📌 KEY LEGAL DEVELOPMENTS
The Competition Authority approved the transaction whereby Mubadala Investment Company PJSC indirectly took sole control over Getir Araç Dijital Ulaşım Çözümleri Ticaret A.Ş., Getir Teknolojik Hizmetler A.Ş., Getiriş Danışmanlık ve Ticaret A.Ş., and Getgo Teknoloji A.Ş.
The Competition Authority completed its preliminary investigation regarding Opet Petrolcülük A.Ş. The Authority found the findings sufficient and serious and decided to open a full investigation to determine whether the company violated Article 4 of the Law on the Protection of Competition.
The Competition Authority finalized its preliminary investigation on Fakir Elektrikli Ev Aletleri Dış Ticaret A.Ş., operating in the small household appliances sector, regarding whether the company restricted competition by determining resale prices and limiting online sales. The Authority decided to open an investigation into the company and related companies Teknosa İç ve Dış Tic. A.Ş., Vatan Bilgisayar San. ve Tic. A.Ş., and Media Markt Turkey Tic. Ltd. Şti.
The Competition Authority also completed its preliminary investigation on Arzum Elektrikli Ev Aletleri Sanayi ve Ticaret A.Ş., regarding similar resale price-fixing and internet sales restrictions in the small household appliances sector. The findings were considered sufficient and serious, and an investigation was opened.
The Competition Authority completed its preliminary investigation concerning Netflix, Inc., Los Gatos Turkey Yayın Hizmetleri A.Ş., Los Gatos Turkey Medya Eğlence Ltd. Şti., Los Gatos Turkey Yönetim Destek Hizmetleri Ltd. Şti., The Walt Disney Company Medya Eğlence ve Ticaret Ltd. Şti., Disney XD Televizyon Yayıncılık A.Ş., Exxen Dijital Yayıncılık A.Ş., BluTV İletişim ve Dijital Yayın Hizmetleri A.Ş., Amazon.com Sales, Inc., Amazon.com Services LLC, Amazon Seller Services Private Limited, Amazon Digital UK Limited, Amazon Turkey Perakende Hizmetleri Ltd. Şti., Amazon Turkey Video Dijital Yayıncılık A.Ş., and Gain Medya A.Ş. The findings were deemed sufficient and serious, and investigations were opened against these enterprises.
The Advertising Board completed its investigation into Galatasaray Sports Club and Adana Demirspor Club. The Board decided to impose a cease-and-desist penalty for illegal gambling advertisements published on the website “meritking.news,” citing Article 27 of the Regulation on Commercial Advertising and Unfair Commercial Practices.
The Central Bank Monetary Policy Committee convened to assess the impact of financial market developments on inflation outlook. The Committee increased the Central Bank overnight lending rate to 46% to support tight monetary policy, while keeping the policy rate at 42.5% and the overnight borrowing rate at 41%.
🔒 DATA BREACH NOTIFICATIONS
Below are summaries from two personal data breach notifications submitted to the Personal Data Protection Board:
➢ In the notification by Bilfen Education Institutions A.Ş., the breach occurred when XML files unintentionally left accessible via URL on the data controller’s system were accessed by attackers. The breach began on 12.03.2025 and was detected the same day via a message sent by cyber attackers to the data controller’s WhatsApp line. The affected data categories included identity, contact, transaction security, professional experience, visual and audio recordings, as well as special category personal data including health information. The number of individuals affected was 24,061, including students, parents, and employees. Affected persons can access breach announcements on the data controller’s website https://bilfen.com/tr and obtain detailed information via the email kvkk@bilfen.com.
➢ In the notification by Turknet İletişim Hizmetleri A.Ş., the breach occurred following an SQL Injection attack on one of the data controller’s services. The breach started on 26.02.2025 and was detected on 11.03.2025 through a publicly available complaint registered with BTK. The affected group comprises subscribers/members. The leaked personal data includes name, surname, phone number, subscription number, Turkish ID number, TurkNet subscription switch information, address, and static IP information. Initial log analysis indicated that data from 244,396 users was leaked. Detailed investigations are ongoing within the data controller’s organization. Affected individuals may obtain information by calling Turknet’s customer service lines at 0850 288 80 80 or 0850 344 28 18, or by postal mail at “Fulya, Büyükdere Cd. Torun Center No: 80 A Blok No: 74 A 34394 Şişli/İstanbul.
