Personal Data Notice (KVKK)

The controller is Barre & Sculpt. Address: Nişantaşı, Teşvikiye Mahallesi, Şişli / Istanbul. Email: info@barreandsculpt.co. Instagram: @barreandsculpt.

Data is collected electronically through sign-up, sign-in, checkout, the studio form, member support messages and necessary cookies.

Forming and performing the membership contract, collecting subscription fees, archive and live access, studio credits and reservations rely on Article 5/2-c (contract).

Payment-institution duties and commercial/tax records rely on Article 5/2-ç (legal obligation).

Site security, abuse prevention and answering contact requests rely on Article 5/2-f (legitimate interest), not in a way that overrides your fundamental rights.

A health note on the studio form is special-category data. It is processed only if you write it, to run the class safely. Leaving it blank does not block the enquiry.

Data is transferred to iyzico to take payment. Hosting and database providers, which may use servers in Turkey or abroad, can see what they need to run the service. Transfer is limited to what the contract and legitimate interest require.

When the purpose ends, and after statutory retention periods, data is deleted, destroyed or anonymised. Payment and identity data stay for as long as commercial record-keeping requires.

You may apply to the controller to:

• Learn whether your personal data is processed
• Request information if it is processed
• Learn the purpose and whether it is used in line with that purpose
• Know the third parties in Turkey or abroad to whom it is transferred
• Request correction if it is incomplete or inaccurate
• Request deletion or destruction under the conditions in Article 7
• Request that correction, deletion or destruction is notified to third parties who received the data
• Object to a result against you from analysis by exclusively automated systems
• Claim compensation if you suffer damage from unlawful processing

Write to info@barreandsculpt.co with enough detail to identify you. Applications are concluded within thirty days. If the process has a cost, the tariff set by the Personal Data Protection Board may be charged.

If your application is refused, you find the answer insufficient, or there is no answer in time, you may complain to the Personal Data Protection Board within thirty days of learning the reply and in any event within sixty days of your application.