PERSONAL DATA PROTECTION NOTICE

This Disclosure Notice has been prepared in order to inform you, pursuant to the Personal Data Protection Law No. 6698 (“KVKK”), regarding the personal data processed within the scope of the ControlBubble WhatsApp Automation Platform, website, panel, and related services provided by ControlBubble.

1. Identity of the Data Controller

Pursuant to the KVKK, your personal data may be processed by ControlBubble (“Company”), acting as the data controller, within the scope explained below.

2. Personal Data Processed

Within the scope of the services provided by the Company, the following personal data may be processed:

Identity Information: Name, surname
Contact Information: Phone number, email address
Customer Transaction Information: Requests, complaints, support records, form contents
Transaction Security Information: IP address, session information, device and browser data
Marketing Information: Campaign preferences, commercial communication consent status
Message and Usage Information: Transaction records relating to platform use, log data, and integration information

3. Purposes of Processing Personal Data

Your personal data may be processed for the following purposes:

Providing, operating, and improving ControlBubble services,
Receiving demo requests and carrying out communication processes,
Performing membership, account creation, and user verification processes,
Carrying out technical support, customer satisfaction, and request/complaint management processes,
Providing message automation, campaign management, reporting, and integration services,
Carrying out invoicing, accounting, and financial processes,
Executing information security processes and ensuring system security,
Fulfilling legal obligations and responding to requests from authorized institutions and authorities,
Sending campaigns, announcements, and informational content where you have provided explicit consent.

4. Method of Collection and Legal Basis for Processing Personal Data

Your personal data may be collected through website forms, communication channels, demo requests, contract processes, panel usage, cookies, integrations, support records, and other transactions carried out electronically, by automated or partially automated means.

Your personal data is processed based on the personal data processing conditions set out in Articles 5 and 6 of the KVKK and on the following legal grounds:

Being directly related to the establishment or performance of a contract,
Being necessary for the Company to fulfill its legal obligations,
Being necessary for the establishment, exercise, or protection of a right,
Being necessary for the legitimate interests of the Company, provided that this does not harm your fundamental rights and freedoms,
Your explicit consent where required.

5. Transfer of Personal Data

Your personal data may be transferred, in line with the purposes stated above and in compliance with the conditions stipulated under the KVKK, to the following persons and organizations:

Cloud service and hosting infrastructure providers,
Business partners from whom software, infrastructure, technical support, and integration services are obtained,
Parties providing accounting, legal, auditing, and consultancy services,
Payment institutions and service providers involved in financial processes,
Public institutions, organizations, and judicial authorities authorized by law.

In cases where your personal data must be transferred abroad, the relevant provisions of the KVKK shall be complied with.

6. Storage and Security of Personal Data

The Company takes appropriate technical and organizational measures to prevent unlawful processing and access to your personal data and to ensure its protection.

Data access authorizations are restricted,
System and infrastructure security are reviewed regularly,
Communication and data transfer are carried out through secure protocols,
Log records and backup processes are maintained in a controlled manner.

7. Your Rights Under the KVKK

Pursuant to Article 11 of the KVKK, you have the following rights by applying to the Company:

To learn whether your personal data is being processed,
To request information if it has been processed,
To learn the purpose of processing and whether it is used in accordance with that purpose,
To know the third parties to whom the data is transferred domestically or abroad,
To request correction if the data is incomplete or inaccurate,
To request deletion or destruction of the data in accordance with the KVKK,
To request notification of such actions to third parties to whom the data has been transferred,
To object to a result arising against you through the exclusive analysis of the processed data by automated systems,
To request compensation for damages in case of unlawful processing of your personal data.

8. Method of Application

You may submit your requests regarding your rights under the KVKK to the Company in writing or through other methods determined by the Company in accordance with the applicable legislation.

Your applications will be concluded as soon as possible and within the period prescribed by the applicable legislation, depending on the nature of the request.

9. Updates to the Notice

This Disclosure Notice may be updated depending on legal regulations and changes in business processes. The current text becomes effective as of the date it is published by ControlBubble.