B10 / FREQUENTLY ASKED QUESTIONS

First, let’s answer
your questions.

Your questions about our services and working together.

What services do you provide?

We provide brand monitoring, digital reputation, data analysis, technical data compliance work, software, integration, design and e-commerce operations support. The selected services, deliverables and excluded work are specified in the written proposal for each project.

How can I request a project proposal?

Use the contact page to share your objective, existing systems, expected output and target schedule. Access requirements and technical dependencies are identified during the initial assessment; scope, fees and a delivery plan are then prepared. Do not send passwords, customer data or identity documents in your first message.

Which sectors do you work with?

We assess the business need, data access and required expertise before the sector name. In regulated fields such as healthcare and finance, approval requirements involving responsible specialists and your organisation are identified separately. This page does not assert past customer or sector experience.

How are pricing and delivery times determined?

Pricing is calculated according to work items, integration count, data volume, licences and support scope. Delivery is planned together with access provision, content delivery and customer approvals. No fixed time or price commitment is made without a written proposal.

How should I share confidential information?

A summary without personal data is sufficient for the first meeting. If confidential documents are needed, the sharing channel, authorised recipients, purpose and retention conditions must be determined in advance. If a confidentiality agreement is required, it is reviewed mutually before documents are shared.

What is the tangible output of KVKK work?

Depending on the agreed scope, we prepare a data-flow map, system and supplier inventory, technical findings list and action plan with responsible parties and dates. Legal grounds, the suitability of texts and decisions on applications are assessed by authorised legal specialists. This service does not provide a compliance certificate or exemption from sanctions.

What do you check in cookie management?

We test which tags load when, what data they send to which providers, behaviour after rejection, category selection and consent withdrawal. Installing a consent tool or Consent Mode alone does not constitute legal compliance or a data-transfer safeguard.

Does every business have to register with VERBİS?

This page cannot provide one conclusion for all businesses. Your legal specialist should assess obligations and exemptions against your business activities and current regulations. Where included in scope, B10 supports preparation of the inventory and technical information.

What is your role in international data transfers?

We inventory the systems receiving data, providers, data categories and access points. We do not replace the legal decision on the transfer mechanism to use. Approved technical changes are planned as separate work items.

How often are audits and maintenance performed?

The check frequency, checklist, report delivery and responsible parties are specified in the contract. This site does not commit to annual audits, uninterrupted monitoring or intervention within a specified time for every project.

Which tasks do you assess for AI?

Bounded tasks such as document classification, summarisation, internal knowledge search, response drafting and report preparation are assessed. A pilot with sample data comes first; error rates, cost, latency and the need for human review are measured.

Do you deliver a ready-made product or custom development?

Service descriptions on this site are not offers of a ready-to-use product licence or subscription. The proposal specifies whether delivery is custom development, configuration of existing tools or installation of licensed products. Features and integrations are committed to only within the verified scope.

Can AI responses be used without review?

We do not recommend unchecked use for critical decisions or external communications. Response sources, permissions and human approval steps are defined. AI outputs can be incorrect or incomplete; pilot success does not mean all subsequent operations will be correct.

Can you integrate with our existing CRM or ERP?

We first examine the system version, API documentation, licence, access permission and test environment. Fields to transfer, direction, frequency and error scenarios are defined. Full integration with a particular provider is not promised before this examination.

Is a data processing agreement needed?

The parties’ controller or processor roles, data to be processed and providers must be determined for each project. Necessary agreements are prepared or reviewed by authorised legal specialists. Technical implementation is scoped according to these role and access decisions.

What is delivered in a design project?

We prepare the user flows, screen designs, component states and developer handover notes selected in the proposal. Brand guidelines, user research, accessibility audits and software implementation are separate scope items.

Who decides whether content is published?

Approval owners for content accuracy, brand language, rights ownership and legal review where needed are identified at the start. Drafting, feedback and final approval stages are planned to be recorded; publishing authority is defined separately.

Who owns image, font and source-code rights?

Custom-created work and third-party licensed assets are distinguished. Assignment, permitted uses, licence fees and restrictions are specified in the contract. A stock image, font or software licence does not automatically grant unlimited usage rights.

What do you do during a security incident?

We act according to the support channel, working hours and intervention scope in the contract. Technical investigation, access restriction and preservation of incident records may be scoped. Statutory notification obligations and contractual support times are assessed separately; this page is not an emergency response line.

How can I apply regarding my own personal data?

You can submit your personal data request to B10 through the channels on the Personal Data Rights page. Creating a draft does not submit your request. If secure submission is enabled, complete the separate submission step and check your reference number; otherwise use the application channels listed on the page. The contact responsible for applications is [email protected].

What do you provide for DPIA or LIA work?

Where included in scope, system, data-flow, access and technical risk information is prepared. The need for the assessment and its legal outcome are addressed by authorised legal specialists. A technical report alone is not DPIA or LIA approval.

How long is data retained and how is it deleted?

One period does not apply to all data types. Retention periods and disposal methods must be determined by purpose, data category, obligations and providers. Deletion behaviour in active systems, logs and backups is addressed separately within the project; deletion is not declared without technical verification.

Are third-party services used?

If the project requires them, hosting, model, analytics or other providers are specified in the proposal and data flow. A transfer plan is not finalised before the service, data to be sent, licence cost and access conditions are assessed.

Will data in an AI project be used for model training?

This depends on the selected provider’s product, contract and account settings. Training, retention, data location and sub-provider conditions must be checked before selection. We do not promise that “data is never used” for every model.

How do you review suspicious listings?

Product, seller, price, image and description signals are compared on the sources in scope. The review list is prepared with the source link, observation date and assessment note. A low price or similar image alone is not proof of counterfeiting.

Which channels can be monitored?

The source list is defined at the start of the project. Platform terms, API access, licences, country and language coverage are checked. Private messages, closed accounts and access to unauthorised systems are not included in the service scope.

Do monitoring records count as legal evidence?

URLs, observation dates, screenshots and review notes are prepared as technical records. A screenshot alone does not guarantee evidential sufficiency or a qualified timestamp. Legal use and additional verification requirements are assessed by your authorised legal specialist.

Do you guarantee content or listing removal?

No. Application preparation and status tracking may be scoped; the removal decision belongs to the platform or competent authority. Legitimate criticism, customer complaints and suspected rights infringements are assessed separately.

Can you completely prevent brand impersonation?

No. Monitoring and review support action on identified risks; they do not guarantee prevention of every infringement. Priority sources, notification permissions and a follow-up check plan are defined.

Can you work with sources abroad?

Country, language, platform access and authorisation requirements are examined first. Local expertise needed for an application is planned separately. Legal representation or guaranteed outcomes in every country are not offered.

Which metrics do you use to report results?

The measurement source, date range and calculation are specified in the report. Examples include the number of findings reviewed, time to first review or pilot task success rate. Sales, rankings, removal rates or savings are not promised without baseline data and verification.

Frequently asked questions | B10 Digital Agency