This policy explains the retention and destruction principles for personal data processed by İlter Medya Ticaret Limited Şirketi (“İlter Medya”), under Article 7 of the KVKK and the Regulation on the Deletion, Destruction or Anonymization of Personal Data.
1. Principle
Personal data is kept for the period necessary for the purpose for which it is processed or provided by the relevant legislation. When the period expires or the purpose of processing ceases, the data is deleted, destroyed or anonymized.
2. Retention periods
| Data | Retention period |
|---|---|
| Membership and contact details | During membership; after it ends, for the period needed for statutory retention obligations and possible disputes |
| Order, agreement, invoice and payment reference records | For the period required by tax and commercial legislation (for commercial books and documents, the periods in the Turkish Commercial Code and the Tax Procedure Law) |
| Distance sales agreement and pre-contract information records | For the period provided by consumer legislation |
| Access and activity logs | For the period provided by Law No. 5651 and related legislation; for other records kept for security, the short period the purpose requires |
| Identity verification documents | Deleted after the short period set in the administration settings once verification is complete (30 days by default); only the verification result is kept |
| Support tickets and contact form messages | After the request is closed, for the period needed for possible disputes |
| Commercial electronic message consent and refusal records | While the consent is valid and for the period needed to prove it |
| Cookie data | The periods stated in the Cookie Policy |
3. Destruction methods
- Deletion: Data is deleted from the relevant databases and systems so that the relevant users cannot access it again.
- Destruction: Data is destroyed on storage media so that it cannot be reused or restored; copies in backups are destroyed within the backup cycle.
- Anonymization: Data is rendered impossible to associate with a natural person, even when matched with other data.
4. Periodic destruction
Data whose retention period has expired is deleted, destroyed or anonymized through periodic destruction carried out at intervals not exceeding six months. Deletions made at the data subject’s request are concluded separately and within the period in Article 13 of the KVKK.
5. Your rights
You can send requests for deletion, destruction or anonymization to bilgi@iltermedya.com by the methods stated in the KVKK Privacy Notice. Data that is still subject to a statutory retention obligation cannot be deleted before that period ends; in that case your request is answered with reasons. Last updated: 8 November 2026.