PRIVACY AND PERSONAL DATA PROTECTION NOTICE for using NoxAds.ai.

1.1. This Privacy and Personal Data Protection Notice has been prepared by Noxads Dijital Reklam A.Ş. (“NoxAds”) under the Turkish Personal Data Protection Law No. 6698 (“KVKK”).

1.2. The data controller under KVKK is: Noxads Dijital Reklam A.Ş. Address: ÜÇGEN MAH. ABDİ İPEKÇİ CAD. SİTESİ NO: 13 İÇ KAPI NO: 101 MURATPAŞA / ANTALYA MERSIS / Trade Registry No: 0632148162600001 Tax Office / Tax No: 6321481626 E-mail: info@noxads.ai

1.3. This notice explains how your personal data is processed within the scope of the use of https://noxads.ai/, contact forms, proposal requests, business meetings, project discovery processes, campaign planning, creative production, AI-supported work, reporting and service delivery.

2.1. NoxAds may process identity and contact data such as your name and surname, company name, title/role, e-mail address, phone number, website address, social media accounts and communication preferences.

2.2. Within the scope of project and business relations, project goals, campaign context, brief contents, brand assets, creative materials, information regarding advertising accounts, meeting notes, proposal and contract contents, reports and other files or information shared by you may be processed.

2.3. Within the scope of website use, technical data such as IP address, device information, browser type, operating system, approximate location, referring page, visited pages, session information, click and navigation data and data obtained through cookies may be processed.

2.4. Within the scope of invoicing and commercial relations, tax information, invoice information, payment records, current account information and contractual records may be processed.

2.5. During communication processes, e-mail correspondence, meeting notes, call records, online meeting information and support/contact requests may be processed.

3.1. Your personal data may be collected through website forms, e-mail, phone, online meetings, social media channels, proposal and contract processes, project management tools, file-sharing channels and business materials provided by you.

3.2. Your technical data may be collected automatically through cookies, pixel tags, analytics tools, advertising measurement technologies, server logs and similar digital tools.

3.3. Some data may be processed through third-party systems such as Google, Meta, LinkedIn, advertising platforms, analytics tools, CRM systems, cloud storage, appointment tools, AI-supported tools and similar services.

4.1. Your personal data may be processed to respond to your requests, communicate with you, prepare proposals, assess project suitability and conduct pre-contractual discussions.

4.2. Your personal data may be processed to carry out strategy, creative production, digital media planning, performance advertising, campaign management, reporting, analysis, automation and AI-supported workflows.

4.3. Your personal data may be processed to manage client relations, track project processes, prepare deliverables, conduct approval processes, provide operational support and improve service quality.

4.4. Your personal data may be processed to carry out invoicing, accounting, tax, legal record keeping, contract management and obligations arising from legislation.

4.5. Your personal data may be processed to ensure website security, prevent misuse, resolve technical issues, improve website experience and measure advertising and campaign performance.

4.6. Your personal data may be processed to protect NoxAds’ rights, establish evidence in disputes, review requests and respond to requests from competent institutions or authorities.

5.1. Your identity, contact, project and client transaction data may be processed based on the legal grounds of establishment or performance of a contract, conducting pre-contractual processes and legitimate interest.

5.2. Your accounting, invoice, tax and legal record information may be processed based on the legal ground of compliance with legal obligations.

5.3. Your data relating to disputes, requests, complaints and rights protection processes may be processed based on the legal ground of establishment, exercise or protection of a right.

5.4. Your personal data may be processed based on your explicit consent for non-essential cookies, advertising and targeting activities, commercial electronic communications and other processing activities requiring explicit consent.

5.5. Special categories of personal data are not processed as a rule. If such data is shared by you without being required or becomes necessary within the scope of a project, it is processed only in accordance with the conditions set out under KVKK and with necessary security measures.

6.1. NoxAds does not request special categories of personal data within the scope of its ordinary services.

6.2. We kindly ask you not to share materials containing health data, biometric data, criminal conviction data, political opinions, religious beliefs, union membership or similar special categories of personal data unless necessary.

6.3. If a file or content containing special categories of personal data is submitted to us, such information is processed only to the extent necessary for the relevant request or project; where necessary, it may be deleted, masked or minimized.

7.1. Cookies, pixels, tags and similar technologies may be used on the NoxAds.ai website.

7.2. Strictly necessary cookies may be used for website operation, ensuring security and remembering your cookie preferences.

7.3. Analytics, performance, advertising, targeting and remarketing cookies are used, as a rule, based on your explicit consent.

7.4. You may access detailed information regarding cookies through NoxAds’ Cookie Policy.

8.1. Depending on the project scope, NoxAds may use AI-supported tools in content production, visual concept development, advertising copy creation, campaign analysis, reporting, automation and workflow design processes.

8.2. Information transferred to AI-supported tools is limited, as much as possible, to data that is relevant, purpose-related and necessary for the project.

8.3. Client data is not shared for model training purposes unless otherwise agreed in writing.

8.4. AI-supported outputs do not constitute a guarantee of final accuracy, legal compliance, advertising platform approval or commercial success and are subject to human review where necessary.

9.1. Your personal data may be shared with third parties only to the extent necessary for the relevant purpose and in accordance with KVKK.

9.2. In this context, your personal data may be shared with hosting, infrastructure, website, e-mail, CRM, meeting, appointment, file-sharing, cloud storage, analytics, advertising technology, reporting, automation and AI service providers.

9.3. Your personal data may be shared with accounting, legal, consultancy, media buying, campaign operations, production and technical support service providers.

9.4. Your personal data may be shared with authorized public institutions, regulatory authorities, courts and enforcement offices for the purpose of fulfilling legal obligations or responding to requests from competent authorities.

9.5. NoxAds does not sell your personal data to third parties for marketing purposes.

10.1. Some analytics, advertising, cloud, communication, appointment, AI, automation and infrastructure services used by NoxAds may have servers located abroad.

10.2. Therefore, your personal data may be transferred abroad in accordance with Article 9 of KVKK and relevant legislation.

10.3. International transfers may be carried out based on an adequacy decision, appropriate safeguards, standard contractual clauses, binding corporate rules or exceptional cases provided under the law.

10.4. Where required, your explicit consent for international transfer is requested separately.

11.1. Your personal data is retained for as long as necessary for the purpose of processing.

11.2. Communication and proposal records may be retained for a reasonable period after the request is concluded.

11.3. Contract, invoice, accounting and tax records may be retained for the statutory retention periods prescribed under applicable legislation.

11.4. Project files, campaign materials, reports and client transaction records may be retained during the project relationship and for the necessary archive period thereafter.

11.5. Cookie records may be retained according to the type, purpose and retention period of the relevant cookie.

11.6. Records relating to disputes may be retained for the applicable limitation periods.

11.7. Once the retention period expires, personal data is deleted, destroyed or anonymized.

12.1. NoxAds takes reasonable technical and administrative measures appropriate to the nature of its activities to prevent unlawful processing of or access to personal data and to ensure secure storage of such data.

12.2. These measures may include access authorization, restricted access, role-based access, secure file sharing, confidentiality obligations, supplier controls, backups, record keeping and internal process controls.

12.3. Employees, business partners and service providers with access to personal data are required to comply with confidentiality and data security obligations.

13.1. Where required, your separate consent is obtained for newsletters, campaign announcements, promotional or marketing commercial electronic communications sent by NoxAds.

13.2. If you do not wish to receive such communications, you may use the unsubscribe/opt-out methods provided to you or contact us at info@noxads.ai.

14.1. Your or your company’s brand name, project output, performance data, visual material, case study or reference information will not be used publicly without separate written agreement.

14.2. The business context shared with us shall not be interpreted as permission for unrelated promotion, resale or use in other client projects.

15.1. Under Article 11 of KVKK, you have the right to learn whether your personal data is being processed.

15.2. If your personal data has been processed, you may request information regarding such processing.

15.3. You may learn the purpose of processing your personal data and whether it is used in accordance with such purpose.

15.4. You may learn the third parties to whom your personal data is transferred domestically or abroad.

15.5. If your personal data is incomplete or inaccurate, you may request correction.

15.6. You may request deletion or destruction of your personal data within the framework of the conditions set out under KVKK.

15.7. You may request that correction, deletion or destruction operations be notified to third parties to whom your personal data has been transferred.

15.8. You may object to any result against you arising exclusively from the analysis of your personal data by automated systems.

15.9. If you suffer damage due to unlawful processing of your personal data, you may request compensation for such damage.

16.1. You may submit your requests regarding your rights under KVKK and your privacy-related questions through the following channels: E-mail: info@noxads.ai Address: ÜÇGEN MAH. ABDİ İPEKÇİ CAD. SİTESİ NO: 13 İÇ KAPI NO: 101 MURATPAŞA / ANTALYA

16.2. Your applications will be concluded as soon as possible and within 30 days at the latest, depending on the nature of the request.

16.3. Additional information may be requested to verify your identity in order to process your request.

17.1. NoxAds may update this notice due to changes in legislation, service scope, technologies used, third-party service providers or business processes.

17.2. The current version may be published by NoxAds on its website or through other appropriate channels.

18.1. This Privacy and Personal Data Protection Notice enters into force on the date it is published on the website.

18.2. Last updated: 29.07.2026