Product or Service Purchaser Information Text

VATAN GAZETECİLİK A.Ş.
PRODUCT OR SERVICE RECIPIENT DISCLOSURE STATEMENT

As Vatan Gazetecilik A.Ş. (hereinafter referred to as "Vatan"), we place great importance on the security of your personal data processed in accordance with the Personal Data Protection Law No. 6698 ("Law"). Therefore, we would like to inform you about the processing of your personal data.

PURPOSE, LEGAL BASIS, AND METHODS OF PROCESSING YOUR PERSONAL DATA

If you purchase products through our website, or if you carry out transactions related to your purchases or orders via the email address demirorenyayinlari@demirorenmedya.com, the call center at 0 (850) 224 02 22, or the WhatsApp Communication Line, your personal data will be processed in accordance with the Personal Data Protection Law No. 6698 and related regulations, based on the purposes and legal grounds stated below:

1. Identification Information

• Processed Personal Data: Name, Surname, Tax Number, Tax Office
• Purpose and Legal Basis of Processing Personal Data: The processing is based on the legal ground of "necessity of processing personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract," for the purposes of conducting product/service sales processes, post-sales support services, compliance with legislation, execution of financial and accounting operations, communication activities, business operations and audits, management of customer relations, execution of activities aimed at ensuring customer satisfaction, tracking requests/complaints, and execution of contract processes.
• Methods of Collecting Personal Data: Data is collected via online forms on the website, call center records, emails, and information and documents provided by the concerned person.

2. Contact Information

• Processed Personal Data: Email Address, Phone Number, Business/Home Phone Number, Address Information, Province-District Information
• Purpose and Legal Basis of Processing Personal Data: The processing is based on the legal ground of "necessity of processing personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract," for the purposes of conducting product/service sales processes, post-sales support services, compliance with legislation, execution of financial and accounting operations, communication activities, business operations and audits, management of customer relations, execution of activities aimed at ensuring customer satisfaction, tracking requests/complaints, and execution of contract processes.
• Methods of Collecting Personal Data: Data is collected via online forms on the website, call center records, emails, and information and documents provided by the concerned person.

3. Customer Transaction Information

• Processed Personal Data: Request/Complaint Information, Invoice Information, Order Information, Order Number, Cargo Information, Delivery Note Information, Company Name
• Purpose and Legal Basis of Processing Personal Data: The processing is based on the legal ground of "necessity of processing personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract," for the purposes of conducting product/service sales processes, post-sales support services, compliance with legislation, execution of financial and accounting operations, communication activities, business operations and audits, management of customer relations, execution of activities aimed at ensuring customer satisfaction, tracking requests/complaints, and execution of contract processes.
• Methods of Collecting Personal Data: Data is collected via the website, emails, contracts, and call center records.

4. Financial Information

• Processed Personal Data: Bank Account Information
• Purpose and Legal Basis of Processing Personal Data: The processing is based on the legal grounds stated in Article 5(2)(c) of the Law, "necessity of processing personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract," for the purposes of conducting financial and accounting operations, product/service sales processes, communication activities, management of customer relations, execution of activities aimed at ensuring customer satisfaction, and execution of contract processes.
• Methods of Collecting Personal Data: Data is collected via online forms on the website, call center records, emails, and information and documents provided by the concerned person.

5. Transaction Security

• Processed Personal Data: Internet Access Log Records, IP Address Information, Website Login/Logout Information
• Purpose and Legal Basis of Processing Personal Data: The processing is based on the legal ground of "explicitly stipulated by laws" in Article 5(2)(a) of the Law and "necessity of processing personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract," for the purposes of conducting information security processes, managing access authorizations, conducting audit/ethical activities, ensuring the security of the data controller's operations, conducting storage and archiving activities, executing business operations and audits, ensuring business continuity, and managing contract processes.
• Methods of Collecting Personal Data: Data is collected via online forms on the website, information security systems, and electronic devices.

6. Visual and Audio Record Information

• Processed Personal Data: Call Center Voice Recordings
• Purpose and Legal Basis of Processing Personal Data: The processing is based on the legal ground of "necessity of processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject," for the purposes of conducting legal processes, communication activities, business operations and audits, post-sales support services, tracking requests/complaints, and providing information to authorized persons, institutions, and organizations.
• Methods of Collecting Personal Data: Data is collected via the call centers when you have conversations with them.

TRANSFER OF YOUR PERSONAL DATA

Your personal data may be transferred:

• To Authorized Public Institutions and Organizations, for the purposes of conducting activities in compliance with legislation, providing information to authorized persons, institutions, and organizations, and managing legal processes as required by legal regulations.
• To Affiliates and Subsidiaries, for the purposes of conducting information security processes, executing/monitoring business operations, conducting storage and archiving activities, financial and accounting operations, and managing contract processes.
• To Supplier Representatives and Employees, for the purposes of conducting activities in compliance with legislation, managing supply chain processes, executing/monitoring business operations, and conducting logistics activities.
• To Business Partners, for the purpose of conducting product or service sales processes.

Your personal data will only be transferred to the extent necessary to achieve the intended purpose, and in accordance with the rules in Article 8 (Transfer) or Article 9 (Transfer Abroad) of the Law, taking the necessary technical and administrative measures.

YOUR RIGHTS REGARDING YOUR PERSONAL DATA

As a data subject, you have the right to request from Vatan:

• To learn whether your personal data is processed,
• To request information regarding the processing of your personal data,
• To learn the purpose of processing your personal data and whether it is used in accordance with its purpose,
• To know the third parties to whom your personal data is transferred within the country or abroad,
• To request the correction of incomplete or inaccurate personal data and to request that the process be notified to third parties to whom the personal data has been transferred,
• To request the deletion or destruction of your personal data in case the reasons for processing are no longer valid, and to request that the process be notified to third parties to whom the personal data has been transferred,
• To object to the processing of your personal data exclusively by automated means which has resulted in an adverse outcome for you,
• To request the deletion or destruction of your personal data under the conditions stipulated in Article 7 of the Law, and to request notification of the transactions made to third parties to whom your personal data has been transferred,
• To request compensation for damages arising from the unlawful processing of your personal data.

How Can You Exercise Your Rights?

You can submit your requests and applications related to your personal data through the Data Subject Application Form available on our website by:

• Sending an email to kvkkbasvuru@gazetevatan.com using your previously notified and registered email address in Vatan's systems,
• Personally submitting it with a valid identification document,
• Sending it to the address 100.Yıl Mahallesi, 2264 Sokak, Demirören Medya Center, No: 1/51 34204 Bağcılar, Istanbul / Turkey with a wet signature and a copy of your identification document,
• Signing it with a mobile signature or secure electronic signature and sending it via email to kvkkbasvuru@gazetevatan.com,
• Sending it to vatangazetecilik@hs03.kep.tr via registered electronic mail (KEP) address using a secure electronic signature or mobile signature.

According to the Communiqué on the Principles and Procedures for Application to the Data Controller ("Communiqué"), your application must include your name, surname, signature (if in writing), T.C. identity number (passport number for foreign applicants), main residence or business address for notification, if any, an email address for notification, phone number, and fax number, and the subject of the request.

The application should include explanations about the rights you are exercising and the request being made. The necessary information and documents related to the request should also be attached to the application.

Applications made on behalf of someone else require the applicant to be authorized and provide documentation of this authorization (power of attorney). If the subject of the application involves special categories of personal data, such as health information, the applicant must have special authorization as required by Article 10 of the Regulation on the Processing of Personal Health Data. The application must also include identification and address information and be accompanied by identity verification documents.

Unauthorized third-party applications made on behalf of someone else will not be considered.

How Long Will Your Requests Regarding Your Personal Data Be Responded To?

Your requests regarding your personal data will be evaluated and concluded free of charge within 30 days at the latest. However, if the process requires an additional cost, you may be charged according to the tariff determined by the Personal Data Protection Board.

DATA SECURITY

Vatan takes all necessary technical and administrative measures to protect the confidentiality, integrity, and accessibility of your personal data. These measures include:

• Implementing security measures to prevent unauthorized access to personal data,
• Regularly monitoring and controlling access to personal data,
• Using secure communication protocols,
• Conducting regular audits to ensure compliance with data protection regulations.

CHANGES TO THIS DISCLOSURE STATEMENT

Vatan reserves the right to make changes to this disclosure statement in order to comply with new legal requirements or to reflect changes in our data processing practices. We recommend that you periodically review this statement to stay informed about how we protect your personal data.

For more information, please visit our website or contact us using the contact information provided above.