MEDYASYON
Cart 0

LEGAL / PRIVACY

Privacy

This policy explains how Medyasyon processes personal data on the website, in request forms and during online purchases.

  • UPDATEDOctober 12, 2026
  • DOCUMENTPOL-01
  • STATUSIn force
Read the document Have a question?

Last updated: 25 September 2026.

This privacy policy explains how Medyasyon Bilgi ve İletişim Teknolojileri Tic. Ltd. Şti. (“Medyasyon”, “we”) processes personal data when you visit https://www.medyasyon.com, submit a contact or PressGPT demo form, talk to the virtual operator, or purchase a digital package.

1. Data controller

2. Scope

The policy covers website visitors, people who send demo or contact requests, people who talk to the virtual operator, and customers who complete checkout. It should be read together with the Personal Data Notice and the Cookie Policy.

3. Personal data we process

  • Identity and contact: name, e-mail, telephone, company name.
  • Request content: message, selected service or PressGPT package, preferred demo date and time, language, source page and consent status.
  • Virtual operator conversations: your voice while the conversation is active, the written transcript of the conversation (what you say or type and the assistant’s answers), the language, title and address of the page you started from, and technical connection data such as your IP address and browser. Your voice is not used to identify you and is not processed as biometric data.
  • Commerce: billing identity, invoice address, order number, package, amount, payment status and PayTR stored-card tokens (not the card number). Card numbers are processed by PAYTR and are not stored on this website.
  • Technical data: IP address (hashed for form rate-limiting), browser type, date/time and security logs.
  • Preferences: language selection when you explicitly switch locale.

4. How we collect data

We collect data that you submit in forms or at checkout, data created while performing the contract (order and support records), and limited technical data generated automatically by the server. We do not buy contact lists.

The virtual operator is an AI assistant, not a person. It is provided by ElevenLabs and starts only when you click the “Voice assistant” button and accept the notice shown before the conversation; until then no data is sent to ElevenLabs. The assistant only answers questions and records requests; it does not take decisions about you. Please do not share health data or other special categories of personal data in the conversation.

5. Purposes and legal bases

Processing is carried out under the Turkish Personal Data Protection Law No. 6698 (“KVKK”), in particular:

  • Responding to contact and demo requests and keeping a consent record (KVKK Art. 5/1 explicit consent and Art. 5/2(c) where the request is necessary to take steps toward a contract).
  • Performing the distance sales contract, delivering digital access, invoicing and support (Art. 5/2(c)).
  • Answering your questions through the virtual operator (Art. 5/2(c) where the questions concern our services, and Art. 5/2(f) for improving answer quality and preventing abuse). A demo or callback request is saved during the conversation only after you give explicit consent verbally or in writing (Art. 5/1).
  • Meeting tax, accounting and consumer-law duties (Art. 5/2(a)).
  • Establishing, exercising or defending legal claims, including fraud and abuse prevention (Art. 5/2(e)).
  • Operating the site securely, rate-limiting forms and remembering an explicit language choice (Art. 5/2(f) legitimate interests, provided this does not override your fundamental rights).
  • Optional analytics or commercial electronic messages only with separate explicit consent (Art. 5/1).

6. Recipients

We do not sell personal data. Data may be disclosed only as needed to:

  • PAYTR, the licensed payment institution, for card authorisation, 3-D Secure, stored cards and recurring charges.
  • ElevenLabs, which provides the virtual operator’s speech recognition, voice and conversation infrastructure and processes conversation data on our instructions.
  • unpkg.com, the content delivery network that serves the assistant’s software after you click the assistant button; it receives your IP address and browser details while the file is downloaded.
  • Hosting, e-mail and infrastructure providers that process data on our instructions.
  • Professional advisers (for example accountants or counsel) where a legal duty or a claim requires it.
  • Competent public authorities when the law requires disclosure.

If a service provider stores or accesses data outside Türkiye, the transfer follows KVKK Article 9. Virtual operator conversations are processed on ElevenLabs servers outside Türkiye; this transfer is carried out in accordance with the conditions of KVKK Article 9.

7. Retention

  • Demo and contact requests: until the request is concluded and for up to two years afterwards, unless you ask for earlier deletion or a longer statutory period applies. Requests recorded by the virtual operator follow the same period.
  • Virtual operator transcripts: 90 days at ElevenLabs, then deleted. Voice recordings are not stored after the conversation.
  • Orders, invoices and accounting records: ten years under commercial and tax rules.
  • Language cookie: one year after an explicit language switch.
  • Hashed form rate-limit records: one hour.
  • Security logs: only as long as needed for security and troubleshooting, as a rule no longer than 90 days unless an incident is being investigated.

8. Cookies

Essential cookies are used for language, security, cart and checkout. Analytics and marketing cookies run only after consent. The virtual operator uses browser storage only after you open it. Details are in the Cookie Policy.

9. Security and your tools

Leads are stored as private system records. Form rate-limiting uses a salted hash of the IP address rather than storing the raw address in that record. You may request the export or erasure of lead data linked to your e-mail address, in addition to the rights below. Transmission of the public site is protected with HTTPS where SSL is enabled.

10. Your rights

Under KVKK Article 11 you may request to learn whether your data is processed, to receive information about that processing, to learn the recipients, to request correction of incomplete or inaccurate data, to request deletion or destruction under the statutory conditions, to request notification of correction or deletion to recipients, to object to a result against you that is produced exclusively by automated analysis, and to claim compensation for damage caused by unlawful processing.

11. How to apply

Send a request that identifies you to iletisim@medyasyon.com or write to Sanayi Mahallesi, Fevzi Çakmak Caddesi No: 32, İzmit, Kocaeli, Türkiye. We respond within 30 days as a rule. We may ask for additional information to verify identity. You may also lodge a complaint with the Personal Data Protection Authority if your request is rejected.

12. Children

The website and PressGPT packages are directed at organisations and adults. We do not knowingly collect data from children.

13. Changes

We may update this policy when our processing or the law changes. The date at the top of the page is the current version. Related documents: Terms, Distance Sales Agreement.

Opens the voice and chat assistant.