Privacy Notice — Callback Request

1. Who is responsible

OTOWOTO is the controller for the data collected by this form. You can reach us at [email protected].

Our registered name, address and tax details will be stated here once the company is incorporated; a signed copy carrying them is available on request.

This notice covers the callback form only. Everything else we do with personal data — accounts, cookies, billing, support — is in our Privacy Policy: otowoto.com/privacy

2. What we collect

• Your phone number and the country code you selected.
• The date and time of the request, and the slot you picked if you asked to be called outside our hours.
• The page you left the request on.
• Whether you gave consent, and whether you ticked the optional marketing box.
• If a call happens: its outcome and duration. We do not record the audio.

Your IP address is used only, and momentarily, to stop the form being abused; it is not stored with your request. We do not ask for your name, email or address.

3. Why we use it

• To call you back, which is the thing you asked for.
• To place that call at the time you chose, if you booked one outside our hours.
• To keep the form from being abused by automated traffic.
• Only if you separately opted in: to send you occasional product news.

4. Legal basis

We rely on your consent, and on the fact that the call is a step taken at your own request before any contract — Article 6(1)(a) and 6(1)(b) GDPR, and the corresponding grounds under KVKK. If you do not consent, we do not process the number and no call is made; nothing else on the site is affected.

Abuse prevention rests on our legitimate interest, Article 6(1)(f).

Marketing messages rest on the separate consent alone, and you can withdraw that one without touching the other.

5. Who else sees it

We do not sell your data and we do not pass it to anyone for their own marketing. It is processed only on the infrastructure we need to run the service:

• Hosting and site security: Cloudflare, Inc. (US/EU).
• The server our calling runs on: Hetzner Online GmbH (Germany).
• Notification email: Brevo (European Union).

Where a transfer leaves the EEA or Turkey, it is made under the safeguards those laws require. The current list is at otowoto.com/subprocessors

6. How it is collected

Directly from you, electronically, at the moment you type it into the callback form. Nothing here is collected unless you fill that form in.

7. How long we keep it

A callback request is kept for at most 12 months after it has been dealt with, and is then deleted automatically along with any call record attached to it. If you opted into marketing, that consent is kept until you withdraw it.

You can ask us to delete it sooner at any time, at the address below.

8. Your rights

You may ask us to confirm what we hold about you and to give you a copy; to correct it; to delete it; to restrict or object to how we use it; and to receive it in a portable form. Under KVKK Article 11 you may also ask who your data has been transferred to and object to decisions produced solely by automated analysis.

You can withdraw your consent at any time, without giving a reason and as easily as you gave it. Withdrawal does not affect anything lawfully done before it.

9. How to reach us, and where to complain

Write to [email protected] and we will answer within 30 days. If you are not satisfied, you can complain to your local data protection authority — in Turkey, the Personal Data Protection Board (KVKK); in the EU or the UK, the supervisory authority where you live.