Data controller
The data controller is Odun Games Limited Şirketi.
- Address: Kireçburnu Mah., Sarıyer, İstanbul, Türkiye
- Requests: the gazete.app contact form, or a written request to the address above
Data, purposes and legal grounds
| Category | Purpose | Legal ground |
|---|---|---|
| Transaction security: IP address, time of the request, page requested, browser and device type | Delivering the page, keeping the site secure, finding attacks and faults | Art. 5(2)(f), legitimate interest |
| Contact: the name and e-mail address you give in the contact form | Answering your request or message | Art. 5(2)(f), legitimate interest; for formal requests Art. 5(2)(ç), legal obligation |
| Request and complaint: the content of your message, the address of the story, the type and date of the request | Handling correction requests, data requests and legal complaints; proving that we answered | Art. 5(2)(ç), legal obligation; Art. 5(2)(e), establishing, using or protecting a right |
| Transaction security: a one-day hash of the IP address that sent the form | Stopping abuse of the form | Art. 5(2)(f), legitimate interest |
Our page counters process no personal data. They record only the page or story, the edition and the kind of event. They keep no IP address, no browser details and no identifier. The privacy notice has the details.
We process no special categories of personal data. We do not ask for an ID number, a phone number or your location. The site has no accounts and no payments.
How data is collected
- Automatically, by our host’s servers, when your browser requests a page.
- Directly from you, when you fill in the contact form.
Recipients
Personal data goes only where the work needs it:
- Cloudflare, Inc.: hosting, security and storage of form messages. It acts as our processor, on our instructions.
- Public authorities: only when the law requires it.
Cloudflare runs a worldwide network, so data may be processed abroad. Transfers abroad follow Article 9 of the KVKK.
Story photos load into your browser directly from the sites that published them, and those sites see your IP address. This is not a transfer by us: your browser connects to that site itself.
Retention
| Data | Kept for |
|---|---|
| Server request logs | Up to 7 days |
| Contact messages and correction requests | 12 months after the last message on the matter |
| Legal complaints | 2 years |
| Data requests | 3 years after the request is closed |
| Hash of the IP address | 1 day |
After that, the data is deleted, destroyed or made anonymous.
Your rights under Article 11
You can apply to the data controller to:
- learn whether your personal data is processed;
- ask for information if it is;
- learn the purpose of the processing and whether the data is used for that purpose;
- know the third parties in Türkiye or abroad to whom it is transferred;
- ask for correction if it is incomplete or wrong;
- ask for deletion or destruction under the conditions of Article 7;
- ask that a correction, deletion or destruction is notified to the third parties who received the data;
- object to a result against you that comes only from automated analysis;
- claim compensation if unlawful processing caused you a loss.
How to apply
You can apply in two ways:
- Through the contact form, choosing “a request about my personal data”.
- With a signed letter, sent by post or delivered by hand to the address above.
Your request should include your name and surname, an address for the answer, and what you ask for. We answer within 30 days at the latest, free of charge. If the request causes a separate cost, the fee set by the Board may apply. If you are not satisfied with our answer, you can complain to the Personal Data Protection Board.