Privacy Policy & KVKK Notice
This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and explains how your personal data is processed when you visit the vuralmedia.com website (the “Site”) and when you contact us.
In short: The contact form doesn't store your details on our server; your message reaches us as an email sent from your own account and is kept only in our mailbox. Google Analytics and Meta Pixel run only if you allow them in your cookie preferences.
1. Data controller
Your personal data is processed by Kaan Vural, operating under the Vural Media brand, as the data controller.
Contact: iletisim@vuralmedia.com
2. Personal data we process
2.1. Contact form and email
The contact form on the Site does not send your details to our server. When you press “Send”, they open as a ready-to-send email in your own email account (e.g. Gmail, Outlook, Yahoo, iCloud or the mail app on your device), and they are also copied to your own device's clipboard so you can paste them if needed. When you send that email, or write to us directly, we receive:
- Your full name
- Your email address
- Your company / brand name (if provided)
- The service you are interested in and the content of your message
- The time the email was sent and the technical header information your email provider adds to it
If JavaScript is turned off in your browser, the form passes your details to a sending script on the Site's server, which emails them to us with the same content and does not store them. In that case, an irreversible digest (hash) of your IP address is kept on the server for 10 minutes to prevent abuse (spam).
2.2. Cookies and similar technologies (only with your consent)
If you allow them in your cookie preferences:
- Google Analytics 4 (analytics): the pages you visit, your interactions with the Site (clicking the email link, the contact form opening your email app), device and browser information, approximate location and cookie identifiers.
- Meta Pixel (marketing): the pages you visit, the same interactions, browser information, IP address, cookie identifiers and, if you arrived by clicking a Meta ad, the ad click ID.
Your name, email address and message are never sent to these tools. See our Cookie Policy for details.
2.3. Server logs
The Site is hosted by Hostinger. As part of providing the hosting service, Hostinger may keep standard server logs of requests made to the Site (IP address, date and time, requested page, browser information) under its own policies.
3. Purposes
- Answering your requests and questions, preparing quotes and communicating with you
- Carrying out a business relationship, if one is established
- Keeping the Site secure and preventing abuse
- With your consent, measuring how the Site is used (Google Analytics) and the effect of our ads (Meta Pixel)
- Complying with legal obligations
4. Legal bases
- Your contact requests and the quote process: processing is directly related to the establishment or performance of a contract (KVKK Art. 5/2-c), and our legitimate interest, provided it does not harm your fundamental rights and freedoms (Art. 5/2-f)
- Security and abuse prevention: legitimate interest (Art. 5/2-f)
- Legal obligations: compliance with a legal obligation (Art. 5/2-ç)
- Analytics and marketing cookies: your explicit consent (Art. 5/1). You can withdraw it at any time via “Cookie Preferences” at the bottom of every page.
5. Transfers
- Hostinger: our hosting and email provider. The emails you send us are stored on Hostinger's servers outside Türkiye; your data is therefore transferred abroad.
- Google (Google Analytics): only if you allow analytics cookies; abroad.
- Meta Platforms (Meta Pixel): only if you allow marketing cookies; abroad.
- Competent public authorities, upon request and within the scope of legal obligations.
Transfers abroad are carried out in line with the conditions set out in Article 9 of the KVKK. The email provider you use to send your email (e.g. Google, Microsoft, Apple) is a service of your own choosing and processes data under its own privacy policy.
6. How the data is collected
Your personal data is collected when you send it to us by email, by automated means through cookies if you consent to them, and through server logs as part of the hosting service.
7. Retention
- Emails: Your messages are kept only in our mailbox (Hostinger) and are not transferred to any separate database or list. Once your request is concluded, they are deleted within 2 years at the latest if no business relationship is established; if one is, the retention periods required by applicable law apply.
- IP digest (only when JavaScript is off): 10 minutes.
- Google Analytics data: for the retention period set in our Google Analytics settings (at most 14 months).
- Cookies: the periods listed in the Cookie Policy.
- Your cookie choice: 12 months; after that you are asked again.
Data whose retention period has expired is deleted or anonymized.
8. Your rights (KVKK Art. 11)
Under Article 11 of the KVKK, you may apply to the data controller to:
- learn whether your personal data is processed,
- request information about it if it has been processed,
- learn the purpose of the processing and whether it is used accordingly,
- know the third parties in Türkiye or abroad to whom it is transferred,
- request its correction if it is incomplete or inaccurate,
- request its deletion or destruction under the conditions of Article 7 of the KVKK,
- request that the third parties to whom it was transferred are notified of such correction, deletion or destruction,
- object to a result against you arising from analysis exclusively by automated systems,
- claim compensation if you suffer damage due to unlawful processing.
9. How to apply
In line with the Communiqué on the Procedures and Principles of Application to the Data Controller, you can send your requests to iletisim@vuralmedia.com from the email address you previously used with us and that is in our records, or with a secure electronic signature or mobile signature. Please include your full name, contact details and the subject of your request.
Your request will be concluded free of charge within 30 days at the latest, depending on its nature; if the action requires an additional cost, the fee set by the Personal Data Protection Board may be charged. If your request is rejected, you find the answer insufficient or it is not answered in time, you may lodge a complaint with the Personal Data Protection Board.
10. Changes
This notice may be updated to reflect changes in the law or on the Site. The current version is always published on this page.