Personal Data Protection: Privacy Notice
Last updated: October 2026
Data controller
Supramoon, Istanbul.
What we collect
Through the forms on our site: your name (or brand name), email address and the message/brief you share; on the discovery form, also the service area you are interested in; on a talent pool application, also your area of expertise and, if you share it, your portfolio link. We receive your data only when you submit a form; we do no automated profiling.
Why we process it
To respond to your request, schedule a call and prepare a tailored approach (Turkish DP Law art. 5/2-c). For talent-pool applications, to evaluate your application. The anonymous flow measurement on the discovery form contains no personal data.
Who it is shared with
Your form data is stored only in our client management panel, accessible only to our team; our panel and website are hosted on servers in Germany (EU). To notify our team of a new form submission by email we use our infrastructure provider Google (Google Workspace); because this provider's servers are located abroad, we ask for your explicit consent on the forms. Your data is never shared with third parties for marketing.
How long we keep it
Until your request is concluded; if no working relationship is formed, we delete it within 2 years at the latest.
Your rights (art. 11)
To access, correct, delete or object to the processing of your data, write to hello@supramoon.com; we respond within 30 days at the latest.
For cookies, see the Cookie & Privacy Policy