Clarification and Explicit Consent Text

SECTION A - CLARIFICATION TEXT

1. Data Controller

Your personal data is processed by Mekjoy Dijital Bilişim Anonim Şirketi (Sarıgazi Tax Office / 6140932362) as data controller within the scope of Law No. 6698 on the Protection of Personal Data ("KVKK").

Address: Meclis Mah. Derviş Sk. No: 38 Sancaktepe/Istanbul
Email: info@mekjoy.com | Phone: +90 850 840 79 00

2. Processed Personal Data and Processing Purposes

Within the scope of our website (www.mekjoy.com), customer panel (accounts.mekjoy.com) and service processes, the following personal data is processed:

For Marketing Processes:

• Your identity and contact information (name, surname, email, phone) - through contact forms, meeting requests, free analysis applications;
• Your digital footprint information (IP address, cookie data, device information) - through website cookies and advertising tracking technologies;
• Marketing interaction data (ad clicks, conversion data, UTM parameters) - through Google Ads, Meta Pixel, TikTok Pixel and other advertising platforms.

Processing Purposes: Promotion of our services, personalized advertising and marketing activities, targeted and remarketing campaigns, advertising performance measurement and conversion tracking, lead generation.

For Service Processes:

• Your identity and contact information - contract, invoicing, project management;
• Customer transaction information - payment, delivery, project tracking;
• Customer panel usage data - transactions on accounts.mekjoy.com.

Processing Purposes: Establishment and performance of contract, service provision, communication, customer relations management, invoicing, project tracking, technical support, legal obligations.

3. Legal Basis for Processing

Your personal data is processed based on the following legal grounds:

• KVKK Art. 5/2 (a) - Explicitly stipulated in laws (tax, commercial and consumer laws);
• KVKK Art. 5/2 (c) - Necessary for the establishment or performance of a contract;
• KVKK Art. 5/2 (ç) - Necessary for compliance with legal obligations;
• KVKK Art. 5/2 (f) - Processing is mandatory for the legitimate interests of the data controller (marketing, security, service improvement);
• KVKK Art. 5/1 - Your explicit consent (for commercial electronic messages and optional marketing activities).

4. To Whom and For What Purposes Personal Data May Be Transferred

Your personal data may be transferred to the following parties within the scope of legal obligations and service provision:

Recipient	Purpose	Legal Basis
Google LLC (Google Ads, Analytics, Tag Manager)	Ad management, conversion tracking, analytics	Explicit consent, legitimate interest
Meta Platforms (Facebook, Instagram Pixel)	Targeted advertising, retargeting	Explicit consent, legitimate interest
TikTok (TikTok Pixel)	Ad campaigns and measurement	Explicit consent, legitimate interest
LinkedIn (LinkedIn Insight Tag)	B2B targeted advertising	Explicit consent, legitimate interest
Email and SMS service providers	Communication, marketing messages	Explicit consent, contract performance
Payment institutions and banks	Payment transactions	Legal obligation, contract performance
Hosting and cloud service providers	Data storage and infrastructure	Contract performance, legitimate interest
Accounting and legal consultants	Invoicing, legal compliance	Legal obligation
Judicial and administrative authorities	Legal obligations, official requests	Legal obligation (KVKK Art. 5/2-ç)

5. Your Rights as Data Subject

Under KVKK Article 11, you have the following rights:

• To learn whether your personal data is being processed;
• To request information regarding processing if processed;
• To learn the purpose of processing and whether data is used appropriately;
• To know third parties to whom data is transferred domestically or abroad;
• To request correction of incomplete or inaccurate data;
• To request deletion or destruction of data under KVKK Article 7 conditions;
• To request notification of correction, deletion or destruction operations to third parties;
• To object to negative results arising from automated analysis of data;
• To claim compensation for damages incurred due to unlawful processing.

6. How to Exercise Your Rights

You can submit your applications to Mekjoy through the following channels:

• Email: info@mekjoy.com (with the subject "KVKK Data Subject Application")
• Registered Mail: Meclis Mah. Derviş Sk. No: 38 Sancaktepe/Istanbul
• Customer Panel: accounts.mekjoy.com (Data Subject Rights section)

Your applications will be concluded free of charge within 30 (thirty) days at the latest. If the transaction requires additional cost, fees determined by the Personal Data Protection Board may be charged.

7. Data Retention Period

Your personal data is retained for the following periods:

• Contract and invoicing data: 10 years (Tax Procedure Law)
• Marketing consent and commercial message records: 3 years from consent date or until withdrawal
• Web analytics and cookie data: 26 months (maximum)
• Communication records (email, call): 2 years
• Customer panel login logs: 2 years

At the end of these periods, data is deleted, destroyed or anonymized ex officio or upon your request.

SECTION B - EXPLICIT CONSENT FOR MARKETING ACTIVITIES

1. Scope of Consent

I hereby declare and accept that I have been informed about the processing of my personal data within the scope of Section A above, and I give my explicit consent for the following activities:

2. Commercial Electronic Messages

I consent to receiving commercial electronic messages (email, SMS, phone call, push notification) from Mekjoy Dijital Bilişim Anonim Şirketi about:

• Mekjoy services (digital marketing, software, web design, graphic design, e-commerce consulting, social media management, IT consulting, training and mentoring);
• New service announcements, updates and improvements;
• Campaigns, discounts and special offers;
• Blog posts, industry analyses, digital marketing trends;
• Event, webinar and training announcements;
• Customer satisfaction surveys and feedback requests.

Legal Basis: Law No. 6563 on Regulation of Electronic Commerce, Regulation on Commercial Communication and Commercial Electronic Messages.

3. Personalized Advertising and Retargeting

I consent to the processing of my digital footprint data (IP address, cookies, browsing behavior) and interaction data through the following platforms for personalized advertising, retargeting campaigns and conversion tracking purposes:

• Google Ads, Google Analytics, Google Tag Manager
• Meta Pixel (Facebook, Instagram)
• TikTok Pixel
• LinkedIn Insight Tag
• Similar advertising and analytics platforms

Purpose: Showing personalized ads, measuring ad effectiveness, conversion tracking, creating custom audiences.

4. Right to Withdraw Consent

You can withdraw this consent at any time, free of charge and without showing any reason:

• By using the "unsubscribe" link in sent emails,
• By sending an email to info@mekjoy.com with the subject "Withdraw Marketing Consent",
• By calling +90 850 840 79 00,
• Through the Data Subject Rights section in the customer panel (accounts.mekjoy.com).

Your withdrawal notification will be processed within 3 (three) business days at the latest.

5. Consent for Cookie Use

I accept that analytical and advertising cookies are placed on my device during my visits to www.mekjoy.com and accounts.mekjoy.com. For detailed information, please review our Cookie Policy.

6. Contact and Information

For questions or requests regarding personal data processing, you can contact us at info@mekjoy.com or call +90 850 840 79 00.

7. Consent Record

Your consent is recorded electronically in accordance with KVKK and relevant legislation. The consent record includes: consent date, consent method, IP address and browser information.