Privacy Notice on the Protection of Personal Data

This notice is provided by Yazar Medya Anonim Şirketi under Article 10 of Law No. 6698 on the Protection of Personal Data ("KVKK") to inform the people whose data is processed through the Yazar Medya ID verification sites (qr.yazargazetesi.com, qr.yazarhaber.com.tr, qr.yazartv.com, qr.yazarspor.com.tr, qr.yazarkadin.com, qr.yazarturk.com, qr.yazarworld.com) and the card issuing system.

1. Data controller

Yazar Medya Anonim Şirketi · MERSİS 0944096326600001 · Trabzon Ticaret Sicili No: 25410

Address: Pelitli Mah. Karaağaçlı Sk. A Blok No: 5A İç Kapı No: 8 Ortahisar / TRABZON · Phone: +90 501 379 08 08

2. Personal data processed

  • Visitors who verify an ID: the ID number or QR code queried, the initials or birth year entered, the query time, and a salted one-way hash of the IP address.
  • Card holders: full name, photo, title, linked brands, card number, validity and membership dates, national ID number, birth year (optional) and ISS number.
  • Reporters: location, description, optional photo and optional contact detail. Reports may be anonymous.
  • Contact form: full name, email and/or phone, topic and message.

3. Purposes

  • Letting the public verify whether a person acting on behalf of Yazar Medya is genuinely registered, and preventing impersonation and fraud.
  • Issuing, renewing, suspending and revoking ID cards.
  • Investigating reports of fake cards or suspicious persons and notifying the competent authorities when necessary.
  • Answering requests sent through the contact form, and fulfilling legal obligations.
  • Preventing abuse of the service (query limits, bot protection) and ensuring information security.

4. Legal grounds and collection method

Data is collected electronically through the forms on these sites and through the card issuing application used by authorised staff.

  • Establishment and performance of the membership/card relationship (KVKK art. 5/2-c).
  • Compliance with the controller’s legal obligations (art. 5/2-ç).
  • Establishment, exercise or protection of a right (art. 5/2-e).
  • The controller’s legitimate interest in preventing impersonation and fraud, without harming your fundamental rights (art. 5/2-f).

The national ID number is printed on the physical card only; it is never shown on the verification sites or in any public response.

5. Transfers

Data may be shared with judicial and administrative authorities when required by law.

The service is hosted on servers of OVHcloud located in Canada. This hosting is a transfer abroad within the meaning of KVKK art. 9 and is carried out under the safeguards set out in that article.

Data is not sold and is not shared with third parties for advertising or marketing.

6. Retention

Query logs are kept for 90 days and are then deleted automatically.

Card records are kept for as long as the card is valid and, afterwards, for the periods required by law and for the establishment or defence of legal claims. Reports and messages are kept for as long as the purpose requires.

When the reason for processing ends, the data is deleted, destroyed or anonymised under KVKK art. 7.

7. Your rights (KVKK art. 11)

  • To learn whether your personal data is processed, and to request information about it;
  • To learn the purpose of processing and whether it is used accordingly;
  • To know the third parties in Türkiye or abroad to whom the data is transferred;
  • To request correction of incomplete or inaccurate data, and deletion or destruction under art. 7;
  • To request that corrections and deletions be notified to the third parties the data was transferred to;
  • To object to a result against you that arises solely from automated analysis;
  • To claim compensation for damage caused by unlawful processing.

8. How to apply

Send your request in writing to Yazar Medya Anonim Şirketi, Pelitli Mah. Karaağaçlı Sk. A Blok No: 5A İç Kapı No: 8 Ortahisar / TRABZON, or through the contact form by choosing the topic “Data protection request”. Please state your full name, contact details and your request clearly.

Requests are answered free of charge as soon as possible and within 30 days at the latest (KVKK art. 13). If your request is rejected or not answered in time, you may file a complaint with the Personal Data Protection Board within the periods set out in art. 14.