Cookie Policy
This Cookie Policy explains the types of cookies used during your visit to the website operated by IWT Dijital Medya Ajansi Ltd. Sti. (the Site), the purposes for which they are used, their retention periods and how you can manage your preferences.
What is a Cookie
Cookies are small text files placed on your device by your browser when you visit a website. Cookies are used to ensure that the site functions correctly, to remember your preferences, to analyze how the site is used and to provide content or advertising tailored to you.
Categories of Cookies Used
- Strictly Necessary Cookies: Required for essential site functions such as session management, form security and remembering your cookie preferences; these cannot be disabled.
- Functional Cookies: Used to remember preferences such as language or region.
- Performance and Analytics Cookies: Used to collect visitor statistics (Google Analytics) and measure site performance.
- Marketing and Advertising Cookies: Used to show advertisements that may be of interest to you; activated only with your explicit consent.
Cookie Inventory
| Cookie Name | Category | Purpose | Duration | Party |
|---|---|---|---|---|
| cookie_consent_level | Strictly Necessary | Stores your cookie preferences | 365 days | First party |
| .AspNetCore.Antiforgery.* | Strictly Necessary | Security (CSRF) protection for form submissions | Session | First party |
| .AspNetCore.Session / ASP.NET_SessionId | Strictly Necessary | Session state management | Session | First party |
| _ga | Performance/Analytics | Google Analytics - distinguishes visitors | 2 years | Google (third party) |
| _ga_* | Performance/Analytics | Google Analytics 4 - session state tracking | 2 years | Google (third party) |
| _gid | Performance/Analytics | Google Analytics - short-term session distinction | 24 hours | Google (third party) |
| cookie_consent_user_accepted | Strictly Necessary | Stores whether you accepted or rejected cookies | 365 days | First party |
| cookie_consent_user_consent_token | Strictly Necessary | Unique identifier of your consent record (ConsentLog), used as proof | 365 days | First party |
| _gcl_au | Advertising/Marketing | Google Ads conversion linking (Google tag / gtag.js) | 90 days | Google (third party) |
| Google Maps embed (iframe) | Functional | Displays the location map on the Contact page; the iframe is never loaded before consent | Governed by Google's own cookie policy | Google (third party) |
| arm_consent_proof | Strictly Necessary | Security proof that helps verify the client received a valid cookie preference page/banner response from the server; carries a random/pseudonymous identifier (HttpOnly, Secure over HTTPS, SameSite=Lax) | 24 hours | First party |
This inventory is kept up to date according to the analytics and advertising integrations actively used on the site; the table is updated whenever a new tracking script is added.
Google Services and Third-Party Sharing
When you view the Google Maps embed, your IP address and browser information are transmitted to Google; you can review the scope of this sharing on Google's Partner Site Technologies page. The Montserrat font used on this site is self-hosted on our own servers; therefore no request is sent to Google for the font.
Managing Your Cookie Preferences
You may change your preferences regarding non-essential cookie categories at any time and withdraw any consent given, using the Cookie Settings link at the bottom of the page. You may also delete cookies or configure your browser to block them from the browser settings menu; in that case some parts of the site may not function properly.
Contact
For questions about our cookie practices, you may contact us at [email protected].
Storage of Consent Records
To be able to prove your consent regarding cookie preferences, the following data is processed as a ConsentLog record:
- The unique identifier of the consent record (ConsentId) and a unique event identifier (EventId)
- The category preferences you provided (functional, performance/analytics, advertising/marketing)
- The date and time of consent
- Your language preference
- The Cookie Policy version applicable at the time of consent (PolicyVersion) and an integrity digest of the exact text shown to you at that time (ConsentNoticeSha256)
- Your browser information (User-Agent)
- A truncated/minimized (last octet/64 bits zeroed) IP address
This data is processed on the legal grounds of legitimate interest and compliance with a legal obligation under KVKK Articles 5/6 and, where applicable, GDPR Art. 6(1)(c)/6(1)(f) (this classification is a draft, subject to approval by the data controller/legal team).
These records are retained for up to 180 days from the date of consent for the purpose of demonstrating compliance with our legal obligations, after which they are deleted or anonymized; they may also be deleted manually by an authorized administrator from the admin panel.