Legal text
Cookie Policy
The Turkish version of this text is authoritative. This translation is provided for information purposes. In case of any discrepancy, the Turkish text shall prevail.
This policy explains the cookies and similar technologies that FIX Danışmanlık Anonim Şirketi ("FIX") uses on its website at fixdanismanlik.com. The Privacy Notice also applies to personal data processed through cookies.
1. What is a cookie?
A cookie is a small text file stored in your browser when you visit a website. Similar technologies, such as the browser’s local storage (localStorage, sessionStorage) and measurement pixels, are also referred to as "cookies" in this policy.
Cookies usually do not contain directly identifying information such as your name; however, they process information that qualifies as personal data, such as identifiers that distinguish your device, your IP address and browsing information.
2. Categories and legal bases
| Category | What does it do? | Legal basis | Relationship with the panel |
|---|---|---|---|
| Mandatory | Operation and security of the site, form security, remembering your cookie preference and your theme choice | Legitimate interest (Article 5(2)(f) of Personal Data Protection Law No. 6698, KVKK) | Always on |
| Analytics: Google Analytics, Microsoft Clarity | Measuring how the site is used; with Clarity, analysing the site’s usability through session recording (mouse movements, clicks, scrolling) and heatmaps | Türkiye and other countries: legitimate interest (Article 5(2)(f)) · EU/EEA countries, the United Kingdom and Switzerland: explicit consent (Article 5(1)) | Visits from Türkiye and other countries: on by default, runs until you reject it · Visits from EU/EEA countries, the United Kingdom and Switzerland: off by default, does not run until you allow "Analytics" |
Marketing: Google Ads, Meta Pixel (including fix_ext_id) and FIX attribution cookies (fix_atif, fix_gclid, fix_gbraid, fix_wbraid) | Measuring ad clicks and conversions; measuring Meta ads (page views, form submissions, WhatsApp clicks) and remarketing; recording which source and ad your request (lead) came from, and attributing the ad conversion to the correct campaign | Türkiye and other countries: legitimate interest (Article 5(2)(f)) · EU/EEA countries, the United Kingdom and Switzerland: explicit consent (Article 5(1)) | Visits from Türkiye and other countries: on by default, runs until you reject it · Visits from EU/EEA countries, the United Kingdom and Switzerland: off by default, does not run and no FIX attribution cookies are set until you allow "Marketing" |
| Embedded content: YouTube | Video playback; displaying the thumbnails on video cards | Video: your click to play it · Thumbnail: legitimate interest (Article 5(2)(f)) | The video player is not loaded until you click; thumbnails load when the page opens (see below) |
How do the tools linked to the panel work? The initial state of the tools in the Analytics and Marketing categories depends on the region from which you visit the site. The region is determined in two ways: for Google Analytics, Google Ads, Meta Pixel and Microsoft Clarity, by Google’s location detection based on your IP address ("Consent Mode v2"; in our tag manager Meta Pixel and Microsoft Clarity are linked to the same permission state as the Google tags, with Meta Pixel in the Marketing category and Microsoft Clarity in the Analytics category); for FIX’s own cookies, by country information based on your IP address from Cloudflare, our content delivery service, or, if that information is not available, by your browser’s time zone. The two methods may occasionally give different results (e.g. if you use a VPN); in that case you can bring all tools into the same state by saving your preference in the panel.
- EU/EEA countries, the United Kingdom and Switzerland: Analytics and Marketing start switched off. Until you give permission in the panel, these tools do not run, the Google tags neither set nor read cookies, and no FIX attribution cookies are set.
- Türkiye and all other countries: Analytics and Marketing start switched on; these tools run and set cookies from the first page. To stop them, choose "Reject all" in the banner, or open the "Cookie preferences" link at the bottom of the page, untick the relevant box and save.
What happens when you reject a category? The tools in the category you reject stop running from that moment. The site also deletes the cookies previously set on our domain in that category: for Marketing, fix_atif, fix_gclid, fix_gbraid, fix_wbraid, fix_ext_id, _gcl_ prefixed Google Ads cookies, the cookie set through the link between Google Ads and Google Analytics (name starting with _gac_gb_), _fbp and _fbc; for Analytics, _ga and _ga_ prefixed Google Analytics cookies and Microsoft Clarity’s _clck and _clsk cookies. Our site cannot delete cookies that providers keep on their own domains rather than on our site (e.g. Microsoft’s CLID and MUID cookies); you can delete them in your browser settings.
While the Google tags are off, only measurement signals that contain no cookies and carry no identifier that identifies you are sent to Google. As with any internet request, your IP address also reaches Google together with these signals. Google uses these signals to produce aggregated and modelled statistics.
What is the legal basis for these tools in Türkiye and other countries? In these regions FIX runs the Analytics and Marketing tools without asking for your permission in advance. It therefore does not base this processing on explicit consent. FIX relies on its legitimate interest in measuring how its website is used and what results its ads achieve, and in recording which source incoming requests came from (Article 5(2)(f)). If you do not want this processing, you can reject it at any time by the means described above. For visits from EU/EEA countries, the United Kingdom and Switzerland, these tools run only with the permission you give (explicit consent). You can withdraw your permission at any time through the same panel.
What do the FIX attribution cookies contain? fix_atif contains the source, medium, campaign, keyword and ad content information of the link that brought you to the site, the Google Ads and Meta click identifiers and the path of the page you opened through that link. fix_gclid, fix_gbraid and fix_wbraid contain the Google Ads click identifier. This information is sent to FIX together with your request when you submit a form or enter your contact details in the AIx® Incentive Robot; when you write via the WhatsApp button on the page, the Google Ads click identifier is added to the page link in your message.
YouTube thumbnails: In the reference sections with videos, each video’s thumbnail is loaded as the page opens, before you click the play button, from Google’s i.ytimg.com server. This request sends your IP address and browser information to Google. The video itself is loaded only when you click the play button, through the youtube-nocookie.com domain. FIX bases showing the thumbnails in this way on its legitimate interest in presenting its reference videos (Article 5(2)(f)).
3. List of cookies
| Cookie | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
fix_cerez_tercih | FIX | Mandatory | Remembers your cookie preferences | 12 months |
fix-cerez (localStorage) | FIX | Mandatory | A backup record of your cookie preferences on your device (your preference is kept even if the cookie is deleted) | Until you delete it |
fix-tema (localStorage) | FIX | Mandatory | Remembers your light/dark theme choice | Until you delete it |
fix-logo (sessionStorage) | FIX | Mandatory | Playing the opening animation once per session | End of session |
fix-form-kuyruk (localStorage) | FIX | Mandatory | Keeping on your device form information that could not be sent due to a connection or server error, and resending it automatically | Up to 72 hours (deleted once sent) |
fix-od-oturum (sessionStorage) | FIX | Mandatory | Keeping your unfinished pre-assessment application as one record in the same tab, even if you refresh the page | Up to 24 hours (deleted when the application is completed or the tab is closed) |
__cf_bm, cf_clearance | Cloudflare | Mandatory | Distinguishing malicious traffic | 30 minutes – 1 year |
_GRECAPTCHA | Google reCAPTCHA | Mandatory | Protecting forms against unwanted submissions | 6 months |
_ga, _ga_D8GYP4RT0Q | Google Analytics | Analytics | Distinguishing visitors and sessions | Up to 2 years (Analytics data is retained for 14 months) |
_gcl_au, _gcl_aw | Google Ads | Marketing | Linking the ad click to the request | 90 days |
_gac_gb_D8GYP4RT0Q | Google Analytics (Google Ads link) | Marketing | Linking the Google Ads ad click (gclid) to the Analytics session; may be set when the Google Analytics and Google Ads accounts are linked and you arrive via an ad click | 90 days |
fix_atif | FIX | Marketing (FIX attribution cookie) | Adding to your request the source, medium, campaign, keyword and ad content information (utm_source, utm_medium, utm_campaign, utm_term, utm_content) of the link that brought you to the site, the Google Ads click identifier (gclid), the Meta click identifier (fbclid), the path of the page you opened through that link and, if there is no such link, the domain of the site that referred you to us (e.g. google.com) to your request. Set when you arrive through a link carrying a Google Ads or Meta click identifier, source or campaign information, or from another site, and only while Marketing is on | 30 days |
fix_gclid | FIX | Marketing (FIX attribution cookie) | Adding the Google Ads click identifier to your request (ad conversion attribution); set while Marketing is on | 90 days |
fix_gbraid, fix_wbraid | FIX | Marketing (FIX attribution cookie) | Adding the Google Ads click identifier (for clicks originating from iOS and apps) to your request (ad conversion attribution); set while Marketing is on | 90 days |
_fbp, _fbc | Meta | Marketing (Meta Pixel) | Meta ad measurement and remarketing | 90 days |
fix_ext_id | FIX (for Meta) | Marketing (Meta Pixel) | Random identifier that matches the visitor in Meta measurement | 180 days |
_clck, _clsk, CLID, MUID | Microsoft Clarity | Analytics (Microsoft Clarity) | Session recording and heatmap | 1 day – 1 year |
Form security checks: When you start filling in the pre-assessment form, a Cloudflare Turnstile security check may be loaded to tell automated (bot) submissions apart. This check uses challenges.cloudflare.com to send your IP address and your browser and device signals to Cloudflare. The Google reCAPTCHA check on the forms serves the same purpose. These checks fall under the Necessary category and are based on legitimate interest (Article 5(2)(f)).
Providers’ cookie names and durations may change over time; the list is updated regularly.
4. Transfers abroad
Google, Meta, Microsoft and Cloudflare are established abroad; data collected through these cookies is transferred to these companies’ servers abroad. The transfers are based on the standard contracts announced by the Personal Data Protection Board under Article 9(4)(c) of the KVKK; the standard contracts have been signed and notified to the Personal Data Protection Authority.
5. How can you manage your preferences?
- In the panel that opens on your first visit to the site, the options "Accept all", "Reject all" and "Preferences" are presented equally. For visits from EU/EEA countries, the United Kingdom and Switzerland, the Analytics and Marketing categories remain off until you turn them on. For visits from Türkiye and other countries, they are on until you reject them (see section 2).
- If you have not yet saved a choice, the Analytics and Marketing boxes in the "Preferences" layer show your region’s initial state: ticked in Türkiye and other countries, unticked in EU/EEA countries, the United Kingdom and Switzerland. Once you have saved a choice, they show the preference you saved. To stop a category, untick its box and press "Save", or choose "Reject all".
- You may change your preference, reject the Analytics and Marketing tools or withdraw the consent you have given at any time via the "Cookie preferences" link at the bottom of the page.
- You can delete or block all cookies through your browser settings. If you block necessary cookies, some parts of the site (e.g. forms) may not work.
6. Your rights
For your rights under Article 11 of the KVKK and how to apply, please see the Privacy Notice.