Last Updated: [01.01.2026] Effective Date: [Date]
1. Data Controller InformationCompany Name: WBE Digital Marketing Agency Address: Suadiye Neighbourhood, Bağdat Avenue, Kazım Özalp Street, No. 10, Flat 8, Kadıköy/Istanbul Telephone: 0542 722 72 34 Email: [email protected]
2. Purpose and ScopeThis policy sets out the principles governing the processing of personal data collected from WBE Digital Marketing Agency’s customers, potential customers, suppliers, employees and website visitors. The policy has been drawn up in accordance with the Law on the Protection of Personal Data No. 6698 (KVKK) and relevant legislation.
3. Personal Data Collected and Purposes of ProcessingOur company processes the following personal data for legitimate purposes and to a limited extent:
3.1. Categories of Data Collected-
Identity Information: First name, surname, Turkish ID number (where legally required)
-
Contact details: Email address, telephone number, address details
-
Customer Transaction Details: Invoice details, order history, payment details
-
Marketing Information: Preferences, subscription status, campaign participation details
-
Website Usage Data: IP address, cookies, browser information, page view history
-
The provision of digital marketing services and the fulfilment of contracts
-
Management of customer relations and communication processes
-
Compliance with legal and regulatory requirements
-
Planning and execution of marketing activities (subject to obtaining explicit consent)
-
Analysing and improving website performance
Personal data is processed, whether by automated or non-automated means, as part of a data filing system. The legal grounds for our processing activities are as follows:
-
Article 5(2)(c) of the Personal Data Protection Act: The conclusion or performance of a service contract
-
Article 5(2)(c) of the Personal Data Protection Act: Fulfilment of the data controller’s legal obligation
-
Article 5(2)(f) of the Personal Data Protection Act: Where it is necessary for our legitimate interests
-
KVKK Article 5/1: Explicit consent (only where explicit consent has been given)
Your personal data is shared only in the following circumstances and for the purposes specified below:
5.1. Domestic Data Transfer-
Our service providers (server hosting, software development)
-
Public bodies and organisations where legally required
-
Financial institutions (for payment transactions)
The transfer of personal data abroad is carried out provided that the conditions set out in Article 9 of the Personal Data Protection Law (KVKK) are met and the necessary security measures are in place.
6. Data SecurityOur company takes the following technical and organisational measures to protect your personal data:
-
Secure network infrastructure and firewalls
-
Restricted access and authorisation systems
-
Regular security audits and tests
-
Staff training and confidentiality undertakings
-
Data masking, encryption and anonymisation techniques
Your personal data is retained for as long as is necessary for the purposes of processing. These periods are:
-
The term of the service contract and the subsequent statutory limitation periods
-
Statutory retention requirements (10 years for accounting records)
-
For as long as our legitimate interests continue
-
Where explicit consent has been given, until you withdraw your consent
In accordance with Article 11 of the Personal Data Protection Act (KVKK), you have the following rights regarding your personal data:
-
Find out whether your personal data is being processed
-
If this has been edited, please request information regarding this.
-
To ascertain the purpose of processing and whether the data is being used in accordance with that purpose
-
Not knowing the third parties to whom data is transferred, whether within the country or abroad
-
Please request corrections if any information is missing or has been processed incorrectly
-
Request for the erasure or destruction of personal data in accordance with the conditions set out in Article 7 of the KVKK
-
Request that third parties to whom the data has been transferred be notified of the above corrections and deletions
-
You have the right to object to a decision being made solely through the automated processing of your personal data that produces a result detrimental to you
-
If you suffer loss or damage as a result of the unlawful processing of personal data, you may claim compensation for such loss or damage
To exercise your rights, please provide the following along with documents verifying your identity:
-
Written Application: By post to our company address
-
Email: By sending an email with the subject line ‘KVKK application’ to [email protected]
-
Other Methods: You may apply using other methods specified by the Ministry.
Your applications will be processed free of charge within 30 (thirty) days at the latest. However, should the process incur additional costs, a fee may be charged in accordance with the tariff set by the Personal Data Protection Authority.
10. Cookie PolicyOur website uses cookies to improve the user experience. Types of cookies:
-
Essential Cookies: This is essential for the website’s core functions
-
Performance Cookies: For website usage statistics
-
Functional Cookies: To remember user preferences
-
Targeting Cookies: For marketing purposes (only with explicit consent)
You can manage your cookie preferences via your browser settings or use the cookie management panel on our website.
11. Amendments and UpdatesThis policy may be updated due to legal changes or changes to company practices. The current policy will always be published on our website and we will inform you of any significant changes.
12. ContactFor any questions, comments or requests regarding the protection of your personal data:
WBE Digital Marketing Agency Address: Suadiye Neighbourhood, Bağdat Avenue, Kazım Özalp Street, No. 10, Flats 8, Kadıköy/Istanbul Telephone: 0542 722 72 34 Email: [email protected]
This policy has been drawn up in accordance with the Personal Data Protection Act (KVKK) and relevant legislation; our company attaches great importance to the protection of personal data.