Personal Data Protection Notice

1. Data Controller

Your personal data is processed by Direct Medya (“Direct Medya” or the “Company”) as the data controller, within the scope described below.

Address: Beylikdüzü, Istanbul, Türkiye
Email: info@directmedya.com
Phone: +90 533 630 55 87

2. Personal Data We Process

When you visit our website, fill in the contact form or reach us via WhatsApp, email or phone, the following personal data may be processed:

• Identity data: name and surname.
• Contact data: email address, phone / WhatsApp number.
• Customer transaction data: company name, website address, project and request details, correspondence.
• Security data: IP address, browser and device information, the page the form was submitted from, submission date and time.
• Marketing and usage data: browsing, click and session data collected through cookies and similar technologies, and advertising campaign interactions.

3. Purposes of Processing

• Receiving and evaluating your requests and getting in touch with you,
• Preparing service proposals and carrying out contract processes,
• Managing communication activities and following up on your requests,
• Ensuring website security and preventing misuse and spam,
• Analysing website usage and improving user experience and content,
• Measuring advertising campaign performance and running marketing activities,
• Complying with legal obligations and responding to requests from competent authorities.

4. Legal Grounds

Your personal data is processed on the following legal grounds set out in Article 5 of the KVKK:

• Processing is directly related to the establishment or performance of a contract (Art. 5/2-c) — for proposals and service requests,
• Processing is necessary for compliance with a legal obligation (Art. 5/2-ç),
• Processing is necessary for the establishment, exercise or protection of a right (Art. 5/2-e),
• Processing is necessary for our legitimate interests, provided it does not harm your fundamental rights and freedoms (Art. 5/2-f) — for website security and request management,
• Your explicit consent for non-essential analytics and advertising cookies and related transfers abroad (Art. 5/1 and Art. 9).

5. Transfer of Personal Data

Your personal data may be shared, limited to the purposes above, with our hosting, email and communication infrastructure providers, our business partners and legally authorised public authorities.

Because our website uses Google Analytics and Google Ads (Google LLC / Google Ireland Ltd.) and Yandex Metrica (Yandex LLC), usage data collected through cookies may be processed on these providers’ servers outside Türkiye. If you contact us via WhatsApp, your messages are transmitted through WhatsApp (Meta Platforms) infrastructure. Transfers abroad are carried out in accordance with Article 9 of the KVKK.

6. Method of Collection

Your personal data is collected partly or fully by automated means through the contact form on our website, cookies and similar technologies, and electronic channels such as email, phone and WhatsApp.

7. Retention Period

Your personal data is kept for as long as required by the purpose of processing and by the retention and limitation periods set out in applicable legislation. Form submissions that do not result in a business relationship are kept for no longer than 2 (two) years from the last contact. Once the period expires, your data is deleted, destroyed or anonymised. Retention periods for cookies are listed in our Cookie Policy.

8. Your Rights

Under Article 11 of the KVKK, you have the right to:

• Learn whether your personal data is being processed,
• Request information if your personal data has been processed,
• Learn the purpose of processing and whether data is used in line with that purpose,
• Know the third parties in Türkiye or abroad to whom your data is transferred,
• Request correction of incomplete or inaccurate data,
• Request deletion or destruction of your data under the conditions of Article 7 of the KVKK,
• Request that corrections, deletions or destructions are notified to third parties to whom the data was transferred,
• Object to a result against you arising from analysis exclusively through automated systems,
• Claim compensation for damages arising from unlawful processing.

9. How to Apply

You can submit requests regarding your rights in writing to the address above, together with information identifying you, or by sending an email titled “KVKK Information Request” from your email address registered with us to info@directmedya.com, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller.

Requests are concluded free of charge within 30 (thirty) days at the latest, depending on their nature. If the process requires additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.