KVKK Disclosure Notice

Last updated: 18.07.2026

This disclosure notice is prepared under Article 10 of Turkish Personal Data Protection Law No. 6698 (“KVKK”) to inform you about how your personal data is processed by Vitreya Media.

1. Identity of the data controller

2. Purposes of processing

Your personal data is processed within the scope of the conditions set out in Articles 5 and 6 of KVKK, for the following purposes:

  • Fulfilling your service requests and managing contractual processes
  • Customer relationship management and communication activities
  • Compliance with legal obligations
  • Conducting operations in accordance with applicable legislation
  • Ensuring the security of communications, websites and digital assets
  • Subject to your explicit consent: marketing, campaign and information activities

3. Categories of personal data processed

Categories of personal data processed for the above purposes:

  • Identity data (first name, last name)
  • Contact data (email, phone, address, company)
  • Customer transaction data (requests, briefs, contract details)
  • Transaction security data (IP, log records, cookie data)
  • Marketing data (consent records, subscription status)

4. Recipients of data and purpose of transfer

Within the scope of KVKK Articles 8 and 9, and to the extent necessary for the processing purposes, your personal data may be transferred to:

  • Authorised public institutions — for legal obligations
  • Business partners and service providers — hosting, analytics, email and payment infrastructures
  • Financial advisors and legal counsel — for the conduct of legal processes
  • Overseas providers — only with the safeguards under KVKK Article 9 and your explicit consent

5. Method of collection and legal basis

Your personal data is collected through our website, email, telephone, physical forms or contractual conclusion, by automated or non-automated means.

The legal bases for processing are KVKK Article 5/2 (formation/performance of a contract, legal obligation, legitimate interest) and, where required, the explicit consent obtained under KVKK Articles 5/1 and 6/2.

6. KVKK Article 11 — Rights of the data subject

Under KVKK Article 11 you may apply to the data controller to exercise the following rights:

  • To learn whether your personal data is being processed
  • To request information if processed
  • To learn the purpose and whether the data is used accordingly
  • To know the parties to whom the data is transferred domestically or abroad
  • To request correction of incomplete or inaccurate data
  • To request deletion or destruction under KVKK Article 7
  • To request notification of these actions to third parties to whom the data has been transferred
  • To object to outcomes arising solely from automated analysis
  • To claim compensation for damages caused by unlawful processing

7. Application method

To exercise the above rights, in accordance with the Communiqué on Application Procedures and Principles to the Data Controller, you can apply with documents proving your identity through the following channels:

Applications are processed within 30 days at the latest. Depending on the nature of the request, a fee determined by the Personal Data Protection Board may be charged.