Data controller
Under the Turkish Personal Data Protection Law No. 6698 ("KVKK"), your personal data is processed by SECESTA Bilişim ve Ticaret Ltd. Şti. ("SEOLOK", Ayazağa Mah. Mimar Sinan Sk. B No: 21B İç Kapı No: 15, 34396 Sarıyer, İstanbul, 34396 Sarıyer, İstanbul, Türkiye) as data controller, as described here.
Personal data processed
Identity and contact (name, e-mail, phone), customer transactions (plan, payment records, billing details: address, city, optional tax/ID number), transaction security (session and access logs, IP address), the read-only Search Console and Google Analytics 4 access keys you authorise with your Google account (encrypted) and the aggregated site performance data retrieved with them (GA4 property name, measurement ID; session and engagement counts by page/channel/device). Card details never reach SEOLOK; they are processed by the payment institution. If you use passkey sign-in, as part of transaction security we process the passkey's public key, its credential ID, signature counter, transports, a device name derived from your browser and the dates it was added and last used; your biometric data (fingerprint, face) and device PIN stay on your device and never reach SEOLOK.
Purposes and legal grounds
Performance of the service contract (KVKK art. 5/2-c): account, data collection, reporting, service work. Legal obligation (art. 5/2-ç): invoicing, tax and commercial records. Legitimate interest (art. 5/2-f): security, abuse prevention, service improvement. Marketing only with your explicit consent.
Retention
Account and site data are kept while your account is open. Removing a site hides it, but its history stays archived for the duration of the contract so you can reconnect it and for possible disputes. Invoices and payment records are kept for 10 years under tax and commercial law. After these periods data is deleted, destroyed or anonymised.
Transfers
To provide the service, data is transferred to servers in the EU (Germany) and to sub-processors established abroad (Google, a ranking data provider, AI and e-mail services, payment institutions, service providers for service work) under KVKK art. 9 with standard contracts and the required safeguards. Data may be disclosed to competent authorities on request.
Collection method
Data is collected electronically and automatically at sign-up/sign-in (Google, password, e-mail link or passkey), through your use of the dashboard, payment forms and the Google Search Console API connection you authorise.
Your rights (KVKK art. 11)
You may learn whether your data is processed, request information, learn the purpose and recipients, request correction, request deletion or destruction when the conditions of art. 7 are met, request notification of these to recipients, object to adverse results of automated analysis and claim compensation for unlawful processing. Records under a statutory retention duty cannot be deleted before that period ends.
How to apply
Send your request from your registered e-mail to info@seolok.com with information to verify your identity. Requests are answered free of charge within 30 days.