Privacy and Personal Data Notice

This notice provides personal data information for people requesting a quote through reklamklik.com and business representatives contacting ReklamKlik by phone or email. Submitting a quote request does not constitute permission to receive advertising or bulk marketing messages.

1. Data controller and contact details

The data controller is İŞLEM GRUP REKLAM HİZ. A.Ş., operating under the ReklamKlik brand. Address: Yeşilce Mah, Dalgıç Sok. No:11 4.Levent / İstanbul. Email: merhaba@reklamklik.com. Phone: 0543 862 94 05.

2. What information do we collect?

The quote form collects your name, phone number, email address, selected service, and description of your needs. Company name, website, and answers to additional service-related questions are optional. Requests you send by phone or email may be recorded in our customer relationship management system (CRM) by our authorized team.

Following a request, records may be created for conversation notes, proposal scope and versions, follow-up tasks, transaction dates, and proposal status. The version of the notice presented in the form and the time the form was presented are added to the record. This record is not a declaration that the notice was read or marketing permission was given.

The web server may generate technical logs such as IP address, request time, requested URL, browser information, and response code to establish connections, maintain security, and investigate errors. Do not include passwords, payment card details, identity documents, health information, or unnecessary personal data about other people in your needs description.

3. Purposes, collection methods, and legal grounds

Information is obtained through web forms, phone conversations, email correspondence, and authorized personnel records relating to these channels, electronically or by partially non-automated means. It is used to understand the request, assess the relevant service, respond, and prepare a proposal.

For necessary processing relating to a potential service contract with you, we rely on the condition concerning the establishment or performance of a contract under Article 5/2-c of Law No. 6698. For processing the business contact information of representatives communicating on behalf of a company and following up on conversations, legitimate interest under Article 5/2-f is assessed with regard to fundamental rights. Maintaining security and preventing misuse are also subject to this assessment.

Where an applicable legal obligation must be fulfilled, the conditions under Article 5/2-ç apply; where rights need to be asserted or protected in a dispute, the conditions under Article 5/2-e apply. No general or mandatory marketing consent is requested for a proposal discussion. This form does not initiate bulk advertising without separate permission and the necessary message management process.

3.1. Optional email marketing preference

If you select the separate, initially unchecked box on the quote form, you choose to receive emails from İŞLEM GRUP REKLAM HİZ. A.Ş., operating under the ReklamKlik brand, about service introductions, campaigns, and informative content on digital marketing. Selecting the box is not required for your quote request to be assessed. Leaving it unchecked does not adversely affect your proposal, consultation, or service process.

The preference statement shown on the form is: “I would like to receive service introductions, campaign updates, and informational emails from ReklamKlik.”

To evidence and manage your preference, the CRM stores your name, email address, company information if provided, relationship to the quote request, selected services, consent text and version, time the text was presented, consent time, and notice version. Processing personal data for this optional marketing purpose relies on explicit consent under Article 5/1 of the Personal Data Protection Law (KVKK). Email consent on the form does not permit SMS messages, phone calls, or customer-list uploads to advertising platforms; it is also separate from the analytics cookie preference.

Email communication with people who have opted in may be handled through Mailjet. Within this scope, the provider processes the email address, name/company information used in the message, message content, and sending/delivery/opt-out statuses. Open and link-click tracking remain disabled for marketing emails too. Information about Mailjet and processing abroad appears in the service providers section below.

A consent record alone does not mean that procedures in the Message Management System (İYS) have been completed. Campaign sends are limited to recipients with documented marketing consent who have been classified as B2B customers in the CRM by the authorized team. The B2B classification status, transaction date, and authorized person performing the action are recorded in the CRM. A company name or corporate email address alone is not sufficient for B2B classification. An automatic İYS connection has not yet been established; at this stage, İYS verification is not enforced in the software as a mandatory condition for sending campaigns. This technical workflow does not mean that İYS registration and opt-out obligations have been fulfilled or no longer apply; the business handles these processes separately. Recipients who have unsubscribed or are blocked from sending are excluded from campaigns; current consent and B2B status are checked again before sending.

Every marketing email includes a free unsubscribe link. You can withdraw your preference through that link or by contacting merhaba@reklamklik.com. Marketing sends stop when an opt-out is processed; submitting the form again does not automatically remove the earlier opt-out record. Necessary transactional correspondence relating to your proposal and the service you requested is assessed separately from marketing preferences.

Consent and opt-out records are retained to implement your preference and, where needed, demonstrate fulfillment of obligations, taking into account retention periods in applicable legislation and periods necessary to protect rights. When retention is no longer necessary, deletion, destruction, or anonymization processes are applied.

3.2. Customer membership and email verification

If you apply for customer membership on behalf of your business, we collect your name, business email address, company name, and declaration that you are applying on the business's behalf. This information is used to create the membership record you requested, verify that the email address belongs to you, and prevent duplicate registrations and misuse. The notice version presented during registration, presentation and application times, and email verification status and time are also added to the record.

For processing necessary to establish and provide the membership service you requested, the condition under Article 5/2-c of the Law applies; for necessary communication with business representatives and prevention of misuse, legitimate interest under Article 5/2-f is assessed with regard to fundamental rights. Membership records and actions are kept in a separate membership list accessible only to the assigned administrator. No password is collected at this initial stage; a membership application does not grant access to site administration or other customer records.

The email verification link is sent through Mailjet as a transactional email. Mailjet processes the recipient email address, the message containing the verification link, and sending/delivery statuses for this purpose. Open and link-click tracking are disabled. The verification link is valid for 24 hours; opening it alone does not verify membership, and the action on the verification screen must be completed. A hash of the verification code is stored in the membership record, while verification data in the sending queue is stored encrypted. Analytics or visitor measurement tags do not run on membership and verification pages. Information about processing abroad relating to Mailjet and hosting in Germany appears in the service providers section below.

Applying for membership or verifying an email address does not give permission for marketing emails. These records are not automatically added to campaign lists and do not replace B2B campaign classification. Membership records are retained taking into account periods required for operating the membership process, security, and applicable obligations. You can send correction or deletion requests through the request channels below.

4. Who can access the data, and where is it hosted?

Relevant sales and service team members may access request records as required by their duties. Technical service providers delivering hosting, maintenance, and security may access data as processors to the extent required by those services. Only data necessary for the relevant request or legal need may be disclosed to authorized public bodies or advisers involved in legal proceedings.

The website and CRM infrastructure are hosted on a cloud server located in Germany. This hosting results in personal data being processed abroad. Your data is not sold; contact details from the quote form are not used to create advertising targeting lists. You can send questions about the hosting provider's identity and the international transfer process through the contact channels above.

Quote request confirmations, request notifications sent to our authorized team, and PDF proposal messages are sent through the Mailjet (Sinch) email infrastructure. The recipient email address, message content, and any PDF proposal attachment are transferred to the provider for this purpose. Internal request notifications may also contain the name, company, phone number, selected service, and needs description submitted in the form. Message IDs and delivery, bounce, and blocking records are processed to update the sending status in the CRM. Open and link-click tracking are not enabled in these transactional emails.

Google Workspace (Google) is used to receive and reply to contact emails; correspondence content and attachments are processed in this email service. According to information published by Mailjet, personal data is held in the European Union, in Germany and Belgium. Using these email services may also result in data being processed by service providers abroad. You can send questions about providers and transfer processes through the contact channels above.

5. Retention and security

Retention needs are assessed by considering resolution of the request, the scope of any continuing customer relationship, applicable legal obligations, and potential rights claims. A quote request does not require all records to be kept indefinitely. Deletion, destruction, or anonymization is applied to data whose retention grounds no longer exist; records that must legally be retained are assessed separately within this framework.

HTTPS is used during transmission. Administrative access is restricted by user roles; authorized panel actions and follow-up records are logged. These measures do not mean that every security risk has been eliminated completely. If you realize you sent someone else's data or unnecessary data, you can contact us to request correction or deletion.

6. Cookies and measurement preferences

Necessary session information and security cookies are used for session and form security. Your data preference is stored in your browser's local storage under the reklamklik-consent key; it may remain until you clear browser data or change your preference. This preference alone does not constitute a quote request or marketing permission.

After your consent, we use Google Analytics 4 (Google) to measure page views, successfully saved quote-form events, and phone/WhatsApp link clicks. The visited page's URL path and title, general device/browser information, the province, district, or neighborhood targeted by the page, and event type may form part of this measurement. The page's target area is not the visitor's physical location. Form names, emails, phones, needs descriptions, and CRM record IDs are not sent to Analytics. URL query parameters and fragments are removed from the measured address; referrer information is used only at domain level. The IP address is transmitted to Google during the connection; Google states that in GA4 it discards IP addresses after deriving approximate location, without storing them. Analytics cookies may be stored on your device, and Google may process data abroad. Google Signals and ad personalization signals are disabled in this setup. The analytics tag loads only after consent. Declining consent does not prevent use of the quote form; you can change your preference through the data preferences link in the footer. GA4 measurements and quote requests recorded in the CRM appear separately in the admin panel; numbers may differ because of consent preferences, browser blocking, and reporting delays.

7. Your rights and making a request

Under Article 11 of the Law, you may request information about whether your data is processed, its purposes of use, and parties to whom it is transferred, and ask for incorrect or incomplete information to be corrected. Subject to the Law's conditions, you may request deletion or destruction and notification of corrections or deletion to recipients. You may object to an adverse outcome arising from an exclusively automated assessment and request compensation for damage caused by unlawful processing.

You may submit your request in writing to our company's address above. You may also apply to merhaba@reklamklik.com from an email address you previously shared with us and that is registered in our system. Other application methods are governed by the Communiqué on the Procedures and Principles for Applications to the Data Controller. Include enough explanation to identify you and your request; do not send more documentation than necessary for identity verification.

Requests are resolved as soon as possible according to their nature and within thirty days at the latest. We will contact you if further verification is required. Applications are generally free; if additional costs arise, provisions relating to the tariff set by the Board apply.

8. Updates

Version of this notice: 25 October 2026 / Customer membership. This notice is updated if data collection channels, service providers, or processing purposes change. The form record retains a version trace that distinguishes the notice presented to you at the time of the request.