How are ad pixels managed for data protection?
How many ad pixels are on your site? Many businesses don’t know: code installed by old agencies, tools tried and forgotten, tracking scripts on every page. Each one sends visitor data somewhere. 🎯
Ad pixels and targeting tools are powerful; but they must be used with consent, transfer and purpose rules.
Short answer: pixels are inventoried and tied to consent, customer lists are uploaded to ad platforms only with a proper basis, and targeting on sensitive topics is limited. 🧭
Note: this is general information, not legal advice. Regulations and Board decisions change; see the Turkish Personal Data Protection Authority for current guidance and a lawyer for your specific case.
Four routes for ad data
BU BÖLÜMÜN ÖZETİ
- Site pixels
- Customer list uploads
- Form integrations
- Analytics tools
Where does data go? 🔀
Site pixels
Visit and conversion data goes to ad platforms. 🔗
Customer list uploads
Emails and phone numbers uploaded for matching. 📤
Form integrations
Data from ad forms is transferred. 📝
Analytics tools
Analytics tools process data too; see the cookie guide. 📊
Pixel order
BU BÖLÜMÜN ÖZETİ
- Inventory
- Clean-up
- Tie to consent
- Sensitive pages
Four steps. 🛠️
Inventory
Which pixels run, who installed them, are they used? 📋
Clean-up
Unused pixels are removed. 🧹
Tie to consent
Marketing pixels are tied to cookie consent. 🔗
Sensitive pages
Pixels on sensitive pages like health are assessed. 🔒
Uploading customer lists
Four questions. ❓
Cross-border transfer
If the platform is abroad, transfer rules apply; see the transfers guide. 🌍
Opted-out people
People who refused marketing are removed from the list. 🚫
Limits in targeting
BU BÖLÜMÜN ÖZETİ
- Sensitive categories
- Children
- Transparency
- Minimisation
Four principles. 🎯
Sensitive categories
Targeting on health, beliefs and similar traits is risky and restricted on most platforms. 🚫
Children
Targeting children has extra rules. 🧒
Transparency
Users should understand why they see an ad. 👁️
Minimisation
No more data than targeting needs is transferred. ✂️
Four common mistakes
BU BÖLÜMÜN ÖZETİ
- Unknown pixels
- Pixels without consent
- Uploading the whole database
- Unlimited agency access
All four grow risk. 🚧
Unknown pixels
Code nobody knows keeps sending data. 🕸️
Pixels without consent
Pixels running regardless of the cookie window. ⏩
Uploading the whole database
Bulk uploads including opt-outs and old records. 📤
Unlimited agency access
A departed agency’s account and pixel access stays open. 🔓
What should I do today?
BU BÖLÜMÜN ÖZETİ
- Step 1: a pixel inventory
- Step 2: find owners
- Step 3: review access
- If you want help
Three steps, one hour. 🪜
Step 1: a pixel inventory
All ad and analytics code on the site; a list. 📋
Step 2: find owners
Who installed each, is it still needed? Remove the unused. 🧹
Step 3: review access
Who can access ad accounts? Old agencies are removed. 🔐
If you want help
Let us set up your ad data routine together: use the consult your expert form. For a compliance snapshot of your digital assets see the digital audit; the bigger picture sits on the KVKK consultancy page. 🎯
Related reading from the archive: which ad drove the sale · content performance.
📝 Notes From the Field
A business’s site turned out to have eleven pixels from four ad platforms; most were installed years ago by departed agencies and none were tied to cookie consent. Unused pixels were removed, the rest tied to consent, and old agencies’ account access was closed. Measurement was simplified and the data flow became fully visible for the first time.
📖 Short Glossary
Ad pixel: code reporting site visits to an ad platform. List matching: matching a customer list to ad platform users. Targeting: showing ads to specific people. Account access: the right to manage an ad account.
⚡ Quick Summary
Ad pixels are powerful but rule-bound. 🎯 Data flows through pixels, list uploads, ad forms and analytics tools. Inventory pixels, clean up, tie them to consent and assess sensitive pages. Before uploading lists, check basis, notice, transfer and opt-outs. Limit targeting on sensitive categories and children.
🎯 Next Step
Let us set up your ad data routine: use the consult your expert form. Deletion requests sit in the deletion request guide; for your setup see the digital audit.
Frequently Asked Questions
Sık Sorulan Sorular
Is there a legal basis for using the list for ad matching? ⚖️
Were customers told about this use? 📢
No; use them in line with consent, notice and transfer rules.
You need a proper legal basis, notice and compliant transfers. Exclude people who refused marketing. Assess with your lawyer.
Close its access to ad accounts, pixels and analytics tools the same day; account ownership should stay with the business.
Source: Turkish Personal Data Protection Authority — guidance and decisions
