Personal Data Notice

1. Data controller and scope

SETUP34 REKLAM DANIŞMANLIK HİZMETLERİ SANAYİ VE TİCARET LİMİTED ŞİRKETİ is the data controller for the personal data processed through the Message34 corporate website and its contact channels. This notice covers website visits, information and offer requests, contact forms and related correspondence.

Account registration, paid services and recipient data uploaded by customers may involve additional processing and notices specific to those services. This notice explains website and contact processing; it does not itself constitute consent.

2. Information collected and collection methods

We collect information through the forms you submit, email or telephone correspondence, website requests, browser storage and measurement tools permitted by your preferences. Processing is wholly or partly automated, or non-automated where the information forms part of a filing system.

• Identity and contact: name, email address and telephone number supplied in your request.
• Business and request details: company name, website, country, subscriber count, the service you ask about and the content of your message, depending on the form used.
• Request and security records: form type, submission date, IP address and records needed to follow up requests and prevent misuse.
• Website use and preferences: browser/device information, visited pages and events, campaign or referral identifiers where permitted, and your analytics and advertising choices with their timestamp. Browser notifications involve a separate browser permission and subscription information.

Contact form information is stored for follow-up and may be emailed to the team responsible for the request. Please do not include information unrelated to your request or sensitive personal data in general contact fields.

3. Purposes and legal grounds

The legal ground depends on the purpose of the particular processing. We do not treat all website activity as consent-based processing.

• Preparing an offer at your request and arranging the service: identity, contact, business and request details are processed where directly necessary for establishing or performing a contract, under Article 5(2)(c).
• Answering general enquiries, managing correspondence and protecting the website: relevant contact, request and technical records are processed under Article 5(2)(f), where necessary for our legitimate interests and without overriding your fundamental rights and freedoms.
• Complying with a specific statutory requirement or lawful request from an authority: the necessary records are processed under Article 5(2)(a), where expressly provided by law, or Article 5(2)(ç), where necessary to fulfil a legal obligation, as applicable to the request.
• Establishing, exercising or protecting a right: relevant correspondence and transaction records are processed under Article 5(2)(e), including to resolve a dispute.
• Optional analytics, advertising measurement and personalisation: the relevant use, device, campaign and preference information is processed on the basis of your separate choices and explicit consent under Article 5(1). Giving consent is not a condition for sending a contact request. You can withdraw your choices through Cookie preferences.

Browser notification subscription details are processed to deliver requested Web Push notifications on the basis of your separate consent under Article 5(1); you can revoke browser permission in your site settings. Sending a service enquiry does not by itself grant permission for unrelated promotional messages. Where required, commercial communication permission is handled separately.

4. Recipients and international transfers

Relevant information may be made available to personnel handling your request and, to the extent needed for their work, to hosting, technical support and communication infrastructure providers. Where legally necessary, records may be shared with competent public authorities and professional advisers supporting the establishment or protection of a right.

With the relevant measurement permission, usage and technical information may be processed by Google Analytics and Google Tag Manager tools, including Microsoft Clarity. Configured advertising tools, including OpenAI Ads when enabled, may process relevant advertising events and identifiers with advertising permission. Your choices are recorded in local browser storage for up to 180 days. This is the preference record's duration, not a universal retention period for third-party data.

Global technology providers may process information outside Türkiye. Such a transfer requires both the applicable processing ground and the conditions of Article 9 of Law No. 6698: an applicable adequacy decision, appropriate safeguards or a statutory exception where all its conditions are met. Cookie permission is not a substitute for an international transfer safeguard. You may request information about the recipients and transfer conditions applicable to your data.

5. Retention

Contact and offer records are retained for the period needed to answer and follow up the request. Where the request develops into a service relationship or dispute, relevant records are assessed against the applicable legal obligations and claims periods. Security records are limited to the period required to protect the website and investigate misuse. Optional measurement is governed by the relevant preference, purpose and provider settings.

We do not apply the preference record's 180-day duration to all personal data. When the purpose and other lawful retention reasons cease, the information is deleted, destroyed or anonymised under the applicable rules.

6. Your rights

Under Article 11 of Law No. 6698, you may:

• learn whether your personal data are processed and request information about that processing;
• learn the processing purpose and whether the data are used in line with that purpose;
• learn the third parties to whom data are transferred in Türkiye or abroad;
• request correction of incomplete or inaccurate data;
• request deletion or destruction where the conditions in Article 7 are met;
• request that correction, deletion or destruction be notified to third-party recipients;
• object to a result against you arising from analysis conducted exclusively through automated systems;
• claim compensation for damage caused by unlawful processing.

7. How to make a request

You can submit a signed written application to Halkalı Merkez Mah. Halkalı Cad. Tekno Park İdare Binası No: 281/23 İç Kapı No: 57, Küçükçekmece / İstanbul, addressed to SETUP34 REKLAM DANIŞMANLIK HİZMETLERİ SANAYİ VE TİCARET LİMİTED ŞİRKETİ. You can also write to destek@message34.com from an email address you previously provided to us and that is registered in our records, or use another method permitted by the applicable application rules.

State the right you wish to exercise, the relevant request or service and the information required by the application rules to identify and contact you. We may request proportionate additional information to verify identity and protect your data; we do not require unrelated documents or excessive personal information.

Applications are answered as soon as possible and within 30 days. They are generally free of charge; if responding creates an additional cost, a fee may be charged only under the conditions and tariff determined by the Turkish Personal Data Protection Board. Your right to complain to the Board under the statutory procedure remains available.

8. Further information

The Privacy Agreement explains confidentiality, cookie choices, browser notifications and the respective roles of Message34 and its service customers. The cookie and browser storage inventory lists names, providers, purposes, durations and permission categories; it also lets you reopen your preferences. Updated information will be provided where the purpose or circumstances of processing require it. Publishing a new notice does not itself obtain consent.