Privacy Notice

1. Controller

Your personal data is processed by ROADMAP Danışmanlık Anonim Şirketi, the company operating the ivmero service, as data controller.

• Legal entity: ROADMAP Danışmanlık Anonim Şirketi
• Address: Sultan Selim Mah. Hümeyra Sok. Nef 09 B Blok No:7 Interior door: 39, Kağıthane, Istanbul, Turkey
• Data subject requests: privacy@ivmero.com
• General contact: support@ivmero.com

2. Personal data we process

When you submit the demo request form, contact us by email or use the service, the following data is processed:

• Identity data: first and last name
• Contact data: email address, phone number
• Business data: company name, website, monthly ad budget range, e-commerce platform in use
• Technical and security data: IP address, browser and device information, site usage records (through cookies)
• Account data: the email address used to sign in and authorisation records

3. Purposes of processing

• Assessing your demo request and getting back to you
• Presenting the service and providing a quotation
• Entering into and performing the contract
• Handling requests and complaints
• Keeping the site and service secure and measuring usage statistics
• Sending commercial electronic messages where you have given consent

4. Legal bases

We rely on Article 6(1)(b) GDPR (performance of a contract or steps prior to entering into one), Article 6(1)(f) GDPR (legitimate interests — securing the service and improving it) and, for marketing messages and analytics cookies, Article 6(1)(a) GDPR (consent).

For data subjects in Turkey the corresponding bases under Law No. 6698 are Article 5(2)(c), Article 5(2)(f) and, for marketing, explicit consent under Article 5(1).

5. Recipients and international transfers

Your data is shared only with the processors that provide us with hosting, database, email delivery, form handling, error tracking and analytics services. Our primary hosting and database infrastructure runs on servers in the European Union.

Some processors operate servers outside the EEA (currently the United States). Those transfers are made under the European Commission’s Standard Contractual Clauses, or an adequacy decision where one applies. The current list of processors is published in the Privacy Policy.

6. Retention

Demo request data is retained for 24 months after the request is closed. Account and service data is retained for the term of the contract and for 10 years after it ends, in line with statutory retention periods under Turkish commercial and tax law. Cookie-based usage data is retained for the periods set out in the Cookie Policy.

7. Your rights

Under Articles 15 to 22 GDPR you have the right to:

• be informed about and access your personal data
• have inaccurate data rectified and, where applicable, erased
• request restriction of processing and object to processing based on legitimate interests
• receive your data in a portable format
• withdraw consent at any time, without affecting processing already carried out
• lodge a complaint with your local supervisory authority (in Turkey, the KVKK Board)

8. Exercising your rights

Send your request to privacy@ivmero.com. We respond within one month, as required by Article 12(3) GDPR; where a request is complex we may extend this by a further two months and will tell you if we do.