Privacy Policy

1. Overview and Principles

TWELVE HOUSE (AI-Powered Marketing) · a brand of MOLLAOĞLU TİC. ANONİM ŞTİ. · Status: July 2026

Controller: MOLLAOĞLU TİC. ANONİM ŞTİ., Altayçeşme Mahallesi, Efe Boz Sokak, Evinpark Ada Sitesi, No: 11-15, D Blok, Dükkan: 56, 34843 Maltepe/İstanbul, Turkey · Merve Mollaoglu · info@twelve-house.com · Phone: +90 533 073 71 50

This website is the online presence of TWELVE HOUSE (AI-Powered Marketing). Only data that is necessary for technical operation, reach-based analysis (Google Analytics), language recognition, contact via WhatsApp, and booking appointments via Cal.com is processed. A cookie consent banner is required for the use of Google Analytics.

This privacy policy informs you in accordance with Art. 13 of the General Data Protection Regulation (GDPR) about which personal data is processed when visiting the TWELVE HOUSE website, for what purpose, and on what legal basis.

2.1 Technical Access Data

When visiting the website, technical access data is automatically recorded by our hosting infrastructure: IP address, date and time of request, accessed URL, browser type and version, operating system, and HTTP status code. This data is used exclusively for the technical operation, troubleshooting, and security of the website. It is not merged with other data sources.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest). Retention period: approx. 30 days.

2.2 Audience Measurement (Google Analytics)

This website uses Google Analytics, a web analysis service from Google Ireland Limited, for the statistical evaluation of user behavior (e.g., page views, length of stay, origin of visitors). Cookies are set and pseudonymized user profiles are created. The collection only takes place after your active consent via the cookie consent banner.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent) in conjunction with Section 25 para. 1 TTDSG. You can withdraw your consent at any time with effect for the future. Retention period of the Analytics cookies: up to 14 months.

2.3 Language Detection (Framer Localize)

This website uses Framer Localize to automatically display content in the visitors' preferred language (Turkish, English, German). For this purpose, the visitor's IP address is evaluated on the server side to determine the approximate geographic location. No individual user profile is created; the determined location is not persistently stored. The processing is technically necessary for the multilingual display of the website.

Legal basis: Art. 6 para. 1 lit. f GDPR. Cookie consent is not required for this.

2.4 Contacting us via WhatsApp

The contact button on this website links to WhatsApp (provided by: WhatsApp Ireland Limited, with potential data processing by the Meta group of companies, USA). You can also contact us directly via WhatsApp (+90 533 073 71 50). If you contact us via WhatsApp, your phone number, your profile name, and the message content you transmit will be processed in accordance with WhatsApp’s privacy policy. This processing takes place beyond our control; we only receive the message content to process your request.

Legal basis: Art. 6 para. 1 lit. f GDPR (processing of your request). Reference is made to the separate privacy policy of WhatsApp/Meta: whatsapp.com/legal/privacy-policy

2.5 Appointment Booking via Cal.com

For booking an initial consultation, we use Cal.com (provided by: Cal.com, Inc., USA). When a booking is made, the data you enter (name, email address, chosen appointment, and any other details) is processed for appointment organization and transmitted to us.

Legal basis: Art. 6 para. 1 lit. b GDPR (initiation of a contract/arranging a consultation appointment). Retention period: until the appointment is held or cancelled, thereafter in accordance with statutory retention periods.

2.6 Cookies

This website sets technically necessary cookies (e.g. session management by Framer) and – subject to consent – analysis cookies from Google Analytics. In accordance with Section 25 para. 2 No. 2 TTDSG, no consent is required for technically necessary cookies; for Google Analytics cookies, we obtain your consent via a cookie consent banner before they are used.

3. Service Providers Used

Data processing agreements (DPA) in accordance with Art. 28 GDPR or equivalent data protection agreements are in place with the following providers.

Framer B.V. (Netherlands, EU): Website hosting, CMS, language detection (Framer Localize), and CDN. The main processing takes place within the EU. DPA: framer.com/legal/privacy-statement

Google Ireland Limited (Ireland/USA): Web analytics (Google Analytics). Transfer to the USA may take place under the EU-US Data Privacy Framework and additionally via EU Standard Contractual Clauses.

WhatsApp Ireland Limited / Meta Platforms, Inc. (Ireland/USA): Contact via WhatsApp button. Transfer to the USA under the EU-US Data Privacy Framework and additionally via EU Standard Contractual Clauses.

Cal.com, Inc. (USA): Appointment booking for initial consultations. Transfer to the USA under the EU-US Data Privacy Framework and additionally via EU Standard Contractual Clauses. DPA: cal.com/privacy

GoDaddy Inc. (USA, EU-US DPF certified): Domain registration and DNS management. Transfer: EU-US Data Privacy Framework (Art. 45 GDPR) and additionally EU Standard Contractual Clauses (Art. 46 para. 2 lit. c GDPR). DPA: godaddy.com/legal/agreements/privacy-policy

Framer B.V. is an EU company; no transfer to third countries takes place for hosting and Localize. Google, WhatsApp/Meta, Cal.com, and GoDaddy are US providers or have corporate connections to the USA.

4. International Data Transfers

Hosting and Localize processing is carried out by Framer B.V., based in the Netherlands — no transfer to third countries outside the EU/EEA takes place for this.

For Google Analytics, contact via WhatsApp, appointment booking via Cal.com, and domain management (GoDaddy), data is transferred to the USA. Each transfer is based on the EU-US Data Privacy Framework and additionally on the basis of EU Standard Contractual Clauses.

5. Your Rights (Art. 15–22 GDPR)

You have the rights of access, rectification, erasure, restriction of processing, data portability, objection, withdrawal of given consent, and to lodge a complaint with the competent data protection supervisory authority against us as the controller.

To exercise your rights, please contact: info@twevle-house.com. Response time: within one month of receiving your request (Art. 12 para. 3 GDPR).

6. Data Security

This website is operated via Framer and GoDaddy with HTTPS/TLS encryption. All data transmissions between your browser and the server are encrypted. Framer B.V., as an EU company, uses state-of-the-art technical and organizational security measures.

7. Changes to this Privacy Policy

This privacy policy will be adapted in the event of changes to the technical infrastructure or the legal basis. The current version can always be accessed on the website at https://twelve-house.com/datenschutz or in the corresponding area of the website.

Status: July 2026