GDPR
Privacy summary for EU/EEA visitors
This English summary supports visitors from the European Economic Area. The authoritative legal disclosure for Turkey is the KVKK notice (Turkish).
Last updated: 2026-06-08 · Controller: isteBul (Nadi Gürel, Izmir, Turkey)
What we process
- Account and contact data (email, name, phone when provided)
- Decision profile inputs (budget, preferences, category-specific answers)
- Security logs (IP, session, bot protection)
- Payment references (subscription identifiers — no card storage on isteBul servers)
- Analytics (only after cookie consent on the marketing site)
Lawful bases
Contract performance, legal obligations, legitimate interests (security, product improvement), and consent for marketing cookies, optional session replay, and partner lead sharing where applicable.
Your rights
Access, rectification, erasure, restriction, portability, objection, and complaint to your supervisory authority.
- Requests:info@istebul.com — subject: GDPR Request or KVKK Başvurusu
- Response target: within 30 days
- Cookies:Cookie policy (Turkish)
Subprocessors
Data may be processed by hosting, security, payment and AI service providers. Contact info@istebul.com for the current subprocessor list.
International transfers
Data may be processed outside the EU with appropriate contractual safeguards.
Legal note
This page is an informational summary, not legal advice. Have qualified counsel review before relying on it in regulated contexts.