top of page
  • Instagram
  • Facebook
  • LinkedIn

Privacy Policy


Last Updated: [26/05/2026]
At Vitreya Media ("we", "our", "us", "Vitreya Media"), we take the privacy and security of your personal data seriously. This Privacy Policy explains what information we collect when you visit our website vitreyamedia.com ("Site") or use our services, how we use that information, with whom we share it, and the rights you have over your personal data.
This Privacy Policy has been prepared in accordance with Turkey's Personal Data Protection Law No. 6698 ("KVKK") and, where applicable, the European Union General Data Protection Regulation ("GDPR").


1. Data Controller
The data controller responsible for processing your personal data under the KVKK is Vitreya Media.

​

2. What Personal Data Do We Collect?
When you use our Site or contact us, we may collect the following categories of personal data:
2.1 Information You Provide Directly

  • Identity and Contact Information: Name, surname, email address, phone number, company name, job title

  • Message Content: Project details, requirements, and other information you submit via contact forms, emails, or proposal requests

  • Marketing Preferences: Your email address and communication preferences if you subscribe to our newsletter

  • Contractual Data: If you become our client, billing information, tax number, bank/payment details, and other project-related data you share with us

​

2.2 Information We Collect Automatically

  • Technical Data: IP address, browser type and version, operating system, device information, language preferences

  • Usage Data: Duration of your visit, pages viewed, links clicked, referral source

  • Cookie Data: Data collected through cookies and similar tracking technologies, as detailed in Section 7 below

​

3. How Do We Collect Your Personal Data?
We collect personal data through the following methods:

  • Via our website: When you fill out a contact form, request a proposal, or subscribe to our newsletter

  • Direct communication: When you contact us by email, phone, WhatsApp, or social media

  • Contract processes: When you sign a service agreement with us

  • Automated tools: Through cookies, analytics tools, and server logs when you visit our Site

  • Third parties: From referral partners or publicly available sources (e.g., your LinkedIn profile)

​

4. Why Do We Collect Your Personal Data, and on What Legal Basis?
We process your personal data for the following purposes and based on the legal grounds outlined in Article 5 of the KVKK and Article 6 of the GDPR:

  1. To provide our services and fulfill contractual obligations: Delivering web design, development, social media management, and content production services — Legal basis: Performance of a contract

  2. To respond to your inquiries: Answering your questions and preparing proposals — Legal basis: Legitimate interest and pre-contractual steps

  3. To manage client relationships: Providing customer support, executing projects, and invoicing — Legal basis: Performance of a contract

  4. For marketing communications: Sending newsletters, service announcements, and promotions — Legal basis: Your explicit consent

  5. To improve and analyze the Site: Measuring site performance and improving user experience — Legal basis: Legitimate interest

  6. To comply with legal obligations: Meeting tax, commercial, and other applicable regulatory requirements — Legal basis: Legal obligation

  7. To establish, exercise, or defend legal claims — Legal basis: Legitimate interest

​

5. How Do We Store and Protect Your Personal Data?
We implement reasonable administrative and technical security measures to protect your personal data against unauthorized access, loss, or misuse. Your data is stored on encrypted servers protected by firewalls.
Your data is retained for as long as necessary to fulfill the purposes for which it was collected, or for the duration required by our legal retention obligations (e.g., generally 10 years under Turkish Commercial Code and Tax Procedure Law). At the end of these periods, your personal data is deleted, destroyed, or anonymized.
While no method of transmission or storage is 100% secure, we are committed to applying industry-standard measures to protect your data.


6. With Whom Do We Share Your Personal Data?
We do not sell your personal data. Your data may only be shared with the following parties, to the extent necessary and under appropriate safeguards:

  • Service providers (data processors): Third-party services we use to run our Site and operations, including:

    • Hosting and infrastructure: Wix

    • Analytics: Google Analytics

    • Email services: Private Email

  • Legal authorities: Government bodies and regulators, where we are required by law, court order, or official request

  • Professional advisors: Accountants, lawyers, and other advisors bound by confidentiality obligations

  • Other parties with your explicit consent

Some of our service providers (e.g., Google) may process your data outside of Turkey. Cross-border data transfers are carried out in accordance with the conditions set forth in Article 9 of the KVKK and GDPR-compliant transfer mechanisms (such as Standard Contractual Clauses).


7. Cookies and Tracking Tools
Our Site uses cookies and similar technologies to improve user experience and analyze traffic.
Types of cookies we use:

  • Strictly necessary cookies: Required for the basic functioning of the Site; cannot be disabled

  • Performance/Analytics cookies: Measure visitor behavior through tools like Google Analytics

  • Functionality cookies: Remember your preferences (e.g., language)

  • Marketing cookies: If active, used to display content and advertising relevant to your interests

You can change your cookie preferences through your browser settings or — if available — via the cookie preference panel on our Site. Disabling non-essential cookies may affect some functionality of the Site.
Third-party services (such as Google Analytics) operate under their own privacy policies, and their data processing practices are outside the scope of this Policy.


8. How Do We Communicate With You?
We may contact you for the following purposes:

  • To respond to your inquiries and requests

  • To provide important information about our services

  • For billing and payment-related matters

  • With your explicit consent, to share agency news, new services, and promotions

Our communication channels include: email, phone, SMS, WhatsApp, and postal mail.
You can opt out of marketing communications at any time by clicking the "unsubscribe" link in our newsletters or by contacting us directly.


9. Your Rights Under the KVKK (Article 11) and GDPR
Under Article 11 of the KVKK, you have the following rights regarding your personal data:
a) To learn whether your personal data is being processed,

b) To request information if your data has been processed,

c) To learn the purpose of processing and whether your data is used in accordance with that purpose,

d) To know the third parties to whom your data has been transferred, whether domestically or abroad,

e) To request correction of incomplete or inaccurate data,

f) To request deletion or destruction of your data under the conditions set out in the KVKK, g) To request notification of the operations carried out under (e) and (f) to third parties to whom your data has been transferred,

h) To object to a result that arises against you due solely to automated analysis of your data,

i) To claim compensation for damages incurred as a result of unlawful processing.


If you are a resident of the EU, you also have additional rights under the GDPR, including the right to data portability, the right to object to automated decision-making, and the right to lodge a complaint with a supervisory authority.
10. How to Exercise Your Rights
To exercise any of the above rights, please send your request — together with information that verifies your identity — through the following channels:

​

Your request will be responded to within 30 days from the date of application. Such requests are processed free of charge; however, if the operation requires additional cost, a fee may be charged in accordance with the tariff set by the Personal Data Protection Board.
If you are not satisfied with our response, you have the right to lodge a complaint with the Turkish Personal Data Protection Authority (KVKK) or, if applicable, with a competent EU supervisory authority.


11. Withdrawing Your Consent
Where we process your data based on your explicit consent (e.g., for marketing communications), you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
To withdraw your consent, please email: iletisim@vitreyamedia.com


12. Children's Privacy
Our services and Site are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe that data belonging to a minor has been collected by us, please contact us, and we will delete such data promptly.


13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When significant changes are made, we will publish the updated policy on this page and revise the "Last Updated" date. For material changes, we may also notify registered users by email.
Your continued use of the Site after such updates constitutes acceptance of the revised policy. We therefore encourage you to review this Policy regularly.


14. Contact Us
If you have any questions, requests, or concerns about this Privacy Policy or our processing of your personal data, please contact us:
Vitreya Medya

This Privacy Policy is governed by, and shall be interpreted in accordance with, the laws of the Republic of Turkey.

bottom of page