Customer Information Notice

This is an informational translation; the Turkish version is binding.

This notice is for customers who receive services from AGO and users of the customer panel (My Account). If you have only visited the site or filled in a form, the Visitor Information Notice applies.

Data controller

Pursuant to Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data is processed by A-GO Dijital Medya ("AGO"), in its capacity as data controller, within the scope described in this notice. The identity and contact details of the data controller are provided in the box at the top of the page.

Which personal data do we process?

• Identity: name, surname; Turkish Republic identity number for individual invoicing.
• Contact: e-mail address, telephone number, billing address.
• Finance: for corporate invoicing, company title, tax office and tax number; records of agreement fees and periodic payments. We do not store your card details.
• Customer transaction: agreements, packages, work performed, advertising spend, measurement data and monthly reports.
• Transaction security: customer panel login records, IP address, browser information, an irreversible hash of your password (your password itself is not stored).
• Marketing (only if you give consent): your consent to commercial electronic messages, together with the date of consent and IP address.

For what purposes and on which legal grounds?

• To establish and perform the service contract; to manage campaigns, report and provide the customer panel — the establishment or performance of a contract (KVKK md.5/2-c).
• To issue invoices and retain commercial books and documents — to fulfil our legal obligation (md.5/2-ç; Tax Procedure Law (VUK), Turkish Commercial Code (TTK)).
• To ensure account security and prevent unauthorised logins — our legitimate interest (md.5/2-f).
• Collection of receivables and possible disputes — the establishment, exercise or protection of a right (md.5/2-e).
• To send campaign, announcement and information messages — only your explicit consent / consent to commercial electronic messages (md.5/1; Law No. 6563 on the Regulation of Electronic Commerce). Not giving consent does not affect the service. Details: Electronic Message Consent.

How do we collect personal data?

Your data is collected electronically by you during the contract and quotation processes, when you fill in your profile information in the customer panel and while using the panel, and via e-mail, telephone and meetings; and by partly automated means through reports obtained with your authorisation from your advertising and measurement accounts.

To whom and for what purpose do we transfer it?

• To suppliers from whom we receive hosting, e-mail and accounting/financial advisory services — for the performance of the service and legal obligations, to the extent necessary (md.8/2).
• To authorised public institutions and organisations — when required by legislation (md.8/2 and md.5/2-ç).
• To advertising platforms (Google, Meta, etc.) — only the information required for account management so that we can manage your campaigns on your behalf; the servers of these platforms may be located abroad. This transfer is carried out in accordance with the conditions set out in KVKK md.9.

How long do we keep it?

• Invoices, commercial books and documents and the records underlying them: 10 years as required by the relevant legislation.
• Contract and transaction records: for the general statute of limitations period from the termination of the contract.
• Customer panel account: as long as your account is open; after it is closed, the data is erased except for the statutory periods above.
• Records of consent to commercial electronic messages: 3 years from the end of the validity of the consent (Regulation on Commercial Communications and Commercial Electronic Messages).

When the period expires, the data is erased, destroyed or anonymised.

Your rights under Article 11 of the KVKK

By applying to the data controller, you have the right to:

• learn whether your personal data is being processed,
• request information about it if it has been processed,
• learn the purpose of the processing and whether the data is used in accordance with that purpose,
• know the third parties to whom the data is transferred within Türkiye or abroad,
• request rectification if the data has been processed incompletely or inaccurately,
• request erasure or destruction of the data within the framework of the conditions set out in Article 7 of the KVKK,
• request that the rectification, erasure or destruction be notified to the third parties to whom the data has been transferred,
• object to a result arising to your detriment from the analysis of the processed data exclusively through automated systems,
• claim compensation for damages if you suffer damage due to unlawful processing

You hold each of these rights.

How to apply

You may submit your application in Turkish and in writing, including information identifying you (name, surname, Turkish Republic identity number or, for foreign nationals, nationality and passport number), your address for notification or e-mail address, and the subject of your request:

• by a petition bearing your wet-ink signature, delivered by hand or by post to the data controller's address,
• via registered electronic mail (KEP) address, secure electronic signature or mobile signature,
• from the e-mail address you have previously provided to us and that is registered in our system, to info@agodijitalmedya.com.tr

Your application will be concluded free of charge within thirty days at the latest, depending on its nature; if the process requires an additional cost, the fee schedule determined by the Personal Data Protection Board may be applied. If your application is rejected, the response is found insufficient or no response is given in due time, your right to file a complaint with the Personal Data Protection Board is reserved.