AWARD WINNING CREATIVE AGENCY
DMM Worldwide ("DMM," "we," "us," or "our") is a global creative agency headquartered in Istanbul, Turkey, with operations serving clients across multiple regions including Europe, the United States, and Asia. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit our website at www.dmmworldwide.com (the "Site").
We are committed to protecting your privacy and complying with applicable data protection laws, including:
Please read this policy carefully. By using our Site, you acknowledge you have read and understood its terms.
DMM Worldwide
Istanbul, Turkey
Contact: [email protected]
Website: www.dmmworldwide.com
For Turkish residents and under KVKK, DMM Worldwide acts as the Data Controller (Veri Sorumlusu).
For Thai residents and under the PDPA, DMM Worldwide acts as the Data Controller.
For California residents and under the CCPA/CPRA, DMM Worldwide acts as a Business.
When you visit our Site, we may collect the following categories of personal data:
We may receive limited information about you from third-party platforms (e.g., LinkedIn) if you interact with our content there and are directed to our Site.
We process your personal data only where we have a valid legal basis to do so. Depending on your jurisdiction, the applicable legal basis may include:
| Purpose | Legal Basis (KVKK / PDPA / US) |
|---|---|
| Responding to your inquiries | Performance of a contract / Legitimate interest / Consent |
| Operating and improving the Site | Legitimate interest |
| Analytics and performance measurement | Legitimate interest / Consent (where required) |
| Cookies (non-essential) | Explicit consent |
| Compliance with legal obligations | Legal obligation |
| Marketing communications | Explicit consent |
Turkey (KVKK): We process data based on Article 5 of Law No. 6698, including explicit consent, contractual necessity, legal obligation, and legitimate interests of the data controller, where applicable.
Thailand (PDPA): We process data based on lawful grounds under Section 24 and Section 26 of the PDPA, including consent, contractual necessity, legitimate interests, and compliance with a legal obligation.
United States: We collect and use data for disclosed business purposes. We do not sell personal information as defined under the CCPA/CPRA.
We use the personal data we collect for the following purposes:
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
We do not sell, rent, or trade your personal data to third parties for their own commercial purposes.
We may share your data with:
Trusted third-party vendors who assist us in operating our Site and business, including web hosting providers, analytics platforms, and email service providers. These parties are contractually bound to process data only on our instructions and in compliance with applicable data protection law.
Lawyers, accountants, and other professional advisors, where necessary and subject to appropriate confidentiality obligations.
Where we are required by law, court order, or regulatory authority to disclose your personal data.
In the event of a merger, acquisition, restructuring, or sale of assets, your data may be transferred as part of that transaction, subject to equivalent privacy protections.
We require all third parties to respect the security of your personal data and to treat it in accordance with applicable law.
DMM Worldwide operates internationally. Your personal data may be transferred to and processed in countries outside your country of residence, including Turkey, the United States, and other countries where our service providers are located.
Turkey (KVKK): Cross-border transfers are conducted in accordance with Article 9 of Law No. 6698, either with your explicit consent, under an adequacy determination, or via appropriate safeguards including standard contractual clauses as approved by the Personal Data Protection Authority (KVKK Board).
Thailand (PDPA): Cross-border transfers are conducted in compliance with Chapter 7 of the PDPA, including ensuring the destination country has adequate data protection standards or that appropriate safeguards are in place.
United States: Transfers involving US residents are conducted in accordance with applicable US state and federal law requirements.
Our Site uses cookies and similar technologies. Cookies are small data files placed on your device that help us understand how you interact with our Site.
| Category | Description | Legal Basis |
|---|---|---|
| Strictly Necessary | Essential for the Site to function. Cannot be disabled. | Legitimate interest / Legal obligation |
| Analytics / Performance | Help us understand visitor behavior and improve the Site (e.g., Google Analytics). | Consent |
| Functional | Remember your preferences and settings. | Consent |
| Marketing | Used to deliver relevant content (if applicable). | Consent |
When you first visit our Site, you will be presented with a cookie consent banner where you can accept or reject non-essential cookies. You may update your preferences at any time via the cookie settings link in the footer of our Site.
You may also control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Site.
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal obligations, resolve disputes, and enforce agreements.
As a general guide:
Where retention periods are governed by mandatory legal requirements, those requirements will prevail.
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or damage. These include:
No method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.
In the event of a personal data breach that is likely to result in risk to individuals' rights and freedoms, we will notify the relevant supervisory authority (KVKK Board / Thailand PDPC / applicable US authority) and affected individuals within the timeframes required by applicable law (72 hours under KVKK 2025 amendments; without undue delay under the PDPA).
Depending on your jurisdiction and the applicable data protection law, you may have the following rights with respect to your personal data:
Pursuant to Article 11 of Law No. 6698, you have the right to:
To exercise these rights, please contact our Data Controller at [email protected]. We will respond within 30 days.
Under the PDPA, you have the right to:
To exercise these rights, please contact us at [email protected]. We will respond within 30 days of receiving your request.
If you are a California resident, you have the right to:
To submit a request, contact us at [email protected] or via the contact methods listed in Section 14. We will respond within 45 days of receiving a verifiable consumer request, with a possible 45-day extension where reasonably necessary.
Regardless of your location, you may:
Our Site is not directed to children under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected information from a child under 18, please contact us immediately at [email protected] and we will take steps to delete such information promptly.
Our Site may contain links to third-party websites, social media platforms, or services. This Privacy Policy does not apply to those third-party sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact us:
DMM Worldwide
Email: [email protected]
Address: Levent, Beşiktaş, Istanbul, Turkey
Website: www.dmmworldwide.com
For Turkish residents, you may also submit a formal application to the data controller pursuant to the KVKK Communiqué on Procedures and Principles for Applications to the Data Controller.
For Thai residents, you may also contact the Personal Data Protection Committee (PDPC) of Thailand if you believe your rights have not been respected.
For California residents, you may also contact the California Privacy Protection Agency (CPPA) at cppa.ca.gov.
We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or operational requirements. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.
Your continued use of the Site after any changes to this policy constitutes your acknowledgment of the updated terms.