Personal Data Protection, Privacy and Security
This notice has been prepared by Bambu Dijital, owned by Kerem İlerisoy (“Bambu Dijital”), to inform you about the processing of your personal data through the bambudijital.com website (the “Website”) under Turkish Personal Data Protection Law No. 6698 (“KVKK”) and related legislation. The Turkish version of this notice prevails.
Last updated: 24 September 2026
1. Data Controller
Your personal data is processed by Kerem İlerisoy (Bambu Dijital) as data controller. Address: Güzelkent Mah. 9 Eylül İzmir Cad. 14A/5, Etimesgut / Ankara, Turkey. For privacy requests, contact us at [email protected].
2. Personal Data Collected and Collection Methods
The following personal data may be processed through the Website or in the course of your communication with Bambu Dijital:
- Identity and contact data: name and surname, email address, phone number, message content
- Company information: company name, industry, position (if provided)
- Transaction security and technical data: IP address, log records, device/operating system and browser information, referring page, access times
- Marketing and analytics data: cookie/tag information, visit and interaction records, campaign/UTM parameters, conversion and performance data
- Request/complaint data: support requests, quote requests, meeting notes and correspondence
Your personal data may be collected by fully or partly automated means through contact/quote forms on the Website, email correspondence, cookies and similar technologies, phone calls (if any) and digital communication channels.
3. Purposes of Processing
Your personal data may be processed for the following purposes:
- Handling communication, evaluating and responding to quote/brief requests
- Providing agency services and running project and operational processes
- Customer relationship management and handling requests/complaints
- Ensuring Website security and preventing misuse or unauthorised access
- Improving service quality and user experience
- Fulfilling legal obligations and following legal processes
- Sending commercial electronic messages and running marketing activities, where you have given permission
- Analytics, performance reporting, statistical analysis and market research
4. Legal Grounds for Processing
Your personal data may be processed on the legal grounds set out in Articles 5 and 6 of the KVKK, mainly:
- Necessity for entering into or performing a contract (quote/brief processes, service delivery)
- Compliance with legal obligations (financial/tax obligations, requests from authorities)
- Establishing, exercising or protecting a right (handling disputes, legal proceedings)
- Legitimate interest (site security, fraud/misuse prevention, service quality and auditing)
- Explicit consent (in particular for marketing cookies, remarketing and commercial electronic messages)
5. Cookies and Similar Technologies
The Website stores the preferences it needs to work (for example your light/dark theme choice and your cookie preference) in your browser. Analytics and marketing cookies are used only with your explicit consent and only when the related measurement tools are active on the site; as long as you do not consent, these cookies are not set.
- Necessary: required for the basic functions and security of the site; cannot be turned off.
- Analytics: help measure visits statistically and improve the site.
- Marketing: used to measure ad campaigns, track conversions and show relevant ads.
Details and retention periods are listed in our Cookie Policy. You can change your choice at any time via the “Cookie settings” link at the bottom of the page, and delete or block cookies in your browser settings.
6. Transfer of Personal Data and Recipients
Your personal data may be transferred, to the extent necessary and in line with the law, to the following recipients for the purposes described in this notice:
- Service providers and suppliers: hosting, server, email, CRM, communication, form/survey, analytics and advertising technology providers
- Business partners: solution partners we work with where a project requires it (e.g. design, software, media buying, content production)
- Authorised public bodies: public institutions, regulators, courts and enforcement offices upon request under legal obligations
Where services require transfers abroad, transfers are made subject to the conditions set out in the KVKK and with the necessary technical and organisational measures.
7. Data Security
Bambu Dijital takes the utmost care to apply appropriate technical and organisational measures to prevent unlawful processing of and access to personal data and to ensure its safekeeping. Nevertheless, data transmission over the internet cannot be guaranteed to be completely risk-free.
8. Retention Periods
Your personal data is kept for the period required by law or necessary for the purpose for which it is processed. When this period ends, your data is deleted, destroyed or anonymised in accordance with the law.
9. Third-Party Websites
The Website may contain links to third-party sites. Bambu Dijital is not responsible for their privacy practices; we recommend that you review the privacy policies of any third-party site you visit.
10. Exceptional Cases
In the following limited cases, and subject to the law, your personal data may be shared with third parties:
- Where required by law, regulations or binding decisions of competent authorities
- Where necessary to conclude, perform or enforce contracts
- Upon duly made requests of competent administrative and judicial authorities
- Where necessary to establish, exercise or protect rights
- Where necessary for security and the prevention of misuse
11. Commercial Electronic Messages and Communication Preferences
Information about campaigns, newsletters and our services is sent only where necessary and in line with the law (with your explicit consent where required). You can change your communication preferences at any time and stop messages via the unsubscribe link in the message or by writing to [email protected].
12. Your Rights under the KVKK
Under Article 11 of the KVKK you have the right to learn whether your personal data is processed and, if so, to request information about it; to learn the purpose of processing and whether it is used accordingly; to know the third parties in Turkey or abroad to whom it is transferred; to request correction if it is incomplete or inaccurate; to request its deletion or destruction; to request that these actions be notified to third parties to whom it was transferred; to object to a result against you arising from analysis by automated systems; and to claim compensation for damages.
13. Applications and Contact
You can submit your requests under the KVKK by email to [email protected]. Applications are concluded free of charge within thirty days at the latest, depending on the nature of the request (KVKK Art. 13). If your application is rejected, you find the answer insufficient or no answer is given in time, you may file a complaint with the Turkish Personal Data Protection Board.
14. Updates
Bambu Dijital may update this notice when necessary. Updates take effect on the date they are published on the Website.