Privacy Notice on the Protection and Processing of Personal Data

Last updated: 19 October 2026

1. Data Controller

Under Turkish Personal Data Protection Law No. 6698 ("KVKK"), your personal data is processed as described below by Ad Venture İnternet ve Pazarlama A.Ş. ("Ad Venture Digital" or "the Company") in its capacity as data controller.

Item	Value
Legal entity name	Ad Venture İnternet ve Pazarlama A.Ş.
Mersis number	0007 0631 9940 0010
Address	Nisbetiye Mah. Nisbetiye Cad. No: 8-12 Kat: 1 İç Kapı No: 8, Besiktas / Istanbul
Email	[email protected]
Registered electronic mail (KEP)	[email protected]
Phone	+90 212 813 31 35

2. Personal Data Processed, Purposes and Legal Grounds

Data category	Example data	Purpose of processing	Legal ground (KVKK Art. 5)
Identity	First name, surname	Handling your request, contractual processes	Necessary for the conclusion or performance of a contract (5/2-c); legitimate interest (5/2-f)
Contact	Email, phone, address	Getting back to you, running service communications	Necessary for the conclusion or performance of a contract (5/2-c); legitimate interest (5/2-f)
Customer transaction	Quote request, message content, service records	Preparing quotes, delivering services	Necessary for the conclusion or performance of a contract (5/2-c)
Financial	Invoice, payment and account details	Invoicing, accounting and tax obligations	Compliance with a legal obligation (5/2-ç)
Professional experience	CV, education and work history	Evaluating career applications	Explicit consent (5/1)
Transaction security	IP address, log records, device and browser data	Maintaining Site security, statutory log keeping	Compliance with a legal obligation (5/2-ç); legitimate interest (5/2-f)
Marketing	Cookie data, on-site browsing behaviour, campaign interactions	Analytics measurement, advertising performance tracking, personalisation	Explicit consent (5/1)
Commercial electronic messages	Email address, consent record	Sending newsletters and announcements	Explicit consent (5/1)

We do not collect special categories of personal data (such as health, religion, trade union membership or biometric data). When applying for a role, please do not include such information in your CV; if submitted, it is excluded from the evaluation and deleted.

3. Method of Collection

Your personal data is collected through:

• the contact, quote and career forms on adventuredigital.com,
• emails sent to [email protected] and our other corporate email addresses,
• phone calls and in-person meetings,
• contact you initiate through our social media accounts,
• cookies and measurement tools used on the Site,
• commercial documents such as contracts, quotes and invoices,

by partly automated, fully automated, or non-automated means as part of a data filing system.

4. Transfer of Personal Data

Your personal data may be transferred to the following parties, limited to the purposes above and in line with the conditions set out in Articles 8 and 9 of the KVKK:

• Suppliers providing site hosting, email, cloud storage, CRM and analytics services
• Advertising measurement and marketing platforms, only where you have consented to the relevant cookies
• Advisers providing financial consultancy, legal and independent audit services
• Competent public institutions and judicial authorities upon request

Since some of our service providers host their servers abroad, your data may be transferred outside Türkiye under Article 9 of the KVKK, relying on mechanisms such as an adequacy decision, standard contractual clauses, binding corporate rules or an undertaking.

5. Retention Periods

Your data is retained for as long as the purpose of processing requires and throughout the statutory limitation periods in applicable legislation. Once the period expires, data is deleted, destroyed or anonymised under our Personal Data Retention and Destruction Policy. For the retention table, see section 5 of our Privacy Policy.

6. Your Rights as a Data Subject

Under Article 11 of the KVKK, by applying to the Company you have the right to:

1. Learn whether your personal data is being processed,
2. Request information if it has been processed,
3. Learn the purpose of processing and whether the data is used in line with that purpose,
4. Know the third parties to whom your data is transferred, in Türkiye or abroad,
5. Request correction where the data is incomplete or inaccurate,
6. Request deletion or destruction under the conditions in Article 7 of the KVKK,
7. Request that correction, deletion and destruction be notified to the third parties to whom the data was transferred,
8. Object to a result against you arising from analysis carried out exclusively by automated systems,
9. Claim compensation for damages suffered as a result of unlawful processing.

Where processing is based on explicit consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

7. How to Apply

You can submit your requests through the channels below, in line with the Turkish Communiqué on the Procedures and Principles of Application to the Data Controller:

Channel	Address	Verification required
Written application	Nisbetiye Mah. Nisbetiye Cad. No: 8-12 Kat: 1 İç Kapı No: 8, Besiktas / Istanbul	Wet-signed petition and a copy of your ID
KEP	[email protected]	Registered electronic mail account
Email	[email protected]	Sent from the email address registered in our systems, or signed with a secure electronic signature

Your application should include your full name, your Turkish ID number if you are a citizen of the Republic of Türkiye, an address for notification, your email and phone if available, and the subject of your request. Your request is concluded within 30 days at the latest. Where the process entails an additional cost, a fee may be charged in line with the tariff set by the Turkish Personal Data Protection Board.

If your application is rejected, the response is insufficient, or no response is provided within the deadline, you may file a complaint with the Personal Data Protection Board within 30 days of learning of the response and in any case within 60 days of the application date.