Privacy Notice

Last updated: [Date to be added]

Data Controller: All Inn ("All Inn", "we", "us")
Website: allinn.agency
Contact: [email protected] | WhatsApp: +90 545 949 90 99

This Privacy Notice explains how All Inn processes your personal data when you visit allinn.agency, use our contact channels, or interact with our chatbot assistant. It is prepared in accordance with the EU General Data Protection Regulation (GDPR) and, where applicable, the Turkish Personal Data Protection Law No. 6698 (KVKK).

1. Personal Data We Process

Depending on how you use our website, we may process the following categories of data:

Identity data: first and last name (when you share it via the chatbot or contact form)
Contact data: email address, phone number
Company data: name and line of business of the company you represent
Chatbot conversation records: the full transcript of your conversation with our assistant, including information you provide such as industry, digital presence status, goals, budget range, and timing
Security and log data: IP address, browser information, date and time of visit
Cookie data: information collected via necessary, analytics, and marketing cookies (see our Cookie Policy for details)
Visitor identifier: an anonymous visitor code assigned to you (e.g. allinn-4f9a2c7b)

2. Purposes of Processing

We process your personal data to:

Respond to your requests and prepare tailored proposals and roadmaps
Forward chatbot conversations to our team and improve service quality
Personalize homepage content based on your interests (dynamic content blocks)
Analyze site traffic and performance (only with your consent)
Carry out marketing and retargeting activities (only with your consent)
Ensure information security and prevent misuse
Comply with legal obligations

3. Lawful Bases (GDPR Art. 6)

We rely on the following lawful bases:

Consent (Art. 6(1)(a)): analytics and marketing cookies, marketing communications
Pre-contractual steps and contract performance (Art. 6(1)(b)): evaluating your service requests and managing proposal processes
Legitimate interests (Art. 6(1)(f)): site security and service quality measurement, balanced against your fundamental rights and freedoms
Legal obligation (Art. 6(1)(c)): statutory retention and reporting duties

Where we rely on legitimate interests, you may request details of our balancing assessment at any time.

4. Recipients and International Transfers

Your data may be shared, strictly limited to the purposes above, with:

Hosting and infrastructure providers
Email delivery service providers
Analytics and measurement tool providers (only with your consent)
Competent public authorities (where legally required)

Where data is transferred outside the EEA, we ensure appropriate safeguards under GDPR Chapter V (e.g. adequacy decisions or standard contractual clauses). We never sell your personal data or share it with third parties for their own marketing purposes without your explicit consent.

5. Retention Periods

Chatbot transcripts: completed conversations are stored in a file-based archive; inquiry records are kept for as long as the proposal and service process requires, up to 2 years.
Visitor records: active visitor records are kept in the current file for 28 days; older records are moved to monthly archive files and retained for anonymized statistical purposes.
Cookies: category-specific retention periods are listed in our Cookie Policy.
Consent records: records of your cookie preferences are retained for 2 years as proof of consent (IP addresses stored only as salted SHA-256 hashes).
Contact form messages: kept for up to 2 years after your request is resolved.

At the end of these periods, your data is securely deleted or anonymized.

6. Your Rights

Under the GDPR you have the right to:

Access your personal data and obtain a copy
Rectification of inaccurate or incomplete data
Erasure ("right to be forgotten") where the legal conditions are met
Restriction of processing
Data portability for data processed on the basis of consent or contract
Object to processing based on legitimate interests, and to direct marketing at any time
Withdraw consent at any time, with effect for the future, without affecting the lawfulness of prior processing
Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects
Lodge a complaint with your local supervisory authority

7. How to Exercise Your Rights

Send your request to [email protected]. We respond free of charge without undue delay and within one month at the latest; this period may be extended by two months for complex requests, in which case we will inform you.

8. Data Security

Chat transcripts, visitor records, and consent logs are stored in a server directory with no public web access. All write operations are lock-protected, and IP addresses in consent logs are stored only in hashed form.

9. Changes to This Notice

We update this notice when our processing activities change. The current version is always published on this page.

This document is provided for information purposes and does not constitute legal advice.