KVKK Privacy Notice

1. Data controller

The data controller is [COMPANY NAME] (the "Company"), [ADDRESS], MERSIS No.: [MERSIS NO.].

Contact for applications under KVKK: [KVKK CONTACT EMAIL].

2. Personal data processed

• Identity and contact: full name, email address, and the name of the company/brand you represent.
• Account and security: a one-way hash of your password (the password itself is not stored), session records, two-factor authentication data, a daily salted hash of your IP address, and browser information.
• Transaction security and audit: audit logs of actions you take on the Platform, and approval and consent records (the version of the text accepted and the time of acceptance).
• Marketing data: campaign, brand and creative data you upload to the Platform, and data from the ad accounts you connect.

3. Purposes of processing

• Creating your membership, verifying your email address and managing your account.
• Providing the Platform's services (AI-assisted advertising planning, creative production, reporting).
• Ensuring information security: preventing unauthorized access, account takeover and abuse.
• Fulfilling legal obligations and using data as evidence in audit and dispute proceedings.
• Sending mandatory service notifications (verification, password reset, security alerts).

4. Legal grounds and method of collection

Your personal data is collected electronically through the registration form, the Platform interface and the third-party accounts you connect.

Processing is based on the legal grounds set out in KVKK Art. 5/2: (c) the conclusion and performance of a contract, (ç) compliance with a legal obligation, (e) the establishment, exercise or protection of a right, and (f) legitimate interest; where explicit consent is required, processing is based on your explicit consent.

5. Transfers (including abroad)

Your personal data may be transferred to hosting and infrastructure providers, our email delivery provider, authorized public institutions and organizations, and legal advisors, limited to the purposes above.

The Platform's AI features run on artificial intelligence providers based outside Türkiye (e.g. large language model and image generation services). When you use these features, the content you enter and the necessary context are transferred to these providers. Transfers abroad are carried out under KVKK Art. 9 by means of [TRANSFER MECHANISM: standard contract / explicit consent].

When you connect your advertising platform accounts (Meta, Google, TikTok, etc.), data exchange with these platforms is subject to the respective platform's terms.

6. Retention period

Personal data is retained for as long as the purpose of processing requires and for the limitation periods set out in applicable legislation; at the end of that period it is deleted, destroyed or anonymized. Audit logs are kept in tamper-proof form for [RETENTION PERIOD].

7. Your rights (KVKK Art. 11)

• to learn whether your personal data is being processed and, if so, to request information about it;
• to learn the purpose of processing and whether the data is used in line with that purpose;
• to know the third parties to whom your data is transferred in Türkiye or abroad;
• to request correction if your data is incomplete or inaccurate;
• to request deletion or destruction of your data under the conditions set out in KVKK Art. 7;
• to request that third parties to whom your data was transferred be notified of any correction, deletion or destruction;
• to object to an outcome that is to your detriment and results exclusively from the analysis of processed data by automated systems;
• to claim compensation if you suffer damage due to unlawful processing.

8. Applications

You may submit requests regarding your rights in writing to [KVKK CONTACT EMAIL] or to [ADDRESS], in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Applications are concluded within 30 days at the latest.

Website forms

The name, email, phone number, company and message you enter in the demo, publisher, creator, agency and contact forms on adsport.com.tr are processed to respond to your request and to get in touch with you.

To prevent abuse, we store a daily salted hash of your IP address (not the IP address itself), browser information and campaign source (UTM) parameters.

Before submitting a form, you confirm that you have read this privacy notice and explicitly consent to your data being processed for this purpose; the version of the text you accepted and the time of acceptance are recorded.