Privacy Policy
Effective Date: This Privacy Policy is effective as of its publication on this website.
NESTORA COWORKING SPACE (“Nestora”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you visit or use the Nestora website, contact us, submit an inquiry, request information about our coworking services, or otherwise interact with us through our website.
Nestora processes personal data in accordance with applicable data protection laws, including Law No. 6698 on the Protection of Personal Data (“KVKK”) and, where applicable, the EU General Data Protection Regulation (“GDPR”).
1. Personal Data We Collect
Depending on how you interact with Nestora, we may collect the following categories of personal data:
Information you provide to us. When you contact us, submit a form, request a tour, inquire about membership or otherwise communicate with us, we may collect:
- Full name
- Email address
- Telephone number
- Company or organization name
- Information included in your message
- Preferred workspace or membership information
- Any other information you voluntarily provide
Membership and service information. If you become a Nestora member or purchase our services, we may process information necessary to manage your membership and provide the relevant services.
Technical information. When you visit our website, certain technical information may be collected automatically, such as:
- IP address
- Browser type and version
- Device type
- Operating system
- Language preferences
- Pages visited
- Date and time of visits
- Referring website
- Website interaction data
The information collected depends on the website technologies and analytics tools we use.
2. How We Use Your Personal Data
We may process your personal data for the following purposes:
Responding to inquiries — to respond to questions, requests, booking inquiries and messages submitted through our website.
Providing our services — to manage memberships, workspace reservations, tours, payments and other services you request from Nestora.
Communication — to communicate with you regarding your inquiries, membership, reservations, services or other requests.
Website operation — to operate, maintain, secure and improve our website and digital services.
Analytics and improvement — to understand how visitors use our website and improve its functionality, content and user experience.
Legal and regulatory obligations — to comply with applicable legal obligations, respond to lawful requests and protect our legal rights.
Marketing — where permitted by applicable law and, where required, with your consent, we may use your contact information to send information about Nestora, our services, events or other updates. You may unsubscribe from marketing communications at any time.
3. Legal Bases for Processing
Under KVKK, personal data may be processed only where one of the conditions established by law applies. These may include, depending on the specific processing activity:
- Explicit consent;
- Processing expressly required by law;
- Processing necessary for the establishment or performance of a contract;
- Processing necessary for compliance with a legal obligation;
- Processing necessary for the establishment, exercise or protection of a right;
- Processing necessary for the legitimate interests of the data controller, provided that fundamental rights and freedoms are not harmed; or
- Other applicable legal grounds under KVKK.
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
For visitors to whom the GDPR applies, we may rely on the applicable GDPR legal bases, including consent, contractual necessity, legal obligations and legitimate interests, as appropriate.
4. Who May Receive Your Personal Data
We do not sell your personal data. We may share personal data where necessary with:
- Service providers supporting our website;
- Hosting and infrastructure providers;
- Website analytics providers;
- IT and technical support providers;
- Communication and email service providers;
- Payment service providers, where applicable;
- Professional advisers, such as lawyers or accountants, where necessary;
- Public authorities or other recipients where required by law.
We only share information that is relevant and necessary for the applicable purpose. Where third parties process personal data on our behalf, we take appropriate measures to ensure that such processing is carried out in accordance with applicable data protection requirements.
5. International Data Transfers
Some of our service providers or technology partners may process personal data outside Türkiye. Where personal data is transferred outside Türkiye, we will take the measures required under applicable data protection legislation.
Under the current KVKK framework, international transfers may be subject to applicable adequacy decisions, appropriate safeguards such as standard contracts, or other legally permitted transfer mechanisms. Where the GDPR applies, we will use an appropriate transfer mechanism required by the GDPR, such as an adequacy decision or appropriate safeguards.
6. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law. The retention period may depend on:
- The purpose for which the information was collected;
- The duration of our relationship with you;
- Legal, accounting or regulatory requirements;
- The establishment, exercise or defence of legal claims;
- Our legitimate business requirements.
When personal data is no longer required, we will delete, destroy or anonymize it in accordance with applicable law and our data retention procedures.
7. Cookies and Similar Technologies
Our website may use cookies and similar technologies to improve functionality, analyze website traffic, and enhance user experience. You may choose to disable cookies through your browser settings; however, some website features may not function properly.
This website uses only essential cookies required for:
- Website functionality
- Security
- System stability
We do not use advertising cookies, third-party tracking tools, or behavioural analytics systems.
8. Your Rights Under KVKK
Subject to the conditions and limitations provided by applicable law, you may have the right to:
- Learn whether your personal data is being processed;
- Request information about the processing of your personal data;
- Learn the purpose of processing and whether your data is used in accordance with that purpose;
- Know the third parties to whom your personal data has been transferred;
- Request correction of incomplete or inaccurate personal data;
- Request deletion or destruction of personal data where the legal conditions are met;
- Request notification of correction, deletion or destruction to relevant third parties where applicable;
- Object to a result arising against you through analysis of your personal data exclusively by automated systems;
- Request compensation for damages arising from unlawful processing of your personal data.
These rights are provided under Article 11 of KVKK and are subject to the conditions and procedures established by applicable legislation.
9. How to Exercise Your Rights
To exercise your rights or ask questions about the processing of your personal data, you may contact us at: info@conestora.com
Your request should contain sufficient information to allow us to identify you and understand the nature of your request. We will process your request in accordance with the applicable legal requirements and applicable procedures established under KVKK.
10. GDPR Rights
If the GDPR applies to you, you may also have the following rights, subject to applicable legal conditions:
- Right of access;
- Right to rectification;
- Right to erasure;
- Right to restriction of processing;
- Right to data portability;
- Right to object to certain processing;
- Right to withdraw consent where processing is based on consent;
- Right to lodge a complaint with a competent data protection supervisory authority.
You may contact us using the details provided above to exercise these rights.
11. Data Security
We take reasonable technical and organizational measures designed to protect personal data against unauthorized access, unauthorized disclosure, loss, destruction, alteration, and unlawful processing. However, no website, electronic transmission or storage system can be guaranteed to be completely secure.
12. Children's Privacy
Our website and services are intended for adults and business users. We do not knowingly collect personal data from children through our website. If you believe that a child has provided us with personal data, please contact us so that we can take appropriate action.
13. Third-Party Websites
Our website may contain links to third-party websites, services or social media platforms. We are not responsible for the privacy practices, security or content of third-party websites. We encourage you to review the privacy policies of any third-party websites you visit.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or privacy practices. When we make changes, we will update the “Effective Date” at the top of this page. We encourage you to review this Privacy Policy periodically.