Privacy Policy

This policy applies to the baselinefair.com website. You do not need an account to browse the site and there is no way to register; personal information is collected only when you fill in the quote form or write to us directly by email.

The purposes, legal bases and your rights under Turkish Law 6698 are set out in more detail in a separate document, the Data Protection Notice. Where the two documents conflict, the Data Protection Notice prevails.

The quote form collects the following information.

Identity and contact

Full name, company name, email address and telephone number. All four are required fields, needed in order to respond to the request.

Project details

Fair name, fair date, stand area in square metres, stand type and budget range. All optional and may be left blank.

Free-text message

The field where you describe your request. Everything you write here is recorded; we recommend not putting personal data into it that is not needed.

Attachment (optional)

You may attach a file such as a hall plan, a logo or an existing design. Accepted formats are PDF, JPG, PNG, WEBP, DWG, DXF and ZIP, up to 25 MB. The file name, size and type are written to the record.

Consent record

To submit the form you must tick the box relating to this notice; the fact that the box was ticked is stored together with the request.

Technical data

A request number, the submission time, the language the form was filled in, browser information (user-agent) and which page the form was sent from (referer). A salted SHA-256 hash of your IP address is also kept — the raw IP address is never stored anywhere.

None of this is collected if you only browse the site. The only record of your visit is the hosting provider’s technical server logs and, only if you accepted them, measurement data.

What you enter in the form is used only to answer your request, prepare a proposal, and run the project if the work turns into a contract. Your request is both written to durable storage and emailed to BASELINE’s two business addresses; the record is written first, so that your request is not lost even if the email fails.

When you submit the form, an automatic acknowledgement is sent to the email address you entered, confirming that the request arrived. It is not a marketing email and it does not create a subscription.

Your information is not sold, not rented and not shared with third parties for advertising.

The site uses no advertising or tracking cookies. Non-essential measurement cookies run only if you accept them through the cookie notice; until you do, the measurement script is never loaded. Your browser’s local storage also holds one small value remembering your motion/animation preference — that value is never sent to the server.

The details, and how to change that preference, are explained in the Cookie Policy.

A small number of service providers are used to run the site. Each one sees only the data needed to do its own job.

Hosting

The site and the stored requests live on a hosting provider’s infrastructure. The provider’s name and server location will be stated in the final version of this document.

Email delivery

Notification and acknowledgement emails are sent through Resend where it is configured; in that case the form content passes through that provider’s systems as the body of the email.

Measurement

Active only where cookie consent has been given, producing aggregate usage statistics; the identity and contact details from the quote form are not sent to the measurement provider.

Some of these providers may hold servers outside Turkey. The legal framework for transfers abroad is explained in the relevant section of the Data Protection Notice.

Your personal data is kept for as long as it is needed for the purpose it was processed for, and until any mandatory retention period required by legislation has expired. Where an enquiry does not turn into work, the request is kept as a record of commercial correspondence; where it does, it is kept for the period required by contract, invoicing and commercial bookkeeping legislation.

Once the period expires the data is deleted, destroyed or anonymised. The final version of this document will state a concrete period for each category of data; the version published today explains the criteria by which that period is set rather than stating a figure.

Connections are encrypted with HTTPS, raw IP addresses are never stored, the form is rate-limited against repeated submissions, and uploads are restricted by both size and type. No transmission channel or storage method is completely secure, so we recommend not sending sensitive information through the form where it is not needed.

You have the right to access your data, to ask for it to be corrected or erased, and to object to processing. The full list and the application procedure are set out in the Data Protection Notice; writing to one of the email addresses below is enough to start.

If you reach the site from the European Economic Area or the United Kingdom, local data protection legislation may give you additional rights; you can use the same addresses. Which rights arise under which legislation will be clarified during legal review.

This site is aimed at business customers and does not offer services to children. We do not knowingly collect personal data from anyone under eighteen, and we delete such data if we notice it has been sent to us.

This policy is updated as the way the site works changes. The current version is always published at this address.