01.Overview

wall.click operates in compliance with the European Union General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law No. 6698 (KVKK). This page summarises the rights and processing practices that apply to users residing in the EU under the GDPR. It also serves as supplementary information to the KVKK Privacy Notice for users based in Turkey.

02.Data controller

Company: wall.click
Address: Kartaltepe Mah. Süvari Cad. No: 10, Küçükçekmece / Istanbul, Turkey
Email: info@wall.click
Phone: +90 540 620 01 00
Data Protection Officer (DPO): info@wall.click

03.Categories of data processed

User data: Full name, email, company name, phone (optional)
Usage data: Login times, browser type, in-dashboard interactions
Click and visitor data: IP addresses (hashed), geolocation (country/city), User-Agent, campaign parameters
Live support data: Conversation transcripts, optional uploaded files, images and voice messages (stored on our EU server — Frankfurt)
Payment data: Processed exclusively by PayTR; card details are never stored on our servers

04.Legal bases for processing

We process data on the following legal bases (GDPR Article 6):

Contract (Art. 6(1)(b)): Service provision and subscription management
Legitimate interest (Art. 6(1)(f)): Fraudulent click detection, fraud prevention, service security
Explicit consent (Art. 6(1)(a)): Optional marketing communications
Legal obligation (Art. 6(1)(c)): Tax legislation, billing records

05.Your data subject rights

GDPR Articles 15-22 grant you seven fundamental rights. The cards below summarise each one:

Right of access

Right to obtain information about the personal data we process about you (Article 15).

Right to rectification

Right to request correction of inaccurate or incomplete data (Article 16).

Right to erasure

"Right to be forgotten" — request deletion of your data (Article 17).

Restriction of processing

Request to suspend processing under certain conditions (Article 18).

Data portability

Receive your data in a machine-readable format (Article 20).

Right to object

Object to processing based on legitimate interests (Article 21).

No automated decisions

Right not to be subject to fully automated decisions, including profiling (Article 22).

To exercise these rights, please contact us at info@wall.click. We will respond within 30 days at the latest.

06.Data transfers outside the EU

To block fraudulent clicks, IP addresses are transferred to your Google Ads account. Google relies on Standard Contractual Clauses (SCCs) for transfers from the EU to the US. All third-party processors we work with operate under GDPR-compliant contracts.

07.Retention periods

Click/visitor data: For as long as the account is active + 90 days
Live support file/voice attachments: 90 days after the conversation closes; once the period ends, files are automatically deleted from disk and database
Account information: 5 years after account deletion, to meet legal retention obligations (tax legislation)
Marketing consent: Until withdrawn

08.Data breach notification

If we identify a personal data breach, we notify the relevant supervisory authority within 72 hours, as required by GDPR Article 33. If the breach is likely to result in a high risk to your rights and freedoms (Article 34), we will notify you without undue delay.

09.Data security

All communications are protected with SSL/TLS encryption
IP addresses are stored in hashed form
Passwords are one-way hashed with BCrypt
Regular security audits and penetration tests are performed
Access controls follow the principle of least privilege

10.Right to complain

If you have concerns about how your data is processed, you have the right to lodge a complaint with the data protection authority of your country of residence. For Turkey: the Turkish Personal Data Protection Authority (KVKK) — kvkk.gov.tr. For the EU: the competent authority of your country of residence.

11.Contact

For any questions or requests related to the GDPR, you can reach us at info@wall.click.

GDPR Compliance