Personal Data Notice (KVKK)

Data controller

Butiko Bilgi Teknoloji Pazarlama Ticaret Anonim Şirketi (“Butiko”) — Reşitpaşa Mah. Katar Cad. İTÜ Arı Teknokent 3 Binası No: 4 İç Kapı No: 201, Sarıyer / İstanbul, Türkiye, 34750 · Tel +90 216 807 06 00 · Fax 0216 80 70 604 · Tax office Sarıyer V.D. 1911321113 · MERSIS 0191132111300001 · Trade registry 442089-5

Personal data processed

• Identity: name; title in the enterprise form
• Contact: email address; optional phone number
• Request details: company or organisation name, industry, package of interest, budget and timing, your free-text note, preferred language
• Transaction security: IP address, browser information (user agent), country code, submission time
• Marketing (source): landing page, referring site, campaign tags and click IDs (utm, gclid, fbclid)
• Visit data (only if you accept analytics cookies): pages viewed, device and browser type, approximate location, Google Analytics cookie ID
• Ad measurement (only if you accept marketing cookies): Google Ads and Meta Pixel cookie IDs, ad-click and form-conversion data; SHA-256 hashes of email and phone
• Site assistant (only if you open the assistant and accept its notice): the written transcript and anything you share in the chat; no voice recording is stored

Purposes

• Receiving, evaluating and answering quote and agency service enquiries
• Measuring which channels and ad campaigns enquiries come from
• If you consent, measuring how our ads perform and showing them to people who may be interested
• Answering your questions through the site assistant and guiding you to the quote form
• Detecting and blocking fake, automated or malicious submissions
• Meeting legal obligations

Legal basis

Your name, contact, request and source data are processed under KVKK art. 5/2 (c) as necessary to establish the relationship you requested, and art. 5/2 (f) within our legitimate interest; the transfer abroad relies on the explicit consent you give by submitting the form, under art. 9. Visit data and ad measurement rely solely on the explicit consent you give in the cookie banner (KVKK art. 5/1, art. 9). Conversations with the site assistant, and their transfer abroad, rely on the explicit consent you give by accepting its notice when you start it (KVKK art. 5/1, art. 9). You may withdraw consent at any time; withdrawal does not affect processing carried out before it.

Method of collection

Data is collected when you fill in and submit the form on cinela.ai and, if you consent, through analytics and marketing cookies, and through your conversation if you use the site assistant, electronically and by automated means.

Transfers

Data is stored on the infrastructure of our hosting and storage provider Cloudflare, Inc. (USA); form notifications are delivered by the email service Resend, Inc. (USA); if you accept analytics cookies, visit data is transferred to Google LLC (USA); if you accept marketing cookies, ad-measurement data is transferred to Google LLC (USA) and to Meta Platforms Ireland Ltd. (Ireland) and its parent Meta Platforms, Inc. (USA); if you use the site assistant, your conversation is processed on the infrastructure of our AI and voice provider ElevenLabs, Inc. (USA). This constitutes a transfer abroad. Beyond that, data is not shared with any third party except competent public authorities where the law requires it.

Retention

For at most 24 months after your enquiry is concluded; earlier if you request deletion. At the end of the period data is irreversibly deleted. Site assistant transcripts are deleted after 180 days.

Your rights (KVKK art. 11)

• To learn whether your personal data is processed
• To request information if it has been processed
• To learn the purpose of processing and whether it is used accordingly
• To know the third parties to whom it is transferred, in Türkiye or abroad
• To request correction if incomplete or inaccurate
• To request deletion or destruction under KVKK art. 7
• To request that corrections, deletions and destructions be notified to third-party recipients
• To object to a result to your detriment produced exclusively by automated analysis
• To claim compensation for damage caused by unlawful processing

Applications

To exercise your rights, email info@cinela.ai or write to the address above. Applications are concluded free of charge within 30 days at the latest; if the procedure incurs a separate cost, the tariff set by the Personal Data Protection Board may apply.