Privacy Policy

Who we are

TOA Istanbul is organised by [Şirket unvanı / Legal entity name], registered at [Registered address], Istanbul, Türkiye ([Ticaret sicil no / Mersis no]). We are the data controller for the personal data described here.

For any question about this policy or your data, write to hi@toa.istanbul.

The data we collect

We only collect data you choose to give us, plus the technical data every website receives.

• Data you give us in a form: your name, business email, company, website, company size, estimated budget, role, areas of interest and anything you write in a free-text field — depending on which form you use (newsletter, contact, partnership enquiry, community application, satellite host application).
• Technical data: IP address, browser and device type, referring page, and the pages you visit, recorded in server logs for security and troubleshooting.
• Preferences stored in your browser: your language choice is kept in your browser’s local storage under the key "toa-lang". It never leaves your device and we cannot read it.

Why we use it, and on what legal basis

• To answer your enquiry and prepare a proposal — necessary for steps taken at your request before entering into a contract, and our legitimate interest in running the event.
• To send you programme, speaker and ticket announcements — only with your consent, given when you subscribe. You can withdraw it at any time.
• To assess partnership, community and satellite applications — our legitimate interest in building the programme.
• To keep the site secure and working — our legitimate interest in protecting our systems.
• To meet accounting, tax and other legal duties — compliance with a legal obligation.

Who we share it with

We do not sell your personal data and we do not share it for third-party advertising.

• Service providers acting on our instructions: website hosting, form and email delivery, and analytics. They may only process your data to provide the service to us.
• Event partners and sponsors: only where you have explicitly asked us to introduce you, or given separate consent at a partner activity.
• Authorities, where we are legally required to disclose data.

International transfers

Some of our providers operate outside Türkiye and the European Economic Area. Where data is transferred abroad, we rely on an adequacy decision, standard contractual clauses, or your explicit consent, and we take the additional measures required by applicable law.

How long we keep it

• Newsletter subscriptions: until you unsubscribe, and for a short period afterwards to record that you opted out.
• Enquiries and applications: for the duration of the conversation and up to three years afterwards, so we can pick the relationship back up for the next edition.
• Records we must keep by law (for example invoices): for the statutory retention period.
• Server logs: normally no longer than twelve months.

Cookies and similar technologies

The site does not use advertising or profiling cookies. We use strictly necessary storage to remember your language choice, and — where enabled — privacy-friendly analytics to understand which pages are read. If we later add cookies that are not strictly necessary, we will ask for your consent first.

Your rights

Depending on where you live, you have the right to:

• Ask what data we hold about you and get a copy of it.
• Have inaccurate data corrected and incomplete data completed.
• Ask us to delete your data, or to restrict how we use it.
• Object to processing based on our legitimate interests.
• Receive the data you gave us in a portable format.
• Withdraw consent at any time, without affecting processing that already happened.
• Complain to your data protection authority. In Türkiye this is the Personal Data Protection Authority (KVKK).

Security

We use encryption in transit, access controls and provider-side safeguards appropriate to the limited data we hold. No system is perfectly secure, so please do not send us sensitive personal data through the website forms.

Children's data

The site and the event are aimed at professionals. We do not knowingly collect data from anyone under 18. If you believe a child has given us data, write to us and we will delete it.

Changes to this policy

We may update this policy as the event and our tools change. The date at the top always shows the current version; material changes will be announced on this page.