Zum Inhalt springen
GasttePublisher-KontoAnmelden

Rechtliches

Gastte Privacy Policy

Diese Seite ist eine englische Übersetzung zu Informationszwecken. Verbindlich ist der türkische Text; bei Abweichungen zwischen beiden Texten gilt der türkische Text. Türkischer Originaltext

Türkçe sürüm 1.0

This is an informational English translation. The Turkish original is legally binding; in case of any discrepancy the Turkish text prevails.

Version 1.0 — Effective: 2 November 2026

This policy summarises how Gastte (a sub-brand of Fibrika Reklam Hizmetleri Limited Şirketi) approaches personal data and confidential information. It should be read together with the KVKK Privacy Notice, the Cookie Policy and the Data Processing Agreement; the detailed legal information is set out in those documents.

1. Short Summary

  • We process your account, billing and usage data only to provide the service, invoice you, ensure security and fulfil our legal obligations.
  • We never see your card details; payments are taken on the PayTR infrastructure.
  • The data of your publication's readers belongs to you; for that data we are your data processor, acting only on your instructions.
  • Content sent to the artificial intelligence provider goes with your key, through your own account; we do not send your account information to the artificial intelligence provider.
  • We do not sell your data or share it with advertising networks.
  • When you close your account, your data remains exportable for 30 days and is then deleted, except for invoice records subject to a statutory retention obligation.

2. Two Different Roles: Data Controller and Data Processor

2.1 We are the data controller for your data. Fibrika is the data controller for the personal data of Customers who open a Gastte account, their authorised representatives, team members and gastte.com visitors. What this data is, for what purpose and on what legal basis it is processed, to whom it is transferred, how long it is retained and your rights are set out in the KVKK Privacy Notice.

2.2 We are your data processor for reader data. You are the data controller for the personal data of the readers, newsletter subscribers, commenters, poll participants, interviewees and subjects of the news on the news website you publish on the Gastte infrastructure. Fibrika processes this data only on your behalf, on your instructions and to the extent technically required by the Service (hosting, backup, email delivery, security). The terms of this relationship are set out in the Data Processing Agreement.

2.3 Consequences of this distinction. It is your obligation to provide your readers with a privacy notice under the Personal Data Protection Law No. 6698 (KVKK), obtain the necessary consents, display the cookie notice on your publication, respond to reader applications, register commercial electronic message consents with the Message Management System (İYS) and safeguard the rights of news subjects. Gastte provides you with tools for these obligations (legal page fields on the reader site, cookie banner, unsubscribe link, subscriber export and deletion), but does not guarantee that the obligations are fulfilled.

3. What Data Do We Collect?

3.1 Directly from you: name, email, telephone, billing information, publication name, password (as a hash), artificial intelligence keys (encrypted), support correspondence.

3.2 Automatically: IP address, device and browser information, sign-in times, a log of actions performed in the panel, API calls, error logs, email open and click records, cookies.

3.3 From third parties: the transaction result from the payment institution; delivery status (delivered, bounced, complaint) from the email infrastructure; account identifiers and access tokens from the social networks and Google services you connect, within the scope you authorise.

4. How Do We Use the Data?

To provide and improve the Service; to verify and protect your account; to issue invoices and collect payments; to provide technical support; to send mandatory notifications; to prevent abuse and fraud; to comply with legal obligations. If you have given consent, to send campaign and product update announcements. Detailed list of purposes and legal bases: KVKK Privacy Notice, Art. 4 and Art. 5.

5. Artificial Intelligence and Privacy

5.1 The artificial intelligence features work with your own key. The content you have generated (source news text, instructions, images) goes directly to the provider through your own provider account and is subject to the provider's privacy terms. Most providers do not use data received via the API for model training; it is your responsibility to check your provider's current policy.

5.2 Gastte does not use the content of your artificial intelligence outputs for its own product development or for model training. Only counter and cost information (number of requests, number of tokens, estimated cost) is kept.

5.3 Your support requests are pre-reviewed by artificial intelligence only if you select this in the request form; if not selected, the request is reviewed only by our staff.

6. Sharing

We share your data only with providers that are essential for providing the Service (hosting, storage, email delivery, payment institution, e-invoice integrator, error monitoring) and, where legally required, with competent authorities. We enter into confidentiality and data processing agreements with all providers; providers process the data only on our instructions and for the specified purpose. The current list is in the annex to the Data Processing Agreement. For providers located abroad, the safeguards of KVKK Art. 9 apply.

7. Security

TLS in transit; passwords stored as irreversible hashes; artificial intelligence keys and social network tokens encrypted; tenant databases separated from one another; role-based access and two-factor authentication; activity logs; encrypted backups; staff working on the principle of least privilege. Absolute security cannot be guaranteed; in the event of a breach we will fulfil our statutory notification obligations and inform those affected.

8. Retention and Deletion

Account data is retained for the duration of the subscription; it is deleted or anonymised 30 days after account closure. Statutory periods such as 10 years for invoice and accounting records, 1–2 years for traffic logs and 3 years for commercial electronic message consents apply separately. Backups rotate over a maximum of 30 days. Detailed table: KVKK Privacy Notice, Art. 8.

9. Children

Gastte is not intended for persons under the age of 18; we do not knowingly collect data from children. If we become aware that a child has an account, we will close the account and delete the data.

10. Your Rights and Contact

You may exercise your rights under KVKK Art. 11 (to obtain information, rectification, erasure, objection, etc.) by writing to destek@gastte.com or to Yaka Mah. Aziz Mahmut Hüdai Cad. No:185/102 Meram / Konya. Applications are answered within 30 days at the latest. Details: KVKK Privacy Notice, Art. 10 and Art. 11.

11. Changes

This policy may be updated. The current version is published at gastte.com with its version number and effective date; material changes are announced by email or panel notification.