Member Information Text

VATAN GAZETECİLİK A.Ş. MEMBER INFORMATION DISCLOSURE STATEMENT

As Vatan Gazetecilik A.Ş. (hereinafter referred to as "Vatan"), we take the security of your personal data seriously as a data controller under the Personal Data Protection Law No. 6698 ("Law"). Therefore, we would like to inform you about the processing of your personal data.

PURPOSE, LEGAL REASON, AND METHODS OF PROCESSING YOUR PERSONAL DATA

If you create a new membership through our website, or carry out transactions related to your purchases or orders via the demirorenyayinlari@demirorenmedya.com email address, the 0 (850) 224 02 22 call center, or WhatsApp Communication Line, your personal data will be processed in accordance with the Personal Data Protection Law No. 6698 and secondary regulations, within the following purposes and legal reasons:

Identity Information
- Processed Personal Data: First Name, Last Name
- Purpose and Legal Reason for Processing Personal Data: The data is processed based on the legal reason stated in Article 5, Paragraph 2(c) of the Law, which stipulates that "Processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract" for purposes such as conducting product/service sales processes, conducting after-sales support services, ensuring that activities comply with legislation, managing financial and accounting processes, managing communication activities, conducting and supervising business activities, managing customer relations processes, conducting activities aimed at customer satisfaction, tracking requests/complaints, and managing contract processes.
- Methods of Collecting Personal Data: Personal data is collected through online forms on the website, call center records, email, and information and documents provided by the relevant person.
Contact Information
- Processed Personal Data: Email Address, Mobile Phone Number, Home/Work Phone Number, Address Information, Province/District Information
- Purpose and Legal Reason for Processing Personal Data: The data is processed based on the legal reason stated in Article 5, Paragraph 2(c) of the Law for purposes such as conducting product/service sales processes, conducting after-sales support services, ensuring that activities comply with legislation, managing financial and accounting processes, managing communication activities, conducting and supervising business activities, managing customer relations processes, conducting activities aimed at customer satisfaction, tracking requests/complaints, and managing contract processes.
- Methods of Collecting Personal Data: Personal data is collected through online forms on the website, call center records, email, and information and documents provided by the relevant person.

Customer Transaction Information

Processed Personal Data: Request/Complaint Information, Invoice Information, Order Information, Cargo Information, Delivery Note Information, Shopping Points, Gift Voucher
Purpose and Legal Reason for Processing Personal Data: The data is processed based on the legal reason stated in Article 5, Paragraph 2(c) of the Law for purposes such as conducting product/service sales processes, conducting after-sales support services, ensuring that activities comply with legislation, managing financial and accounting processes, managing communication activities, conducting and supervising business activities, managing customer relations processes, conducting activities aimed at customer satisfaction, tracking requests/complaints, and managing contract processes.
Methods of Collecting Personal Data: Personal data is collected through the website, email, contracts, and call center records.

4. Financial Information

Processed Personal Data: Bank Account Information
Purpose and Legal Reasons for Processing Personal Data: The data is processed based on the legal reason stated in Article 5, Paragraph 2(c) of the Law for purposes such as managing financial and accounting processes, conducting product/service sales processes, managing communication activities, managing customer relations processes, conducting activities aimed at customer satisfaction, and managing contract processes.
Methods of Collecting Personal Data: Personal data is collected through online forms on the website, email, and information and documents provided by the relevant person.

5. Transaction Security

Processed Personal Data: Internet Access Log Records, Password Information, IP Address Information, Website Entry-Exit Information
Purpose and Legal Reason for Processing Personal Data: The data is processed based on the legal reason stated in Article 5, Paragraph 2(a) of the Law, which stipulates that "It is explicitly stipulated by the laws," for purposes such as conducting information security processes, managing access authorizations, conducting audit/ethical activities, ensuring the security of data controller operations, managing storage and archiving activities, ensuring business continuity, and managing contract processes.
Methods of Collecting Personal Data: Personal data is collected through online forms on the website, information security systems, and electronic devices.

Visual and Audio Records

Processed Personal Data: Call Center Audio Recordings
Purpose and Legal Reasons for Processing Personal Data: The data is processed based on the legal reason stated in Article 5, Paragraph 2(f) of the Law, which stipulates that "It is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject," for purposes such as following and conducting legal affairs, managing communication activities, conducting and supervising business activities, conducting after-sales support services, following requests and complaints, and providing information to authorized persons, institutions, and organizations.
Methods of Collecting Personal Data: Personal data is collected through call centers when you communicate with them.

TRANSFER OF PERSONAL DATA

Your personal data may be transferred to:

Authorized Public Institutions and Organizations: Within the scope of the activities stipulated by the legal regulation, for purposes such as ensuring that activities comply with legislation, providing information to authorized persons, institutions, and organizations, and following and conducting legal affairs.
Subsidiaries and Affiliates: For purposes such as conducting information security processes, conducting/supervising business activities, managing storage and archiving activities, managing financial and accounting processes, and managing contract processes.
Supplier Representatives and Employees: For purposes such as conducting activities in compliance with legislation, managing supply chain processes, conducting/supervising business activities, and managing logistics activities.
Business Partners: For purposes such as conducting product or service sales processes.

Your data will be transferred only to the extent necessary to fulfill the relevant purpose, in accordance with the rules stated in Article 8 regarding transfer or Article 9 regarding transfer abroad, with the necessary technical and administrative measures in place.

YOUR RIGHTS REGARDING YOUR PERSONAL DATA

As a data subject, you can apply to Vatan and:

Learn whether your personal data is processed,
Request information if your personal data has been processed,
Learn the purpose of processing your personal data and whether it is used for its intended purpose,
Know the third parties to whom your personal data is transferred within the country or abroad,
Request the correction of your personal data if it is incomplete or incorrectly processed, and request the notification of the transactions carried out in this context to third parties to whom your personal data has been transferred,
Request the deletion or destruction of your personal data in the event that the reasons for its processing have disappeared, and request the notification of the transactions carried out in this context to third parties to whom your personal data has been transferred,
Object to the occurrence of a result against you by analyzing the data processed solely through automated systems,
Request the deletion or destruction of your personal data within the framework of the conditions set forth in Article 7 of the Law, and request the notification of the transactions carried out in this context to third parties to whom your personal data has been transferred,
Request compensation for the damage if you suffer damage due to the unlawful processing of your personal data.

How Can You Exercise Your Rights?

You can submit your requests and applications regarding your personal data through the Relevant Person Application Form on our website;

By sending an electronic mail to kvkkbasvuru@gazetevatan.com using the email address that you have previously notified and registered in Vatan’s system,
By applying in person with a valid identification document,
By sending a signed application with a photocopy of your identity card to the address 100.Yıl Mahallesi, 2264 Sokak, Demirören Medya Center, No: 1/51, 34204 Bağcılar, Istanbul / Turkey,
By signing with a mobile signature or secure electronic signature and sending it via email to kvkkbasvuru@gazetevatan.com,
By sending it to vatangazetecilik@hs03.kep.tr using a registered electronic mail (KEP) address, secure electronic signature, or mobile signature.

You can submit your applications to Vatan Gazetecilik A.Ş.

In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller (“Communiqué”), your application must include your name, surname, signature if the application is in writing, T.R. identification number (passport number if the applicant is a foreigner), residence or workplace address for notification, if any, email address, telephone number, and fax number for notification purposes, and information about the subject of the request.

The application should include explanations regarding the rights you wish to exercise and the specific right you are requesting, with clear and understandable details. Information and documents related to the application must be attached.

The subject of the request must be related to the applicant, and if acting on behalf of someone else, the applicant must be authorized and such authority must be documented (power of attorney). If the subject of the application relates to special categories of personal data, such as health information, the applicant must have special authority in accordance with Article 10 of the Regulation on Personal Health Data. Additionally, the application must include identity and address information, and identity-verifying documents must be attached to the application.

Requests made by unauthorized third parties on behalf of others will not be considered.

In cases where written answers are required, no fees will be charged for the first ten pages; a processing fee of 1 Turkish Lira may be charged for each additional page. If the response is given in a different recording medium, a fee will be charged in proportion to the cost of the recording medium.

Applications will be processed and concluded within the shortest possible time and no later than thirty days after receipt, based on the nature of the request.

Security Measures Vatan Gazetecilik A.Ş. takes appropriate technical and administrative measures to ensure the security of your personal data in order to prevent unlawful processing, unlawful access, and the preservation of the data, and takes care to work with third parties who take appropriate security measures.

Updates This disclosure statement may be updated as needed to comply with the legislation and policies on data protection. The most recent version will always be accessible on our website.

Contact Information For any further inquiries or to exercise your rights, you can contact us at:

Address: 100.Yıl Mahallesi, 2264 Sokak, Demirören Medya Center, No: 1/51, 34204 Bağcılar, Istanbul / Turkey
Email: kvkkbasvuru@gazetevatan.com

This disclosure statement has been prepared to inform members of Vatan Gazetecilik A.Ş. about the processing of their personal data in accordance with the Personal Data Protection Law No. 6698.