell your data. We only share it with trusted processors who help us run the business — email and hosting providers, payment processors, and our on-set assistants and second photographers — all bound by confidentiality.
5. How long we keep it
Booking and invoicing data is kept for the period required by Turkish tax law (typically up to 10 years). Raw photos are kept for 3 months after delivery and then deleted unless you request otherwise. Marketing images shared with your consent are kept until you withdraw that consent.
6. Your rights
Under GDPR you have the right to access, correct, delete, restrict or port your data, to object to processing, and to withdraw consent at any time. Email
info@muratkoksalart.com and we will respond within 30 days.
7. Cookies
We use a minimal set of essential cookies and privacy-friendly analytics. No third-party advertising or cross-site tracking cookies are set.
8. Security
Data is stored on encrypted, access-controlled systems. If a breach ever affects your data we will notify you and the relevant authority within 72 hours.
9. Changes
We may update this policy as the studio evolves. The "Last updated" date above always reflects the current version.