1. Data Controller

In accordance with Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data may be processed by Lovemath LLC (operating under the ajanslokal brand) as the data controller, within the scope described below.

2. Purposes of Personal Data Processing

Your personal data is processed in accordance with the personal data processing conditions specified in Articles 5 and 6 of the KVKK for the following purposes:

Provision and execution of our services
Processing of membership transactions
Customer relationship management and customer satisfaction activities
Execution of contractual processes
Execution of finance and accounting operations
Conducting marketing and promotional activities (with your explicit consent)
Execution of communication activities
Execution of information security processes
Providing information to authorized persons, institutions, and organizations
Fulfillment of legal obligations

3. Personal Data Processed

Your personal data in the following categories may be processed:

3.1 Identity Data

Name, surname, Turkish ID number (when required), tax number (for commercial customers)

3.2 Contact Data

Email address, phone number, address information

3.3 Customer Transaction Data

Order information, service history, request and complaint information

3.4 Financial Data

Invoice information, payment information (credit card information is processed by Stripe)

3.5 Transaction Security Data

IP address, log records, device information, browser information

4. Methods of Personal Data Collection

Your personal data is collected through the following methods:

Through the website (forms, membership transactions)
From Google when you sign in with Google OAuth
Through email, phone, and other communication channels
Through cookies and similar technologies
Through WhatsApp and other messaging platforms

5. Transfer of Personal Data

Your personal data may be transferred to the following parties in accordance with the conditions specified in Articles 8 and 9 of the KVKK:

5.1 Domestic Transfer

Authorized public institutions and organizations
Our business partners and suppliers

5.2 International Transfer

Data is shared with the following international service providers for the provision of our services:

Cloudflare (USA): Website security and performance
Firebase/Google (USA): Database and authentication services
Stripe (USA): Payment processing
Resend (USA): Email services
Meta Platforms (USA): WhatsApp Business Cloud API messaging services
OpenAI (USA): AI-powered services

International data transfers are carried out in accordance with Article 9 of the KVKK, subject to the conditions that the relevant countries provide adequate protection or that the data controller commits to providing adequate protection.

6. Legal Grounds for Personal Data Processing

Your personal data is processed based on the following legal grounds specified in Article 5 of the KVKK:

Your explicit consent
Being explicitly provided for by law
Being directly related to the establishment or performance of a contract
Being necessary for the data controller to fulfill its legal obligation
Being necessary for the establishment, exercise, or protection of a right
Being necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

7. Personal Data Retention Period

Your personal data is retained for the duration required by the processing purposes and for the statute of limitations periods prescribed in the relevant legislation. After the retention period expires, your data is securely deleted, destroyed, or anonymized.

8. Data Subject Rights (KVKK Article 11)

Under Article 11 of the KVKK, you have the following rights:

To learn whether your personal data has been processed
To request information regarding the processing if your personal data has been processed
To learn the purpose of processing your personal data and whether they are used in accordance with their purpose
To know the third parties to whom your personal data has been transferred domestically or abroad
To request the rectification of your personal data if it has been incompletely or inaccurately processed
To request the deletion or destruction of your personal data within the framework of the conditions stipulated in Article 7 of the KVKK
To request that the rectification, deletion, or destruction operations be notified to third parties to whom your personal data has been transferred
To object to the emergence of a result against you through analysis of your processed data exclusively by automated systems
To claim compensation for damages arising from unlawful processing of your personal data

9. Application Method

You can apply through the following methods to exercise your rights under the KVKK:

Email: You can submit your application to info@ajanslokal.com along with documents verifying your identity
Registered electronic mail (KEP): You can submit your application with a secure electronic signature via your KEP address

Your applications will be concluded free of charge as soon as possible and within 30 (thirty) days at the latest, depending on the nature of your request. However, if the process requires additional costs, fees determined by the Personal Data Protection Board may be charged.

10. Security Measures

We take the following technical and administrative measures to ensure the security of your personal data:

Secure data transmission with SSL/TLS encryption
Firewalls and intrusion detection systems
Access control and authorization mechanisms
Regular security tests and audits
Employee training and privacy policies
Data backup and disaster recovery procedures

11. Changes

This Disclosure Text may be updated in line with legal regulations or changes in our processing activities. The current text will always be published on our website.

12. Contact

For your questions and applications under the KVKK:

Data Controller: Lovemath LLC (ajanslokal)
Email: info@ajanslokal.com
Website: www.ajanslokal.com

13. Commercial Electronic Messages (Marketing Email)

Receiving marketing email from ajanslokal is optional. Explicit consent is captured via a separate, unticked checkbox at signup or purchase. With your consent, we may send:

Monthly progress reports (Google Maps performance, review summaries, ranking trends)
Product updates and new feature announcements
Local SEO tips, case studies, and educational content
Campaign, discount, and offer notifications

You can unsubscribe at any time, free of charge, in three ways: (1) the "Unsubscribe" link at the bottom of every marketing email, (2) the preference center at /dashboard/email-settings, or (3) by emailing info@ajanslokal.com with the subject "unsubscribe". Opt-out is processed in our systems within seconds; in all cases, it is completed no later than 3 (three) business days. After opt-out, transactional email related to your service usage or account security (e.g. magic-link sign-in, order confirmations, payment notifications) may still be delivered — these fall outside marketing communications.

Notice: ajanslokal is not currently registered as an İYS (İleti Yönetim Sistemi) service provider. We retain your explicit marketing-consent record only in our own systems and strictly enforce the most common ETK 6563 obligation (no sending without consent, and a working opt-out mechanism). Once İYS registration is completed, your existing consent will also be recorded with İYS.

KVKK Data Protection Disclosure