1. Scope and Data Controller
This Privacy Policy applies to visitors of assystan.com regardless of location. The data controller is Assystan Dijital Pazarlama ("Assystan", "we"), based in Istanbul, Türkiye. As a Türkiye-domiciled company, our processing of personal data is governed primarily by Law No. 6698 on the Protection of Personal Data ("KVKK"). Where we process the personal data of individuals located in the European Union, including France, we also apply the standards of the EU General Data Protection Regulation (GDPR), as described in this policy.
2. Purpose of Processing
We collect and process personal data submitted through our website to: respond to contact and inquiry requests, provide our services (social media management, web design, Google Ads, SEO, automation & integration, digital accessibility consulting), manage client relationships, carry out contract-related processes, and meet legal obligations.
Data may also be used for marketing analysis, service quality improvement, and statistical reporting.
3. Legal Basis for Processing (EU / France Visitors)
Where the GDPR applies, we rely on the following legal bases under Article 6(1) GDPR:
- Consent — for example, non-essential cookies and marketing communications you opt into
- Performance of a contract — to respond to your inquiry and provide the services you request
- Legitimate interests — to operate and improve our website, understand how it is used, and protect it against misuse, provided this does not override your rights
- Legal obligation — where processing is required under applicable law
4. Personal Data We Collect
- First and last name
- Email address
- Phone number (if voluntarily provided)
- Company / brand name
- The service(s) you are interested in
- Message content submitted via the contact form
- Technical data related to your use of the website (IP address, browser information, pages visited) — collected via cookies and analytics tools, as described in our Cookie Policy
5. How We Collect Data
We collect personal data electronically through: the contact forms on our website, email correspondence, contact initiated via our social media accounts, WhatsApp messages you send to our business number, and in the course of service agreements.
6. Sharing of Data and International Transfers
We do not share your personal data with third parties except where legally required. Within the scope of providing our services, and only to the extent necessary, data may be shared under confidentiality obligations with: analytics and advertising service providers (Google Analytics / Google Tag Manager, Meta Pixel, TikTok Pixel, Microsoft Clarity), cloud storage providers, and communication infrastructure providers — including WhatsApp/Meta, for messages you initiate via WhatsApp.
Some of these providers may process data outside Türkiye and/or the European Economic Area. Such transfers rely on the safeguards maintained by the relevant provider (such as standard contractual clauses) and, where applicable under Turkish law, are carried out in accordance with KVKK Article 9.
7. Data Retention
Personal data is retained for as long as necessary for the purpose it was collected and to meet applicable legal obligations. Once the underlying relationship ends and any mandatory retention periods expire, your data is deleted, destroyed, or anonymized. Retention periods specific to individual cookies are set out in our Cookie Policy.
8. Data Security
We apply technical and administrative measures to protect your personal data against unlawful processing and unauthorized access. These measures include encrypted communication (HTTPS/TLS), access controls, regular security reviews, and staff training.
9. Your Rights
If you are located in the European Union, including France, you have the following rights under the GDPR:
- Right of access to your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to object to processing, including for direct marketing
- Right to data portability
- Right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal
- Right to lodge a complaint with a supervisory authority — such as the CNIL in France (www.cnil.fr) or your local data protection authority
If you are located in Türkiye, you have the rights set out in Article 11 of the KVKK, including the right to learn whether your data is processed, request information about it, learn the purpose of processing, know the third parties to whom your data is transferred, request correction or deletion, and object to an adverse outcome resulting from automated analysis.
10. How to Exercise Your Rights
You can submit requests regarding your personal data to info@assystan.com, using means that allow us to verify your identity. We aim to respond within a reasonable time and, for requests governed by the KVKK, no later than 30 days as required under Turkish law.
11. Changes to This Policy
Assystan reserves the right to update this Privacy Policy. Updates will be published on this page; we recommend reviewing it periodically to stay informed of any changes.