Personal Data Protection and Privacy Policy

Identity of the Data Controller

Pursuant to Turkish Personal Data Protection Law No. 6698 (KVKK), your personal data is processed by IWT Dijital Medya Ajansi Ltd. Sti. (the Company) acting as the data controller, within the scope described below.

Categories of Personal Data Processed

  • Identity data (name and surname)
  • Contact data (phone, e-mail, address)
  • Customer transaction data (request, quote and message content)
  • Marketing data (cookie records and campaign preferences, subject to explicit consent)
  • Transaction security data (IP address and log records)

Purposes of Processing

  • Responding to requests, quotes and contact forms
  • Conducting pre-contractual negotiation and quotation processes
  • Managing customer relationships and providing support services
  • Sending commercial electronic messages and carrying out marketing activities, subject to explicit consent
  • Ensuring website security and performing statistical analysis
  • Fulfilling legal obligations

Legal Basis

Your personal data is processed on the legal grounds set out in Articles 5 and 6 of the KVKK, including that processing is directly related to the establishment or performance of a contract, is necessary for compliance with a legal obligation, is necessary for the legitimate interests of the data controller provided that this does not harm your fundamental rights and freedoms, and, where required, your explicit consent.

Transfer of Personal Data

Your personal data may be transferred to authorized public institutions where required by law, to service providers such as hosting, e-mail delivery and analytics providers, and where necessary to legal advisors, in accordance with the conditions set out in Articles 8 and 9 of the KVKK.

Retention Period

Your personal data is retained for the period required by the purpose of processing and any applicable statutory limitation periods, after which it is deleted, destroyed or anonymized.

Your Rights as a Data Subject

Under Article 11 of the KVKK, you may apply to the Company to learn whether your personal data is processed, request information about such processing, learn the purpose of processing and whether it is used accordingly, learn the third parties to whom your data is transferred domestically or abroad, request correction of incomplete or inaccurate data, request deletion or destruction of your data under the conditions set out in the law, request that these actions be notified to third parties to whom your data has been transferred, object to a result against you arising from analysis of your data exclusively through automated systems, and request compensation for damages arising from unlawful processing.

Cookie Consent Records

To be able to demonstrate your cookie preferences, the consent record identifier, your category preferences, the date of consent, your language preference, the policy version, browser information and a truncated IP address are processed on the legal grounds of legitimate interest and compliance with a legal obligation under Articles 5/6 of the KVKK; These records are retained for up to 180 days.

How to Apply

You may submit requests regarding the rights listed above by e-mail to [email protected] or in writing to the Company address. Your request will be finalized free of charge as soon as possible and within thirty days at the latest, depending on its nature.

Cookie Consent Records

To be able to demonstrate your cookie preferences, the following are processed: the consent record identifier (ConsentId), a unique event identifier (EventId), your category preferences, the date/time of consent, your language preference, the policy version (PolicyVersion), an integrity digest of the exact text shown to you at the time of consent (ConsentNoticeSha256), your browser information (User-Agent) and a truncated IP address.

This processing is based on the legal grounds of legitimate interest and compliance with a legal obligation under KVKK Articles 5/6 and, where applicable, GDPR Art. 6(1)(c)/6(1)(f) (this classification is a draft, subject to approval by the legal team).

These records are retained for up to 180 days.