Data Protection Disclosure

1. Data Controller Identity

Your personal data below is processed by FiT48 Pilates Studio ("We").

2. Collection of Personal Data

Under the Turkish Personal Data Protection Law (No. 6698) ("KVKK"), your personal data is collected automatically and/or manually through the following methods:

A. Google Analytics 4 (Automatic Collection)

Data Collected:

• IP address (for identifying site visitors)
• Device and browser information (operating system, browser type, device type)
• Pages visited and time spent on these pages
• Referrer information
• Actions taken on the page (clicks, scrolls)

Legal Basis: Legitimate Interest — To analyze site performance, improve user experience, and measure business success

B. WhatsApp Business (Manual Collection)

Data Collected:

• Phone number
• Message text and content
• Message time and date
• Device information (recorded by WhatsApp)

Legal Basis: Explicit Consent — When you voluntarily communicate with us via WhatsApp

C. Phone and Email Contact (Manual Collection)

Data Collected:

• Phone number
• Email address
• Message content and purpose

Legal Basis: Explicit Consent — When you contact us

D. Google Maps (Automatic Collection)

Data Collected:

• Map interaction data
• Location-related query information

Legal Basis: Legitimate Interest — To display our service location

3. Purposes of Personal Data Processing

Your personal data is processed for the following purposes:

• Business performance analysis and reporting
• Improvement of site and services
• Customer communication
• Marketing and promotional activities (WhatsApp Business)
• Fulfillment of legal obligations
• Statistical analysis

4. Personal Data Retention Period

Your personal data will be retained for the following periods:

• Google Analytics Data: 14 months (Google's default retention period)
• WhatsApp Messages: 90 days (WhatsApp's default retention period)
• Contact Records: 3 years (legal obligation and accounting records)
• Phone Number: Until you withdraw your consent

5. Deletion of Personal Data

After the retention periods mentioned above, your personal data will be automatically deleted or anonymized. However, some data may be retained for longer periods due to legal obligations.

6. Your Rights

According to Article 12 of KVKK, you have the following rights:

A. Right to Access

You have the right to know whether your personal data is being processed, for what purposes, the retention period, and other information.

B. Right to Correction

You have the right to request correction of your personal data if it is incomplete, incorrect, or outdated.

C. Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal data. However, some data may not be deleted due to legal obligations.

D. Right to Restrict Processing

You have the right to request restriction of processing of your personal data. In this case, data may be processed only in cases with exceptions specified in Article 4 of KVKK.

E. Right to Object

You have the right to object to the processing of your data for analytical and marketing purposes.

F. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

7. Exercising Your Rights

You can exercise the above rights by contacting us at the following contact information:

Your request will be answered within 30 days of receipt.

8. Right to Complaint and Appeal

According to Article 77 of KVKK, if your rights are violated, you have the right to file a complaint with the Personal Data Protection Authority (KVKK) listed below:

9. Third-Party Service Providers

Your personal data may be transferred to the following third-party service providers:

• Google LLC: Google Analytics, Google Maps, Google Ads (analytics and advertising)
• WhatsApp Inc. (Meta Platforms): WhatsApp Business (communication)
• Google Ireland Limited: Google Fonts (fonts)

10. Updates to this Notice

This notice may be updated at any time without prior notice in accordance with legal requirements or business needs. Changes will be effective as of their publication on this page.