Data Processing Agreement (DPA) / KVKK

Overview

This Data Processing Agreement (DPA) forms part of the Terms of Service between AdUnify and its customers. It addresses the processing of personal data in compliance with the EU General Data Protection Regulation (GDPR) and Turkish Personal Data Protection Law (KVKK).

Roles and Responsibilities

Data Controller (Customer)

The customer determines the purposes and means of processing personal data and is responsible for compliance with data protection laws.

Data Processor (AdUnify)

AdUnify processes personal data on behalf of the customer in accordance with documented instructions and applicable data protection laws.

Data Processing Details
  • Subject matter: Provision of advertising campaign management and analytics services
  • Duration: For the term of the service agreement
  • Nature and purpose: Aggregation, analysis, and reporting of advertising performance data
  • Type of personal data: User account information, advertising metrics, campaign data
  • Categories of data subjects: Customer employees, end users exposed to advertisements
Security Measures
  • Encryption of data at rest and in transit (AES-256, TLS 1.3)
  • Role-based access control and authentication
  • Regular security audits and penetration testing
  • Data hosted in secure facilities in Frankfurt, Germany
  • Automated backup and disaster recovery procedures
Sub-processors

AdUnify may engage the following sub-processors:

  • Cloud infrastructure providers (AWS, Google Cloud)
  • Payment processors (Stripe)
  • Analytics and monitoring services

Customers will be notified of any changes to sub-processors with 30 days notice.

Data Subject Rights

AdUnify will assist customers in responding to data subject requests including access, rectification, erasure, restriction, portability, and objection rights as required under GDPR and KVKK.

Data Breach Notification

In the event of a personal data breach, AdUnify will notify affected customers without undue delay and within 72 hours of becoming aware of the breach, providing all relevant information to enable customers to meet their own notification obligations.

Contact

Data Protection Officer:
E-mail: dpo@adunify.com
Address: Frankfurt, Germany