KVKK Information Notice

Data controller

[Şirket unvanı / Legal entity name], registered at [Registered address], Istanbul, Türkiye ([Ticaret sicil no / Mersis no], VERBIS: [VERBIS registration no]), acts as the data controller for the TOA Istanbul event and website.

Categories of personal data processed

• Identity data: name and surname.
• Contact data: business email, phone number if you give one, company website.
• Professional data: company, role, company size, budget range, areas of interest.
• Transaction security data: IP address, browser and device information, log records.
• Marketing data: newsletter subscription status and communication permissions.

Purposes of processing

• Carrying out the organisation and communication of the event.
• Answering your enquiries and preparing partnership proposals.
• Assessing partnership, community and satellite host applications.
• Sending commercial electronic messages where you have given permission.
• Ensuring the security of our website and information systems.
• Fulfilling our obligations arising from legislation.

Legal grounds

• Article 5/2(c): processing is necessary for the establishment or performance of a contract.
• Article 5/2(ç): processing is necessary for compliance with our legal obligations.
• Article 5/2(f): processing is necessary for our legitimate interests, provided your fundamental rights are not harmed.
• Article 5/1: your explicit consent — for newsletter and other commercial electronic messages, and for any transfer abroad that requires it.

Method of collection

Personal data is collected by electronic means: the forms on toa.istanbul, emails you send us, ticketing and registration systems, and our social media accounts.

Transfer of personal data

Your data may be shared with our service providers (hosting, email delivery, ticketing, analytics), with event partners where you have consented, and with authorised public institutions where legally required, in line with Articles 8 and 9 of the KVKK.

Where a provider is located abroad, the transfer is based on an adequacy decision, an undertaking or standard contract notified to the Board, or your explicit consent.

Your rights under Article 11

As a data subject you may:

• Learn whether your personal data is processed.
• Request information about it if it has been processed.
• Learn the purpose of processing and whether the data is used accordingly.
• Know the third parties to whom the data is transferred, in Türkiye or abroad.
• Request correction of incomplete or inaccurate data.
• Request erasure or destruction under the conditions of Article 7.
• Request that corrections and erasures be notified to third parties to whom the data was transferred.
• Object to a result arising solely from automated analysis of the data.
• Claim compensation for damage arising from unlawful processing.

How to exercise your rights

You may submit your request in writing to [Registered address], Istanbul, Türkiye, or by email to hi@toa.istanbul from an address registered in our system, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Please state your identity details and the subject of your request clearly.

We conclude requests free of charge within thirty days at the latest. Where the process incurs a cost, the tariff set by the Board may be charged.

Commercial electronic messages

Newsletters and event announcements are sent only with your prior permission under Law No. 6563, and permissions are recorded in the Message Management System (IYS). You may opt out at any time using the link in the message or by writing to us.