PERSONAL DATA PROTECTION LAW (KVKK)

PERSONAL DATA PROTECTION LAW (KVKK)

CLARIFICATION TEXT

Within the Scope of the Personal Data Protection Law No. 6698

1. Data Controller

Pursuant to the Personal Data Protection Law No. 6698 (KVKK), your personal data is processed by the data controller specified below:

Trade Name: [Company Name]

Tax / ID No: [Tax No / ID No]

Address: [Company Address]

Phone: [Phone Number]

Email: [Email Address]

Website: https://ankarakediorganizasyon.com.tr

2. Personal Data Processed

The following personal data is collected through our website:

  1. First and last name
  2. Phone number
  3. Email address
  4. Event / reservation information (date, number of guests, event type, special notes, etc.)
3. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

  1. Receiving and evaluating event and organization requests
  2. Preparing proposals and managing reservation processes
  3. Ensuring customer communication before and after the service
  4. Fulfilling legal obligations
  5. Sending commercial electronic messages (provided your explicit consent is obtained)
4. Legal Grounds for Processing Personal Data

Your personal data is processed based on the following legal grounds under Article 5 of the KVKK:

  1. Being directly related to the establishment or performance of a contract (Art. 5/2-c)
  2. Protection of the legitimate interests of the data controller (Art. 5/2-f)
  3. Fulfillment of legal obligations (Art. 5/2-ç)
  4. Existence of your explicit consent (only for commercial electronic messages) (Art. 5/1)
5. Transfer of Personal Data

Your personal data may be shared with the following parties for the purpose of service delivery and within the framework of legal obligations:

  1. Authorized public institutions and organizations (in cases of legal necessity)
  2. Technical infrastructure and hosting service providers (Hostinger International Ltd. – server hosting)
  3. Analytical service providers (Google LLC – Google Analytics, international transfer)
  4. Security service providers (Intuition Machines, Inc. – hCaptcha, international transfer)

International transfers are carried out within the framework of Article 9 of the KVKK and the decisions of the Personal Data Protection Board.

6. Retention Period of Personal Data

Your personal data is retained for as long as required by the purpose of processing; upon expiration of this period, it is deleted, destroyed, or anonymized within the scope of the KVKK and relevant legislation.

  1. Contact and reservation information: 3 years from the end of the service relationship
  2. Commercial records and invoices: 5 years as required by tax legislation
7. Your Rights as a Data Subject

Pursuant to Article 11 of the KVKK, you have the following rights regarding your personal data:

  1. To learn whether your personal data is being processed
  2. To request information if it has been processed
  3. To learn the purpose of processing and whether it is used in accordance with its purpose
  4. To learn the third parties to whom it has been transferred domestically or abroad
  5. To request correction if it has been processed incompletely or incorrectly
  6. To request deletion or destruction within the framework of the conditions set out in Article 7 of the KVKK
  7. To request that correction, deletion, or destruction be notified to third parties
  8. To object to the emergence of a result against you through the analysis of processed data exclusively by automated systems
  9. To request compensation for damages in the event you suffer a loss due to unlawful processing
8. How Can You Exercise Your Rights?

To exercise the rights specified above, you may contact us through the following channels:

Email: [Email Address]

Postal Address: [Company Address]

Your application must include your first name, last name, Turkish ID number (or nationality and passport number if you are a foreign national), your residential or business address for notification purposes, your email address for notification, your phone number, and the subject of your request.

Your applications will be concluded within at most 30 (thirty) days following verification of your identity. Your right to file a complaint with the Personal Data Protection Board is reserved in the event your application is rejected, the response provided is deemed insufficient, or no response is given within the specified period.

9. Changes

This Clarification Text may be updated in line with legal regulations or changes in our services. The effective date of the current text is stated below.

Last Updated: 01.01.2025