Cookie Policy
Effective Date: October 24, 2024
Last Updated: October 24, 2025
Consent Management
We use CookieYes as our consent management platform to manage your cookie preferences in compliance with GDPR, CCPA, and KVKK regulations. You can manage your consent preferences at any time through the cookie banner or by clicking the "Cookie Settings" link in the footer.
1. What Are Cookies?
Cookies are small text files placed on your device when you visit a website. They help websites remember your preferences, analyze traffic, and improve user experience. Cookies can be "session" cookies (deleted when you close your browser) or "persistent" cookies (remain on your device for a set period).
2. Types of Cookies We Use
Under GDPR Article 6(1), we process cookies based on the following legal bases:
2.1 Strictly Necessary Cookies
Legal Basis: Legitimate Interest (GDPR Art. 6(1)(f)) / Contractual Necessity (GDPR Art. 6(1)(b))
These cookies are essential for the Site to function properly. They enable core functionality such as security, accessibility, and basic navigation. These cookies do not require your consent as they are necessary for the performance of our services.
- Session Management: Maintain your browsing session
- Security: Protect against fraudulent activity and ensure secure transmission
- Load Balancing: Distribute server load for optimal performance
2.2 Functional Cookies
Legal Basis: Consent (GDPR Art. 6(1)(a))
These cookies enable enhanced functionality and personalization, such as remembering your preferences. We will only set these cookies with your explicit consent.
- Preferences: Remember your settings and choices
- Language: Remember your language preference
- Cookie Consent: Store your cookie consent preferences
2.3 Analytics Cookies
Legal Basis: Consent (GDPR Art. 6(1)(a))
These cookies help us understand how visitors interact with our Site by collecting anonymous information about pages visited, time spent, and navigation paths. We will only set these cookies with your explicit consent.
- Google Analytics (optional): Track page views, user behavior, and traffic sources
- Performance Monitoring: Identify technical issues and optimize performance
- Heat Mapping: Understand user interaction patterns
2.4 Marketing Cookies
Legal Basis: Consent (GDPR Art. 6(1)(a))
We may use marketing cookies to measure the effectiveness of our campaigns and deliver relevant content. These are optional and require your explicit consent. You can withdraw your consent at any time.
3. Third-Party Cookies
Some cookies are placed by third-party services that appear on our pages. We do not control these cookies. Third-party services include:
- Analytics Providers: Google Analytics, Plausible Analytics
- Email Marketing: Mailchimp, SendGrid (if you subscribe)
- Content Delivery Networks: Vercel, Cloudflare
We recommend reviewing the privacy policies of these third parties to understand their cookie practices.
4. Your Choices and Control
4.1 Browser Settings
Most web browsers allow you to control cookies through their settings. You can:
- Block all cookies
- Block third-party cookies only
- Delete cookies after each session
- Accept cookies but delete them manually
Note: Blocking certain cookies may affect the functionality of our Site.
4.2 How to Manage Cookies by Browser
- Google Chrome: Settings → Privacy and security → Cookies and other site data
- Mozilla Firefox: Options → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Manage Website Data
- Microsoft Edge: Settings → Cookies and site permissions
4.3 Opt-Out Links
You can opt out of specific third-party cookies:
- Google Analytics: Google Analytics Opt-out Browser Add-on
- Network Advertising Initiative: NAI Opt-Out
5. GDPR Consent and Withdrawal
5.1 Consent Requirements
Under GDPR Article 7 and ePrivacy Directive, we obtain your explicit consent before setting non-essential cookies. Our consent mechanism meets the following requirements:
- Freely Given: You can refuse consent without negative consequences
- Specific: Separate consent options for different cookie categories
- Informed: Clear information about what each cookie type does
- Unambiguous: Requires affirmative action (no pre-ticked boxes)
5.2 Consent Management System
We use CookieYes as our consent management platform (CMP) to:
- Display a compliant cookie consent banner on your first visit
- Record and store your consent preferences securely
- Allow you to modify your preferences at any time
- Maintain audit logs of consent for regulatory compliance
- Automatically block non-consented cookies until approval is given
5.3 How to Withdraw Consent
You have the right to withdraw your consent at any time under GDPR Article 7(3). To withdraw consent:
- Click the "Cookie Settings" button in the footer of any page
- Adjust your preferences in the CookieYes consent banner
- Clear cookies manually through your browser settings
- Contact us at contact@ollala.ai to request deletion
Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal.
6. Cookie Duration
The table below shows the cookies we use and their duration:
| Cookie Name | Purpose | Type | Duration |
|---|---|---|---|
| _session | Session management | Strictly Necessary | Session |
| _ga | Google Analytics tracking | Analytics | 2 years |
| _gid | Google Analytics tracking | Analytics | 24 hours |
| cookie_consent | Remember cookie preferences | Functional | 1 year |
7. California Privacy Rights (CCPA/CPRA)
7.1 Do Not Sell or Share My Personal Information
Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the right to opt out of the "sale" or "sharing" of personal information.
Important: We do not sell your personal information to third parties. However, some cookies (such as analytics and advertising cookies) may be considered "sharing" under CCPA definitions.
California residents can exercise their right to opt out by:
- Clicking the "Do Not Sell or Share My Personal Information" link in our footer
- Disabling non-essential cookies through our cookie consent banner
- Using the Global Privacy Control (GPC) browser signal, which we honor automatically
7.2 Do Not Track (DNT) and Global Privacy Control (GPC)
We respect Do Not Track (DNT) and Global Privacy Control (GPC) browser signals. When enabled:
- We will not set non-essential cookies without your explicit consent
- We will treat GPC signals as a valid opt-out request under CCPA
- Analytics and advertising cookies will be blocked automatically
Learn more about Global Privacy Control.
8. Turkey Data Protection (KVKK)
8.1 KVKK Compliance
Under Turkish Personal Data Protection Law No. 6698 (Kişisel Verilerin Korunması Kanunu - KVKK), we process cookies in accordance with the following principles:
- Article 5 - Processing Principles: Cookies are processed lawfully, fairly, accurately, and for specified purposes
- Article 6 - Processing Conditions: Explicit consent obtained for non-essential cookies
- Article 10 - Data Controller Obligations: Transparent information provided about cookie usage
- Article 11 - Data Subject Rights: Right to access, correct, delete cookie data, and withdraw consent
8.2 Your Rights Under KVKK
As a data subject under KVKK Article 11, you have the right to:
- Learn whether your personal data is being processed
- Request information about cookie processing activities
- Request deletion or destruction of cookies containing personal data
- Withdraw your consent for cookie processing at any time
- Object to processing that leads to negative consequences
- Request correction of inaccurate data
To exercise your KVKK rights, please contact us at contact@ollala.ai or submit a request through our Privacy Policy page.
8.3 Data Controller Information
Data Controller: Endless Circuit Technologies OÜ
Contact: contact@ollala.ai
9. International Data Transfers
Some cookies may involve transfers of data to countries outside the European Economic Area (EEA) or Turkey. When this occurs, we ensure appropriate safeguards are in place:
- Standard Contractual Clauses (SCCs): EU-approved data transfer mechanisms
- Adequacy Decisions: Transfers to countries with adequate data protection
- Explicit Consent: Your consent to international data transfers through cookie acceptance
10. Updates to This Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in technology, legislation (including GDPR, CCPA, and KVKK updates), or our practices. The "Last Updated" date at the top of this page indicates when the policy was last revised.
Material changes will be communicated through:
- Updated consent banner requiring re-consent
- Email notification to registered users
- Prominent notice on our website
11. More Information
For more information about cookies and online privacy regulations, visit:
General Cookie Information
GDPR Resources
CCPA Resources
KVKK Resources (Turkey)
12. Contact Us
If you have questions about our use of cookies or wish to exercise your rights under GDPR, CCPA, or KVKK, please contact us at:
Data Controller: Endless Circuit Technologies OÜ
Email: contact@ollala.ai
Privacy Requests: privacy@ollala.ai
Response Time: Within 30 days (GDPR/KVKK) or 45 days (CCPA)
For GDPR-related complaints, you have the right to lodge a complaint with your local supervisory authority.
For KVKK-related complaints, you may apply to the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu).