Privacy notice
In short: tracking on this site is off by default; only if you consent does a single-purpose Google Ads cookie run to measure advertising. Beyond that we only process the information you give us when you write to us yourself. Because the data controller is incorporated in New Zealand, your data is transferred outside Türkiye — who, where and why is set out one by one below.
1. Data controller
Your personal data is processed by the following organisation, acting as data controller:
- Legal name
- Waka Digital Limited
- Country of incorporation
- New Zealand
- Company number
- 1885497
- NZBN
- 9429033751610
- Registered office
- Astute Accounting Services Limited, 73a Boundary Road, Claudelands, Hamilton 3214, New Zealand
- Phone
- +90 545 656 50 57
- [email protected]
- Website
- wakaresearch.com
2. Personal data processed
- Identity / contact: name, surname, email address, and phone number if you provide one.
- Transaction data: the workshop you registered for, registration and payment dates, order number.
- Financial data: payment amount and payment status. Your card details are never entered on this site and are never seen by us; payment takes place on the payment provider's own page.
- Enquiry content: the message you write in the contact form.
- Billing data: the details you provide for invoicing, if you request one.
3. Purposes of processing
- Creating your workshop registration and providing the service,
- Processing payment and handling accounting and invoicing,
- Responding to your questions and requests,
- Managing the waiting list when places are full,
- Meeting statutory retention and disclosure obligations.
No marketing email is sent without your explicit consent. Newsletter subscription is separate and optional.
4. Legal basis
- Formation and performance of the contract (KVKK art. 5/2-c),
- Compliance with a legal obligation — for example tax legislation (art. 5/2-ç),
- Legitimate interest — improving and securing the service (art. 5/2-f),
- In all other cases, your explicit consent (art. 5/1).
5. Who it is shared with, and where it is held
Your data is not sold and is not shared for advertising. It is processed only to the extent needed to provide the service, by the following parties:
| Who | What for | Where |
|---|---|---|
| DigitalOcean, LLC | Server and hosting The site, the registration records and visit statistics are held on this server; the statistics records contain no IP address or browser details. | Germany (Frankfurt) |
| Cloudflare, Inc. | Domain, security and content delivery All traffic to the site passes through here; it provides connection security and attack protection. | United States (global network) |
| Stripe, Inc. | Payment infrastructure Card details are never entered on this site; payment is completed on Stripe's own page. | United States / Ireland |
| Meta Platforms (WhatsApp) | Contact channel Only if you message us on WhatsApp; the exchange takes place on WhatsApp. | United States / Ireland |
| Resend, Inc. | Email delivery Registration confirmations and notification emails are sent from here; your name and email address are passed to it for delivery. | United States (sending infrastructure: Japan — Tokyo region) |
| Waka Digital Limited | Data controller — the business itself The party that accesses the records and provides the service. | New Zealand |
| Google LLC | Ad conversion measurement — only with explicit consent Only activates if you choose "Accept" in the cookie banner; it measures which ad led to a registration or purchase. If you do not consent, no request is sent to Google. | United States |
Beyond these, data is disclosed only upon a lawful request from a competent public authority.
6. Transfer abroad (KVKK art. 9)
As the table above shows, your data is processed outside Türkiye: the site and the records sit on a server in Germany, the data controller is incorporated in New Zealand, and the payment and infrastructure providers are based in the US and Ireland.
This transfer is based on the explicit consent you give on the registration form and at the payment step (KVKK art. 9/1). The form contains a separate consent checkbox for transfer abroad; registration cannot be completed without it, because the service cannot technically be provided without that transfer.
You can withdraw your consent at any time. When you do, your data is deleted except where a statutory retention obligation applies; withdrawal does not make processing carried out until that point unlawful.
The data controller is also subject to obligations under the New Zealand Privacy Act 2020. That Act sets out thirteen Information Privacy Principles governing the collection, storage, accuracy of and access to personal information, and makes notification of privacy breaches carrying a risk of serious harm mandatory.
7. Retention period
Registration and payment records are retained for 10 years following the relevant year, as required by tax legislation. Contact form messages are kept for a maximum of 2 years after your enquiry is resolved. When the period expires, the data is deleted or anonymised.
8. Your rights
Under KVKK art. 11 you have the right to: learn whether your data is being processed, request information about it, learn the purpose of processing, know the third parties to whom it has been transferred domestically or abroad, request correction if it is incomplete or inaccurate, request deletion where the conditions are met, request that these actions be notified to the parties it was transferred to, object to an adverse outcome arising from automated analysis, and claim compensation if you suffer loss.
You can send your requests to [email protected]. Requests are concluded within 30 days at the latest.
Under the New Zealand Privacy Act 2020 you also have the right to access and request correction of your personal information; complaints about those rights can be made to the New Zealand Office of the Privacy Commissioner.
9. Cookies and browser storage
Tracking on this site is off by default. Only to measure whether our ads work, and only with your explicit consent, a single-purpose Google Ads conversion cookie is used: unless you choose "Accept" in the banner shown on screen, no request is sent to Google and no cookie is set. If you choose "No, thanks", your choice is remembered and tracking never runs. Beyond this there are no advertising cookies, no tracking pixels and no third-party analytics tool such as Google Analytics. We measure how many people visit the site and which pages are read using a simple counter that runs entirely on our own server. This counter writes nothing to your browser (no cookie, no other storage); your IP address and browser details are never written to disk — they are only hashed irreversibly with a random key that changes every day, so recognising the same visitor the next day is technically impossible. Measurement data is never sent to any third party, never used for advertising and never shared. If your browser sends a “Do Not Track” or “Global Privacy Control” signal, the counter does not run at all. To withdraw consent, simply clear this site's data in your browser; the banner will ask again on your next visit.
Depending on your consent choice, the following is stored in your browser:
| Name | Type | What for | Duration |
|---|---|---|---|
gg-wa-balon-kapali | sessionStorage (not a cookie) | So the WhatsApp prompt does not reopen during the session once you have closed it. | Deleted when you close the tab. |
gg-oy-<workshop> | sessionStorage (not a cookie) | If you voted on a workshop, so the slider stays locked and the result is shown for the rest of the session. Only the number you chose is stored. | Deleted when you close the tab. |
gg-ads-riza | localStorage (not a cookie) | To remember your banner choice (accept/decline) so the banner does not reappear on every page. | Until you clear your browser data. |
_gcl_au and similar Google Ads cookies | cookie — ONLY if you choose "Accept" | To measure whether the ad you clicked led to a registration or purchase. | 90 days at most. |
The Instagram, LinkedIn and WhatsApp links are links and nothing more; unless you click them, this site sends no request to those platforms.
10. Changes
This notice is updated whenever the providers used or the processing activities change. The current version is always published at this address; the date below shows the last update.
Last updated: 13 August 2026.
