Legal
Privacy Policy
Last updated: 22 October 2026
This policy explains what personal information is processed through adsoodigital.com, why, who it may be shared with, and the rights you have.
Who we are
AdSooDigital is a brand being developed to provide paid advertising, creative strategy, websites and measurement services. It is not yet an incorporated company. This policy covers personal information processed through adsoodigital.com.
Controller: Okan Tonca, founder of AdSooDigital, who determines the purposes and means of the processing described here.
Contact: hello@adsoodigital.com
Information we process
- Enquiries: your name, business email, company name (optional), the service you are interested in, your message and any correspondence that follows.
- Technical and security data: when you visit the website, our hosting infrastructure processes your IP address, the time of the request, browser and device details and the page requested, so the page can be delivered and the service protected. Server and security logs may record this information.
- Preferences: if you choose EN or TR with the language switch, the
adsoo_langcookie remembers that choice for 12 months. See the Cookie Policy. - Analytics (only with your permission): pages visited, how you reached the website, approximate location estimated by Google from your IP address (country, city), device, browser and language, and whether the contact form was started or an enquiry was received. No form contents. See the Cookie Policy.
- Pre-contractual records: proposal and negotiation details, only if a business discussion actually progresses.
This website uses Google Analytics only if you allow it in the cookie panel. It does not currently use advertising pixels or advertising cookies. You can already record a separate choice for advertising cookies; it applies only once we introduce advertising services (such as Google Ads), after we update this policy with their purpose, legal basis and recipients. Please do not include sensitive personal data, identity numbers or financial information in an enquiry; it is not needed to answer you.
Sending an enquiry does not subscribe you to marketing emails, and marketing consent is never a condition of contacting us.
Why we process data and on what legal basis
| Processing | Purpose | Turkish KVKK condition | GDPR basis, where applicable |
|---|---|---|---|
| Business enquiries | Responding to you and discussing the services you asked about | Art. 5(2)(c) or 5(2)(f), depending on the circumstances | Art. 6(1)(b) steps prior to a contract, or Art. 6(1)(f) legitimate interests, depending on the enquiry |
| Technical and security logs | Keeping the website available, detecting abuse and investigating incidents | Art. 5(2)(f), or a legal obligation under Art. 5(2)(ç) | Art. 6(1)(f); Art. 6(1)(c) where the law requires it |
| Language preference | Remembering a language you explicitly selected | Art. 5(2)(f), with the cookie rules assessed separately | Art. 6(1)(f), with the cookie rules assessed separately |
| Analytics (only with your permission) | Understanding which pages are useful and how many enquiries the website brings in | Explicit consent (Art. 5(1)), which you can withdraw at any time under “Cookie settings” | Art. 6(1)(a) consent, which you can withdraw at any time under “Cookie settings” |
| Legal rights and claims | Answering rights requests and establishing or defending legal claims | The applicable Art. 5(2) condition | Art. 6(1)(c) or 6(1)(f) |
How we obtain information
We collect information directly from you when you email us or send an enquiry, from the language you choose, and from the systems needed to deliver and secure the website.
Recipients and service providers
Where necessary, personal information may be disclosed to providers of website hosting and infrastructure, business email and message delivery, security and technical maintenance, to professional advisers, and to public authorities legally entitled to request it. Access is limited to what each function needs.
If you allow analytics: Google (Google LLC and its affiliates, such as Google Ireland Limited) as the provider of Google Analytics and Google Tag Manager.
International transfers
Our website and our business mailbox are provided by Hostinger on servers in the European Union. Information you send us, and the technical data created when you visit the website, is therefore transferred from Türkiye to the European Union for hosting and email. Hostinger may also access it from other locations to provide support and keep the service secure.
If you allow analytics, the analytics data is processed by Google, which may store and process it outside Türkiye, including in the United States.
How long we keep information
We keep personal information only for as long as the purpose requires, or as long as a legal obligation requires.
- Enquiries that do not lead to an engagement: deleted or anonymised 12 months after the last interaction.
- Security logs that we control: 30 days. Our hosting provider keeps its own technical logs under its own policies.
- Contracts, legal claims and statutory obligations may require different periods, which are recorded separately.
Stored enquiries are reviewed at least once a year, and information past its period is deleted or anonymised.
Google Analytics: event-level data is kept for 14 months (the retention setting we chose in Google Analytics); after that period Google deletes it on a monthly basis. Aggregated figures in Google Analytics’ standard reports are not subject to this setting. Withdrawing your permission stops further collection but does not delete data already sent.
Security
The website is served only over HTTPS, loads no third-party scripts unless you allow analytics (then only Google Tag Manager) and uses a strict content security policy. Enquiries sent through the form are validated on the server, rate-limited and protected against automated submissions. We limit access to personal information and apply appropriate administrative safeguards. No transmission over the internet is entirely risk-free, and we do not claim certifications or absolute security.
Your rights
Under Article 11 of the Turkish Personal Data Protection Law (KVKK), you have the right to:
- learn whether your personal data is processed, and request information about it if it is;
- learn the purpose of the processing and whether the data is used accordingly;
- know the third parties, in Türkiye or abroad, to whom your data is transferred;
- ask for incomplete or inaccurate data to be corrected, and for the correction to be notified to those recipients;
- ask for your data to be deleted or destroyed under Article 7, and for this to be notified to those recipients;
- object to a result against you arising solely from automated analysis of your data;
- claim compensation for damage caused by unlawful processing.
Where the GDPR applies, you may also have the rights of access, rectification, erasure, restriction, data portability and objection, and safeguards concerning decisions based solely on automated processing. Legal limits apply to each right.
To make a request, write to hello@adsoodigital.com. We answer free of charge within the legal time limits (30 days under KVKK), and we may ask for proportionate information to confirm your identity. You may complain to Türkiye’s Personal Data Protection Authority or, where applicable, the competent data protection supervisory authority in the EU or EEA.
Children and changes
Our services are not directed at children, and we do not knowingly collect children’s information. We will update this policy when our practices change materially, and the date of the update will be shown on this page. This policy is also available in Türkçe.