Privacy Policy

Information/Disclosure Statement Regarding Your Personal Data

General Explanation Regarding Our Personal Data Policy

This document is being disclosed by the Izmir Culture, Arts and Education Foundation (İKSEV) in its capacity as Data Controller under the Personal Data Protection Law No. 6698 (“KVKK”) to fulfill the disclosure obligation arising from Article 10 of the KVKK, and is presented for the information and review of Users/visitors. This document contains the personal data policies that need to be known by all users who will use the website, as well as members on the electronic communication list, audiences, ticket purchasers, those who benefit from İKSEV events, and persons who share their personal data through methods such as providing business cards, resumes (CVs), etc. for purposes such as establishing a relationship with İKSEV or making a job application – in short, anyone who has shared their personal data with İKSEV in a physical or virtual environment, face-to-face or remotely, orally, in writing, or electronically by any means whatsoever, has directly provided it, or has enabled İKSEV to obtain it (all of whom will hereinafter be referred to collectively as “User”). It includes information about cookies; provides information about the data controller in accordance with Article 10 of the KVKK, clarifies for what purpose personal data will be processed, to whom and for what purpose processed personal data may be transferred, the method and legal basis of personal data collection, and enlightens the personal data owner about the rights of the personal data owner under Article 11 of the KVKK.

İKSEV pays attention and takes care to respect the privacy of Users who visit its websites and use its applications, and to ensure the security of their personal data.

Users who share personal data or whose personal data is obtained may give permission electronically or physically at the stages of obtaining personal data, within the scope provided by legal regulations, for the processing, transfer, and sharing of their personal data in terms of the protection, processing, and domestic or international transfer of personal data; unless this permission is obtained, your personal data will not be obtained, processed, or transferred domestically or internationally. However, as explained separately below, our rights arising from legal regulations regarding personal data obtained before the effective date of the KVKK are reserved.

In the case of personal data collected through cookies, the User’s permission will likewise be requested.

It should be noted that if your appropriate explicit consent is not given regarding personal data, for technical reasons, some features on the website will be unusable, the service will slow down, or it may be partially or completely unavailable.

Your Personal Data Obtained Before the KVKK Came into Force

Your personal data obtained lawfully before the effective date of the KVKK, which is April 7, 2016, including membership relationships, electronic communication permissions, event participation, ticket purchases, and other forms, is being processed and maintained in accordance with the terms and conditions set forth in this “Information/Disclosure Statement Regarding Your Personal Data” and may be transferred abroad – to countries with adequate protection regarding the protection of personal data and/or for countries without adequate protection, in compliance with the conditions specified in the KVKK – by being processed in Turkey or processed and stored outside Turkey.

Data Controller/Representative

İKSEV (Izmir Culture, Arts and Education Foundation) is the Data Controller under the KVKK.

The Data Controller representative to be appointed by İKSEV will be announced in the Data Controllers Registry when the legal infrastructure is provided.

Method and Legal Basis of Personal Data Collection

Pursuant to Articles 5/1, 6/2, and 8/1 of the Personal Data Protection Law No. 6698, it is necessary to obtain the User’s explicit consent based on information enlightened in accordance with legal regulations regarding the processing of personal data and special category personal data and the transfer of personal data.

Personal data can be collected orally, in writing, or electronically in a physical or virtual environment from persons who have shared their personal data with İKSEV (and with Biletix in case of purchase through Biletix for İKSEV events) through the following methods, including but not limited to: information provided on websites belonging to İKSEV, e-newsletter membership, filled forms, emails, social media (Facebook, Twitter, Instagram, etc.) sharing, electronic communication consents, persons registered in İKSEV’s database (CRM system), audiences, ticket purchasers, those who benefit from İKSEV events, persons who share their personal data through methods such as business cards, CVs, etc. for purposes such as establishing a relationship with İKSEV or making a job application, and in any way, face-to-face or remotely, with İKSEV or with İKSEV’s business partners in a manner that can be shared with İKSEV.

This personal data is directly provided by the User in a physical or virtual environment by any method:

  • Name and surname
  • Telephone numbers (home and work), address, email addresses, fax and other contact information
  • Gender
  • Date of birth
  • Education level
  • Relationship status/marital status
  • Interests/satisfaction, complaints
  • Social media preferences
  • Likes and preferences
  • Event participation or ticket purchase behaviors and habits
  • Payment information
  • Educational and work experience history/resume information/career goals
  • Job title/profession/workplace
  • Photographs constituting general meeting and event visuals to the extent permitted by legal regulations

Additionally, personal data may also be collected through other channels/indirect means: application usage information belonging to the User, data obtained during logins made through websites, blogs, applications, etc., data obtained from (micro) websites belonging to İKSEV or third parties used for purposes such as competitions, surveys, games, campaigns, etc., e-newsletter reading/clicking actions, preferences in channels logged in using membership username and password, data including executed transactions and browsing duration and details, location data, data provided by public information banks, profile and data open to sharing on the social media accounts of the User and their friends when the User connects to the website or applications through social media platforms (e.g., social sharing sites such as Facebook, Google Plus, Spotify, Instagram), browsing/traffic information on websites and applications.

Additionally, your personal data is kept to fulfill legal requirements in other situations required or mandated by legal legislation.

Purposes of Processing Personal Data

The User’s personal data may be processed for:

  • Providing opportunities such as membership, invitations, benefiting from events, and performing all kinds of operations necessary to make them available to the User
  • Making notifications about the services and content to be provided
  • Evaluating personal data and information in statistical studies without revealing identity to improve services
  • Determining the User’s preferences and needs and shaping and updating the services to be provided to the User within this scope
  • Introducing the User to İKSEV’s business/solution partners
  • Informing about content, opportunities, and innovations related to İKSEV, its sponsors/supporters, and its events
  • Providing information to the User about the information, events, and services they request
  • Evaluating complaints and applications that the User may make
  • Recommending new events and services that may interest the User according to their preferences
  • Providing personalized services to the User
  • Reminding the User, at their preference, of content and opportunities they like, may want to access again, and would be pleased to be reminded of
  • Conducting research on user profiles, interests, and behaviors based on information provided by the User, generating anonymous, aggregate, and statistical information, and improving İKSEV’s content by combining this information with other members’ information, such as specific age groups, female-male visitor percentages
  • Developing content and opportunities specific to profiles to be created by conducting research on user profiles, interests, and behaviors based on the information provided
  • Processing the User’s personal data, preferences, transactions, and browsing duration and details in channels logged in using their username and password, together with other data obtained
  • Determining the User’s qualifications for participating in İKSEV events, competitions, etc., and encouraging their participation
  • Redesigning and configuring the services provided to appeal to the User’s interests
  • Conducting analysis and audits to increase the quality of services provided and develop new services
  • Managing applications
  • Identifying identity through matching with other data belonging to the User obtained from other channels explained in the “Method and Legal Basis of Personal Data Collection” section above, and using the data in line with the purpose of obtaining them
  • Transferring data for storage
  • Copying/backing up to prevent data loss
  • Notifying the User about events owned by or supported by İKSEV or that it wants to announce, sending electronic communications
  • Sending electronic communications in accordance with legal legislation with additional consent
  • Making notifications to website members about their memberships (renewal, expiration, etc.), communicating with the User in every way possible, new services and products to be offered, and notifying changes, innovations, etc. that may occur in personal data policies and membership terms
  • Making job offers again to persons who apply for jobs at İKSEV if a suitable position becomes available, storing their resumes and interview and reference investigation notes made during the job application evaluation process; making job offers again to persons who have previously worked at İKSEV if a suitable position becomes available, storing their resumes and interview and reference investigation notes made during the job application evaluation process, providing productivity and performance references to new employers upon request
  • For other purposes to be notified to the User at the time of obtaining the information
  • To ensure compliance with legal obligations in the manner required or mandated by legal regulations
  • And in other ways specified in the KVKK.

Sharing/Transfer of Personal Data

İKSEV may share and transfer personal data with intermediary service providers, software or ticketing service companies, data processing and storage companies, and real or legal persons and consultants from whom services are obtained with security ensured through confidentiality agreements, including business/solution partners mainly shown in the link, for purposes such as fulfilling the processing purposes explained above, sending electronic communications, processing data, storing, and protecting, sending e-communications and/or SMS, in accordance with legal limits and to the extent of the requirement and purpose of the relevant transaction.

As stated above, personal data may be transferred within Turkey, as well as abroad (to countries with adequate protection regarding the protection of personal data and/or for countries without adequate protection, in compliance with the conditions specified in the KVKK) for processing in Turkey or processing and storing outside Turkey.

Additionally, personal data may be shared with public institutions or organizations authorized to request and receive this data due to a legal requirement.

Protection of Personal Data

The User’s personal data will be kept confidential in the database at İKSEV in accordance with Article 12 of the KVKK; it will not be shared with third parties contrary to legal, contractual, and regulations specified in this document and for purposes not specified herein.

İKSEV takes appropriate necessary measures such as hashing, encryption, transaction logging, access management, and physical security measures to prevent unlawful processing of personal data, prevent unlawful access, and ensure their preservation in accordance with Article 12 of the KVKK, and prevents the unlawful processing of personal data by third parties. In case personal data is obtained by others through illegal means, the notification specified in Article 12 of the KVKK will be made by İKSEV in accordance with legal regulations.

Deletion, Destruction, or Anonymization of Personal Data

Personal data will be stored at the upper limits of the periods regulated by relevant legal legislation for their retention. Without prejudice to retention or deletion requirements for legal obligations, personal data will be deleted or anonymized and continue to be used when the purpose requiring their processing according to Article 7/f.1 of the KVKK disappears and according to Article 138 of the Turkish Penal Code when the periods determined by laws pass.

Providing Personal Data Accurately and Up-to-Date

The accuracy of the information/data shared by the User and its maintenance in an up-to-date manner is important in terms of being able to exercise the rights they have over their personal data in the sense of the KVKK and other relevant legislation, and the User will be solely responsible for any consequences arising from providing incorrect information.

Your Rights Regarding Your Personal Data

Pursuant to Article 11 of the KVKK, the User has the right to apply to İKSEV (to the representative to be announced by İKSEV and announced in the Data Controllers Registry when the legal infrastructure is provided) regarding their personal data to:

a) Learn whether it has been processed, b) Request information if it has been processed, c) Learn the purpose of processing and whether they are used in accordance with their purpose, ç) Know the third parties to whom they are transferred domestically or abroad, d) Request correction if processed incompletely or incorrectly, e) Request deletion/destruction within the framework of the conditions stipulated in Article 7 of the KVKK, f) Request notification of the operations performed pursuant to paragraphs (d) and (e) above to third parties to whom personal data has been transferred, g) Object to the emergence of a result against themselves through analysis of processed data exclusively by automated systems, ğ) Request compensation for damages in case of suffering damage due to unlawful processing of personal data.

You can always contact us by emailing info@iksev.org to exercise your rights under Article 11 of the KVKK regarding your personal data.

Legal Regulation References

References made to the KVKK, TCK, and other legal regulations in this document shall be deemed to have been made to the new mandatory regulation texts in case of a mandatory change in these legal regulations, and will continue to be valid and applied as changed in accordance with legal regulations.

Other Sites/Third Parties and Their Privacy Policies

İKSEV is not responsible for the privacy and personal data policy practices or contents of other websites linked from this website, or for the privacy and personal data policies and practices of third parties. We strongly recommend that you review the privacy and personal data policies of the relevant third party in this regard.

Notifications and Revisions

Our website is in a constant state of change and development to provide better service. Therefore, this “Information/Disclosure Statement Regarding Your Personal Data” will also change depending on technological and legal developments. We recommend that you visit our website to see the latest changes.