Personal Data Protection Notice

Pursuant to the Turkish Personal Data Protection Law No. 6698 ("KVKK"), Enjoyvent Etkinlik Biletleme ve Teknoloji A.Ş. ("Enjoyvent"), acting in its capacity as data controller, processes your personal data within the framework explained below.

1. Data Controller

Trade name: Enjoyvent Etkinlik Biletleme ve Teknoloji A.Ş.
Address: Yeşilce Mah. Destegül Sok. No: 1/1 D: 3 Kağıthane İstanbul 34245
Email: [email protected]
Web: enjoyvent.com

2. Categories of Personal Data Processed

Your personal data may be processed within the following categories:

a) Identity Information

• First name, last name
• Gender
• Date of birth

b) Contact Information

• Mobile phone number
• Email address

c) Location Information

• Province, district
• Latitude, longitude

(Location data is processed only with your explicit consent.)

d) Membership and Transaction Information

• Membership creation date
• Account information
• Tickets purchased
• Order and transaction history
• Refund/exchange records
• Session and login/logout information
• QR / ticket verification information

e) Financial Data

• Payment method
• Billing information
• Billing address
• Transaction amount
• Payment transaction reference numbers

(Note: Card information is stored by payment institutions; full card numbers are not retained on Enjoyvent's systems.)

f) Device and Usage Information

• IP address
• Browser information
• Device type
• Operating system
• Application version
• Log records
• Cookie data
• Browsing and usage activity

g) Marketing Data

• Areas of interest
• Preferred event categories
• Campaign participation information
• Referral / invitation information
• Commercial-message consent status
• Cookie and ad preference information

h) Request and Complaint Data

• Call-center records
• Support messages
• Request forms
• Complaint and feedback contents

Your personal data is processed in a manner that is connected to, limited to, and proportionate with the processing purpose.

3. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

• Creating membership and managing your account
• Carrying out ticket sales, refunds, and exchanges
• Executing payment transactions
• Sending event notifications
• Operating customer service processes
• Ensuring platform security and preventing misuse
• Fulfilling legal obligations
• Marketing, campaigns, and commercial electronic messages, where you have given explicit consent
• Improving the user experience and providing personalised content

4. Method and Legal Bases of Collection

Your personal data is collected electronically through automated means via:

• The website
• The mobile application
• The call center
• Email
• Cookies and similar digital technologies

Legal bases for processing:

• Establishment and performance of a contract (KVKK art. 5/2-c)
• Compliance with a legal obligation (art. 5/2-ç)
• Establishment, exercise, or protection of a right (art. 5/2-e)
• Legitimate interests (art. 5/2-f)
• Explicit consent (for commercial messages, location data, and similar cases)

5. Transfer of Personal Data

Your personal data may be transferred to:

• Event organisers (for the purpose of providing event participation)
• Payment institutions and banks
• Hosting and cloud service providers
• SMS and email service providers
• Business partners providing technical infrastructure and software services
• Public institutions and bodies legally authorised to receive such data

under Articles 8 and 9 of the KVKK, with the necessary technical and administrative security measures in place.

If you give explicit consent for commercial electronic messages, your contact information may be used in the relevant marketing processes.

6. Cross-Border Transfers

Where the technical infrastructure and service providers used are located abroad, your personal data may be transferred abroad in accordance with Article 9 of the KVKK, with the necessary security measures applied.

7. Your Rights Under the KVKK

Under Article 11 of the KVKK, you have the right to:

• Learn whether your personal data is being processed
• Request information if it has been processed
• Learn the purpose of processing
• Learn the third parties to whom it has been transferred
• Request correction if it has been processed incompletely or inaccurately
• Request deletion or destruction if the reasons for processing no longer exist
• Object to a result that arises against you due to analysis carried out exclusively by automated systems
• Request compensation if you suffer damages

8. How to Submit an Application

You may submit your requests regarding your rights:

• In writing
• Via a registered electronic address (KEP)
• Or, together with documents proving your identity, to [email protected]

in accordance with the Turkish Communiqué on Application Procedures and Principles under the KVKK.

Your applications will be addressed within 30 days at the latest.