Explicit Consent Text

01About this text

This Explicit Consent Text has been prepared by İnurdemirel Dijital Pazarlama Ve Yazılım Hizmetleri Ticaret Limited Şirketi (the “Company”). It covers only the personal data processing activities based on your explicit consent on the inurdemirel.com website and in the client panel at www.inurdemirel.com/panel.

The other personal data processing activities on the site and transfers abroad are not the subject of this text. They are explained in the KVKK Privacy Notice.

Explicit consent is consent relating to a specific matter, based on information and expressed of free will (Personal Data Protection Law No. 6698, “KVKK”, Article 3). Your consent is entirely optional. It is not a precondition of any service, form or contract.

You can accept or reject the Functional, Analytics and Marketing categories separately. Giving consent to one does not require you to give consent to the others.

You are informed about your personal data separately from this text, through the KVKK Privacy Notice and the Cookie Policy. We recommend that you read these two texts before giving consent.

02Data controller

Trade name

İnurdemirel Dijital Pazarlama Ve Yazılım Hizmetleri Ticaret Limited Şirketi

Tax and registry details

Mithatpaşa Tax Office, tax number 4781161820. MERSIS number: 0478116182000001. Trade registry number: 498128

Address

Meşrutiyet Mah. Konur Sok. Özsoy İş Hanı No: 25/13, 06420 Çankaya/Ankara

Telephone

0850 840 41 74

E-mail

work@inurdemirel.com

Website

inurdemirel.com

03Data that may be processed with your explicit consent

There are three categories on the site that are based on your explicit consent: the Functional, Analytics and Marketing categories in the preferences panel. The Functional category is a single consent and covers four purposes together: the appointment calendar (Cal.com), recent queries and e-mail verification in the free tools, the DA PA Checker query history and read site announcements. These purposes are shown in separate rows in the table below, but they are switched on and off together with the same toggle.

Strictly Necessary cookies are required for the site to work. These cookies are not subject to consent and are not the subject of this text.

When you create an appointment via the calendar, the name and e-mail address you enter and the time you select are processed pursuant to KVKK Article 5(2)(c) to fulfil your request. Your consent is not requested for this processing, and it is explained in the KVKK Privacy Notice. The query you make in DA PA Checker is not dependent on your consent either: the domain you query is sent to data providers via our server to obtain the result; your IP address used in the process is not stored permanently.

No special categories of personal data are processed with the consents under this text. We do not request your special categories of personal data; if such data are sent on your own initiative, they are processed only to the extent required by your request and under the conditions in Article 6 of the Law, and are destroyed if they are not necessary.

04Analytics and marketing tools

Google Analytics 4 and Google Tag Manager are used in the Analytics category, and Google Ads, Meta Pixel and the referral source record in the client panel are used in the Marketing category. Each of these tools is loaded only after you allow its own category; the tags belonging to a category you have not allowed are not loaded at all and do not place cookies on your device.

Google tools work with Google Consent Mode (Consent Mode v2); your consent status is conveyed to the Google tags through these signals. The names, providers and durations of the cookies used are listed in the Cookie Policy.

When a new tool or purpose is added, this text and the Cookie Policy are updated, the version of the policy changes and you are asked for your preferences again. A permission you have previously given does not automatically apply to new tools.

05Transfer abroad and possible risks

The appointment calendar (Cal.com), Google Analytics 4, Google Ads and Meta Pixel require data to be processed on servers outside Türkiye. These transfers are part of the normal operation of the tools you allow and take place regularly.

Your explicit consent is the legal basis not for the transfer abroad, but for these tools being loaded on the page and processing your data with cookies and similar technologies. Regular transfers are not based on explicit consent; we take as our principle that these transfers are carried out in accordance with KVKK Article 9, and when the standard contract announced by the Board is signed with a provider, it is notified to the Personal Data Protection Authority within 5 business days of signature. A tool to which you have not given consent is not loaded, and no data are transferred abroad through that tool.

The possible risks of transfer abroad are as follows:

• As of the effective date of this text, there is no adequacy decision of the Personal Data Protection Board for the countries to which the data are transferred.
• The recipient country may not have a level of personal data protection equivalent to that in Türkiye.
• The public authorities of the recipient country may access the data on the basis of that country’s legislation.
• It may be more difficult for you to exercise your rights against a foreign service provider and to pursue remedies for these rights.
• The supervisory power of the Personal Data Protection Board may not directly reach the recipient abroad.

This section covers only the transfers related to consent-based tools. Other transfers abroad, including the transfer made to our group company Shofix OÜ, are explained in the KVKK Privacy Notice.

06How you give your consent

• On your first visit to the site, a cookie notice is shown. The Reject and Accept All buttons in the notice are equally visible and can be used with the same ease; rejecting is as easy as accepting. The notice also contains a Manage Preferences link for selecting the categories separately.
• The notice states that we use strictly necessary cookies and that the other categories run only with your permission; it contains links to the Cookie Policy and the KVKK Privacy Notice. The third parties that process data in the optional categories (Cal.com, Google and Meta) are named in the preferences panel.
• When you use the Accept All button, you give consent to all of the Functional, Analytics and Marketing categories. If your browser sends a Global Privacy Control (GPC) signal, this button does not turn on the Marketing category.
• When Reject is selected, all of the optional categories remain off. Only Strictly Necessary cookies run.
• In the panel opened with the Manage Preferences link, you can turn the Functional, Analytics and Marketing categories on and off separately. The Functional category is a single toggle and covers together the appointment calendar, recent queries and e-mail verification in the free tools, the DA PA Checker query history and the record of read site announcements. A short description and a list of the cookies used are shown next to each category, and links to the KVKK Privacy Notice and the Cookie Policy are shown at the top of the panel. The optional categories are off at the start, and there is no pre-ticked option.
• Scrolling the page, closing the notice or continuing to use the site does not count as consent. As long as you have not made a choice, only Strictly Necessary cookies run.
• Access to the site does not depend on your giving consent. Even when you reject all of the optional categories, you can access all pages of the site and use the forms, the tools and the client panel. Only the tools in the category you have not allowed are not loaded and the records are not kept. You can send your appointment request via the contact form, 0850 840 41 74, work@inurdemirel.com or WhatsApp.
• The appointment calendar is loaded only when you have allowed the Functional category and you open the calendar. If you have not yet given this permission when you open the calendar, a permission screen is shown instead of the calendar. The Allow and Open the Calendar button there turns on the entire Functional category; this permission also covers the storage in your browser of your recent queries and your e-mail verification in the free tools, the DA PA Checker query history and the site announcements you have read.
• The GPC signal is treated as a rejection for the Marketing category. As long as your browser sends a GPC signal, the Marketing category remains off and cannot be turned on; to turn it on, you need to turn off the GPC setting in your browser.

Your choice is stored on your device in a first-party strictly necessary cookie named inur_consent. This cookie contains your category preferences, the time the choice was made, the current policy version, a randomly generated consent ID and where the choice was made (notice, preferences panel or calendar). This record is processed pursuant to KVKK Article 5(2)(ç) and Article 5(2)(f) for the purpose of applying your cookie choice; it is not based on explicit consent.

The cookie is valid for 12 months. When this period expires or the version of the Cookie Policy changes, you are asked for your choice again.

07Changing and withdrawing your consent

• You can change your preferences or withdraw your consent entirely at any time via the Cookie Preferences link at the bottom of every page or the Cookie Policy page. Withdrawing consent is as easy as giving it.
• You can also send your requests to withdraw your consent and to erase your data processed on the basis of consent using the Data Subject Application Form.
• You do not need to give a reason to withdraw your consent, and doing so is free of charge.
• When you withdraw your consent, the records that belong to the relevant category and are created by our site (for example ar-gecmis-…, ar-eposta, dp-rows and inur_nf) are automatically deleted from your browser. An appointment calendar that is open at that moment is removed when you reload the page. You can delete the cookies that third parties keep on their own domains from your browser settings.
• Withdrawal has effect for the future. It does not affect processing carried out lawfully on the basis of your consent before the withdrawal.
• Your data that are based on consent and have no other legal basis are erased, destroyed or anonymised in accordance with our retention and destruction rules. These rules are explained in the KVKK Privacy Notice.
• When you withdraw the permission you gave to the Functional category, the calendar is not loaded again. The records relating to an appointment you have created are not affected by this, as they are not based on consent. You can separately request the cancellation of your appointment and the erasure of these records.
• You are not prevented from using our services and are not subjected to different prices or conditions because you do not give consent or withdraw your consent.

08Retention periods

• inur_consent: 12 months. It is in the Strictly Necessary category and is used only to remember and apply your cookie choice.
• dp-rows and inur_nf: The domains you query and their results (at most 50 records, dp-rows) and the IDs of the site announcements you have read (at most 200 records, inur_nf) are kept only in your browser and are not sent to the Company. They remain until you delete your browser data or withdraw the permission you gave to the Functional category.
• inur_marketing_attribution_v1: The information on the source from which you came to the client panel is kept only in your browser, for at most 30 days; it is deleted when you withdraw your Marketing permission. If you register in the panel, this information is retained together with your account until you withdraw your Marketing permission or close your account.
• Cal.com appointment records: These are based not on consent but on fulfilling your request. They are retained for the period needed to hold the meeting and conclude your request. After that, the periods specified in the KVKK Privacy Notice apply.
• ar-gecmis-… and ar-eposta: Only in your browser; until you withdraw your Functional permission or delete them yourself.
• Google Analytics 4: _ga and _ga_<id> cookies 2 years. Google Ads: _gcl_au 90 days; advertising cookies on Google domains for the period set by Google (at most 13 months). Meta Pixel: _fbp and fr 90 days. Details are in the Cookie Policy. The retention periods of the data these providers keep on their own servers are subject to the providers’ own policies.

Data whose retention period has expired, or whose processing condition has ceased to exist because you withdrew your consent, are erased, destroyed or anonymised. Records of destruction operations are retained for at least 3 years.

09Processing for which explicit consent is not requested

The processing below is based not on explicit consent but on the other legal bases in KVKK Article 5(2). Your consent is not requested for this processing. Not giving consent or withdrawing your consent does not affect this processing.

• Processing the information you send through the free analysis and contact forms in order to assess and respond to your request.
• Processing the name and e-mail address you enter and the time you select when you create an appointment via the appointment calendar, in order to fulfil your request (KVKK Article 5(2)(c)).
• The establishment and performance of the service contract. The order, support and site access information processes carried out in the client panel (www.inurdemirel.com/panel). Our group company Shofix OÜ (Estonia) also accesses customer data to carry out and report the services; this transfer abroad is not based on explicit consent and is explained in the KVKK Privacy Notice.
• Keeping server and traffic logs, including IP addresses, for 1 year for security purposes (KVKK Article 5(2)(f)) and sharing them with competent authorities in the event of their lawful requests (KVKK Article 5(2)(ç)).
• The strictly necessary cookie inur_consent and the ind_lang record that remembers the language you choose.
• Loading the font and code library files needed to display the pages. These files are served from the site’s own server; no third-party resources are loaded when the pages open. These requests do not create cookies and are not affected by your cookie preferences. Cloudflare Turnstile is loaded for bot verification in the free tools and the gift wheel (KVKK Article 5(2)(f)). The Cal.com appointment calendar and the Google and Meta tools, by contrast, are loaded only when you allow the relevant category. When you choose card payment in the client panel, you are redirected for the payment to the secure payment page of the payment institution (Revolut or PayTR); the relevant payment institution’s own policies apply on that page.
• Correspondence initiated by you by telephone, e-mail and WhatsApp. The WhatsApp service is provided by Meta, which is established abroad. Details are in the KVKK Privacy Notice.

Information about this processing is in the KVKK Privacy Notice and the Privacy Policy.

Consent for commercial electronic messages to be sent by e-mail or SMS is not obtained with this text. The separate Commercial Electronic Message Consent is used for that.

10Consent statements

The statements below correspond to the choices you make in the cookie notice, in the Manage Preferences panel or on the permission screen of the appointment calendar. The notice and the panel show a short description of the categories and links to the Cookie Policy and the KVKK Privacy Notice.

When you turn on a category and save your preferences, use the Accept All button or press the Allow and Open the Calendar button in the appointment calendar, you give the relevant statements among those below. The Allow and Open the Calendar button covers only the Functional statement.

• Functional: So that the appointment calendar can be displayed on the site, I give explicit consent to the processing by Cal.com of my IP address, my browser and device information and the cookies and similar identifiers used by Cal.com when I open the calendar, and to the storage only in my own browser of my recent queries and my e-mail verification token in the free tools, the domains I query in DA PA Checker and their results (at most 50 records) and the IDs of the site announcements I have read (at most 200 records; so that unread announcements can be distinguished in the notification badge). These browser records are not sent to the Company.
• Analytics: I give explicit consent to the processing of cookie identifiers relating to my use of the site, my page view and interaction data, my device and approximate location information and my IP address through Google Analytics 4 and Google Tag Manager for statistical purposes.
• Marketing: I give explicit consent to the storage in my browser of the source from which I came to the client panel (source, campaign, ad click ID, referring site and landing page) and, if I register in the panel, to its recording together with my account; and to the processing of my cookie and advertising identifiers, the pages I visit, conversion events, my device information and my IP address through Google Ads and Meta Pixel for the purposes of measuring advertising effectiveness and showing me personalised ads based on my interests on the Google advertising network, on Facebook and on Instagram.

Giving one of these statements does not require you to give the others. Not giving any of them does not prevent your access to the pages and forms of the site and to our services.

11Your rights and application methods

Under KVKK Article 11, you have the right to learn whether your personal data are processed, to request information about it if they have been processed, to learn the purpose of processing and whether the data are used in accordance with their purpose, and to know the third parties in Türkiye or abroad to whom they are transferred.

You can also request the correction of your data if they have been processed incompletely or incorrectly, their erasure or destruction within the framework of the conditions in KVKK Article 7, and the notification of these operations to the third parties to whom the data have been transferred. You can object to a result to your detriment arising from an analysis carried out exclusively by automated systems, and request compensation for the damage you suffer due to unlawful processing.

You can make your application in Turkish and in writing with the Data Subject Application Form. You can hand-deliver the form bearing your wet signature to our address, or send it by registered mail with return receipt or through a notary public.

You can send your application signed with a secure electronic signature or mobile signature, or your application sent from the e-mail address you have previously notified to the Company and that is registered in our system, to work@inurdemirel.com.

Your application is concluded free of charge within 30 days at the latest.

If your application is rejected, if you find the response insufficient or if no response is given in time, you can lodge a complaint with the Personal Data Protection Board. The complaint is made within 30 days from the date you learn of the response and in any case within 60 days from the application date (KVKK Article 14).

12Version and effective date

This text is updated when necessary. With every update that extends or changes the subjects of consent, you are asked for your preferences again, and your previous consent does not apply to the new subjects.

Version

2.1

Effective date

October 24, 2026

Last updated

October 24, 2026

Related documents: KVKK Privacy Notice, Cookie Policy, Privacy Policy, Data Subject Application Form, Commercial Electronic Message Consent and Legal Information.