Datenschutzerklärung

Privacy Policy

1. Controller

Controller responsible for data processing on this website:

A Koç
Tütüncüler Köyü
Tütüncüler Küme Evleri No: 36
53300 Pazar / Rize

Email: ak@ak-pro.com
Phone: +90 530 161 56 09

2. Overview of data processing

AK Newsletter manages newsletter subscribers, organizes company and employee accounts, compiles email newsletters using templates and uploaded images, and dispatches newsletters via SMTP to confirmed subscribers.

3. What data we process

3.1 Data collected automatically when you visit

• IP address (temporarily in server logs)
• Date and time of access
• Browser type and version
• Operating system
• Referrer information transmitted by the browser, where present

3.2 Data collected through user actions

Public subscription form:

• Email address (required)
• Offer/preference selection
• Language preference
• Confirmation timestamp (double opt-in)
• Versioned consent text, selected offer preference and confirmation source
• Unsubscribe timestamp (if applicable)

Admin/staff area:

• Employee login data (email, password hash)
• Employee name and company assignment
• Company master data (name, address, contact, VAT ID, legal texts, branding)
• Newsletter drafts, scheduled jobs and dispatch logs
• Imported/exported subscriber lists (CSV/XLSX)
• Uploaded images and template assets

3.3 Not collected

• No payment information
• No native opening or click tracking
• No external images in newsletter content; uploaded images are served by this installation

4. Purposes of processing

• Providing the newsletter subscription and confirmation workflow (double opt-in)
• Dispatch of company-specific email newsletters to confirmed subscribers
• Administration of companies, employees and permissions
• Template management and image uploads for newsletter creation
• Import, export and maintenance of subscriber data
• Error analysis, rate limiting, session security and operational logging

5. Legal bases

• Art. 6(1)(a) GDPR (consent for newsletter subscription and dispatch)
• Art. 6(1)(b) GDPR (performance of an agreement or pre-contractual measures)
• Art. 6(1)(f) GDPR (legitimate interest in secure operation, access control and error analysis)

6. Retention period

• Sessions / CSRF tokens: until logout or max 24 h / session expiry
• Subscriber data: while the subscription is active or until a justified deletion request is fulfilled; removal from the active list is not the same as final erasure
• Employee accounts and company data: until termination of the assignment or contract
• Preview messages and delivery logs: according to the workspace's configured proposal; deletion is performed only by an authorized operator after review
• A keyed, pseudonymous suppression value may remain after unsubscribe or erasure to prevent accidental re-import and dispatch

The application does not promise automatic deletion of web-server or infrastructure logs. The actual hosting environment, legal duties and configured retention proposals must be documented by the operator before publication.

7. Data sharing

7.1 Service providers

The software does not prescribe a hosting or mail provider. Before publication, the operator must name the providers actually used, their processing locations and any processors. Static application assets are delivered by this installation; no CDN provider is configured in the application code.

7.2 External content

Newsletter emails may link to or embed:

• Branding assets and uploaded newsletter images hosted by this installation
• Links operated by the newsletter operator or third parties named in the newsletter content

When external links or content are accessed, the privacy policies of the respective providers apply. Recipients are informed of this in each newsletter footer.

8. Cookies and similar technologies

8.1 Strictly necessary cookies

• Session cookie for authenticated employees (HttpOnly, Secure if HTTPS)
• CSRF protection token

8.2 Analytics cookies

• Not implemented in this application.

Detailed information about cookies can be found in our cookie policy.

9. Your rights (GDPR)

You have the right to:

• Access to your stored data (Art. 15 GDPR)
• Rectification of incorrect data (Art. 16 GDPR)
• Deletion of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)

Contact for privacy requests: ak@ak-pro.com

10. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority: KVKK – Kişisel Verileri Koruma Kurumu (Turkey).

Contact and demo requests

When you submit a contact or demo request, we process your name, email address, optional company name and message to respond to your enquiry. In production mode, requests can be sent to the configured operator address using the configured mail relay. They do not create a newsletter subscription or a user account. Demo access is granted manually. The legal basis is Art. 6(1)(b) GDPR for pre-contractual enquiries and Art. 6(1)(f) GDPR for other business correspondence. Correspondence is deleted when the enquiry has been resolved and no contractual or statutory retention obligation remains. A hashed IP-based rate-limit record is used to prevent abuse.

11. Changes

We may update this privacy policy to reflect legal changes or changes to the service.

Last updated: September 6, 2026