Data Controller: İBilet Bilet Dağıtım ve Basım Tic. A.Ş
As iTicket, we show the utmost sensitivity to the matter of the security of your personal data. With this awareness in mind, we attribute great importance to the processing and retaining of all kinds of personal data which belong to all persons associated with us, including those who utilize our products and services, pursuant to The Law on the Protection of Personal Data numbered 6698 (“LPPD”). With the full comprehension of our abovementioned responsibility and acting as the “Data Controller” as defined under the LPPD, your personal data are processed as described below and within the limits ordered by the legislation, thus the noticeherein has been prepared in order to fulfil the disclosure obligation as per the Article 10 of the LPPD.
The Purpose and The Scope
As iBilet Bilet Dağıtım ve Basım Tic. A.Ş. (“iTicket” or “The Firm”), it is our priority to ensure the processing of the personal data of the consumers who purchase products or receive services, people who register on and visit our website online, our business partners, representatives and personnel of the business partners, our suppliers, representatives and personnel of the suppliers, agencies and personnel of the agency, in accordance with the applicable legislation, particularly pursuant to the Constitution of the Republic of Turkey and the LPPD and fulfilling our obligation to inform the data subjects whose their data are processed and the effective use of their rights.
The protection of personal data and the supervision of the fundamental rights and freedoms of natural persons whose personal data are collected are the basic principles of our policy regarding the processing of personal data. Therefore, iTicket carries out all its activities in which personal data are processed, by taking all necessary administrative and infrastructural measures in today's technology for the protection of personal data and by paying regard to the right to privacy, the confidentiality of communication, the freedom of thought and belief and the rights to use effective legal remedies.
This notice which is drafted taking the provisions of the LPPD and secondary local legislation regarding personal data, Convention 108 for the Protection of Individuals with regard to Automatic Processing of Personal Data, The EU General Data Protection Regulation (GDPR) and other international standards in this field into account, is applied to all kinds of personal data which belong to the consumers who purchase products or receive services, people who register on and visit our website online, our business partners, representatives and personnel of the business partners, our suppliers, representatives and personnel of the suppliers, agencies and personnel of the agency (“Data Subject(s)”) that are subjected to activity of processing of personal data by iTicket.
Which and for What Purposes of Your Personal Data are Processed?
Personal data of the Data Subjects stated below are processed for the purposes of planning and managing The Firm's activities, carrying out membership procedures, resolving consumer problems and complaints, promoting activities and services in line with the preferences and likings of the consumer, carrying out studies that will increase the satisfaction, loyalty and commitment of the consumer, analysing the likings and needs of the customer and developing personalized promotions, opportunities or campaigns, planning and managing advertising, promotion and other related activities within The Firm, planning and carrying out national and international events on solidarity and awareness, offering suggestions to consumers by contracted institutions and solution partners, conducting studies for inform customers about our services, for the purpose of performing the service offered to the consumers to whom we sell tickets (according to Distance Sales Contract), preparing a ticket report and fulfilling our other legal obligations, ensuring compliance with the legislation, planning and managing employment needs, managing relations with the suppliers and other third parties, monitoring and preventing illegal and unauthorized transactions, planning and executing risk management and quality improvement works, managing all kinds of request and complaint processes regarding our activities, providing necessary information in accordance with the inspections of official authorities and regulatory and supervisory institutions, monitoring of accounting and sales transactions, planning and executing corporate communication activities and execution/follow-up of transactions within The Firm regarding corporate and partnership law and other legal affairs:
|
1.1 Transaction Security Information |
|
|
Personal Data Processed |
The Purposes for Processing of Personal Data |
|
● Website traffic information (Connection duration and time, pages visited etc.) ● Internet Protocol (IP) addresses and log records ● Pixel labels ● Cookie information (please see iTicket Cookie Policy) ● Information submitted during the event ticket search ● Port information ● Device MAC Address |
● Execution/Supervision of its activities, Carrying out the activities in compliance with the legislation, ● Execution of Information Security Processes ● Execution of Consumer Relations Management Processes ● Execution of Activities for Consumer Needs and Satisfaction (such as speeding up the transactions on the website) ● Organization and Event Management ● Execution of Marketing Analysis Studies ● Execution of Advertising / Campaign / Promotion Processes ● Ensuring the Security of Data Controller Operations ● Providing Information to the Authorized Persons, Institutions and Organizations ● Provision and Delivery of Branded Services, Determination of the Effectiveness of Promotion and Advertising Campaigns |
|
Legal Grounds for Processing of Personal Data |
In order to achieve the above mentioned purposes, your personal data are processed by iTicket based on the legal causes stipulated by Article 5 of the LPPD as described below: ● Being expressly permitted by the law (such as the Law no. 5651) ● Based on our legitimate interests, ● Processing of personal data belonging to the parties of a contract is necessary provided that it is directly related to the conclusion or fulfillment of that contract. |
|
The Method of Collection of Personal Data |
Your personal data mentioned above are automatically collected via; ● Electronic forms from our websites, the mobile application, social media accounts, ● HTML-formatted tools and our website. |
|
2.1 Transaction Security Information |
|
|
Personal Data Processed |
The Purposes for Processing of Personal Data |
|
● Website traffic information (Connection duration and time, pages visited etc.) ● Internet Protocol (IP) addresses and log records ● Pixel labels ● Cookie information (please see iTicket Cookie Policy) ● Information submitted during the event ticket search ● Port information ● Device MAC Address ● Username and password |
● Execution/Supervision of its activities, Carrying out the activities in compliance with the legislation, ● Execution of Information Security Processes ● Execution of Consumer Relations Management Processes ● Execution of Activities for Consumer Needs and Satisfaction (such as speeding up the transactions on the website) ● Organization and Event Management ● Execution of Marketing Analysis Studies ● Execution of Advertising / Campaign / Promotion Processes ● Ensuring the Security of Data Controller Operations ● Providing Information to the Authorized Persons, Institutions and Organizations ● Provision and Delivery of Branded Services, Determination of the Effectiveness of Promotion and Advertising Campaigns |
|
Legal Grounds for Processing of Personal Data |
In order to achieve the above mentioned purposes, your personal data are processed by iTicket based on the legal causes stipulated by Article 5 of the LPPD as described below: ● Being expressly permitted by the law (such as the Law no. 5651) ● Based on our legitimate interests, ● Processing of personal data belonging to the parties of a contract is necessary provided that it is directly related to the conclusion or fulfillment of that contract. |
|
The Method of Collection of Personal Data |
Your personal data mentioned above are automatically collected via; ● Electronic forms from our websites, the mobile application, social media accounts, ● HTML-formatted tools and our website. |
|
2.2 Identifying Information |
|
|
Personal Data Processed |
The Purposes for Processing of Personal Data (with respect to distance sales contract to be concluded) |
|
● Name-surname ● Date of birth ● Republic of Turkey ID Number ● Gender ● City Information |
● Execution of Emergency Management Processes ● Execution/Supervision of its activities, Carrying out the Activities in Compliance with the Legislation, ● Execution of the Production of Goods / Services, Operation and Sales Processes ● Execution of Storage and Archive Activities ● Execution of Marketing Analysis Studies ● Execution of Consumer Relations Management Processes ● Execution of Activities for Customer Satisfaction ● Organization and Event Management ● Execution of Advertising / Campaign / Promotion Processes ● Providing Information to the Authorized Persons, Institutions and Organizations ● Execution of Finance and Accounting Affairs ● Providing Information to the Authorized Persons, Institutions and Organizations |
|
Legal Grounds for Processing of Personal Data |
In order to achieve the abovementioned purposes, your personal data are processed by iTicket based primarily on the legal causes stipulated by Article 5 of the LPPD as described below: ● Being expressly permitted by the law (such as the Law no. 5651, Regulation on Service Providers and Intermediary Service Providers in Electronic Communication, Regulation on Commercial Communications and Commercial Electronic Messages.) ● It is necessary for compliance with a legal obligation which the data controller is subject to ● Processing of personal data belonging to the parties of a contract is necessary provided that it is directly related to the conclusion or fulfillment of that contract. |
|
The Method of Collection of Personal Data |
Your personal data mentioned above are collected through; ● Printed and electronic forms, ● The documents declared by the consumer, ● Social media platforms. |
|
2.3 Contact Information |
|
|
Personal Data Processed |
The Purposes for Processing of Personal Data (with respect to distance sales contract to be concluded and the provisions of the Regulation on Commercial Communications and Commercial Electronic Messages) |
|
● Address information ● E-mail address ● Mobile phone number ● Social media contact information |
● Execution/Supervision of its activities, Carrying out the Activities in Compliance with the Legislation, ● Execution of Finance and Accounting Affairs ● Execution of the Production of Goods / Services, Operation and Sales Processes ● With the Purposes of Execution of Storage and Archive Activities ● Execution of Marketing Analysis Studies ● Execution of Consumer Relations Management Processes ● Execution of Activities for Customer Satisfaction ● Organization and Event Management ● Execution of Communication Advertising / Campaign / Promotion Processes ● Providing Information to the Authorized Persons, Institutions and Organizations |
|
Legal Grounds for Processing of Personal Data |
In order to achieve the abovementioned purposes, your personal data are processed by iTicket based primarily on the legal causes stipulated by Article 5 of the LPPD as described below: ● Being expressly permitted by the law, ● It is necessary for compliance with a legal obligation which the data controller is subject to ● Processing of personal data belonging to the parties of a contract is necessary provided that it is directly related to the conclusion or fulfillment of that contract. |
|
The Method of Collection of Personal Data |
Your personal data mentioned above are collected through; ● Printed and electronic forms, ● The documents declared by the consumer, ● Social media platforms. |
|
2.4Financial Information |
|
|
Personal Data Processed |
The Purposes for Processing of Personal Data (with respect to distance sales contract to be concluded) |
|
● Credit card and bank name information ● Credit card expiry and security number information ● Bank account number and IBAN information ● Bank account balance information ● Tax identification number and tax office name ● Proof of payment ● Receipt ● Billing information |
● Execution/Supervision of its activities, Carrying out the Activities in Compliance with the Legislation, ● Execution of Finance and Accounting Affairs ● Execution of the Production of Goods / Services, Operation and Sales Processes ● Execution of Audit Activities ● Follow-up and Execution of Legal Affairs ● Execution of Contractual Processes with the Consumer ● Execution of Storage and Archive Activities ● Fulfilment of Legal Obligations ● Providing Information to the Authorized Persons, Institutions and Organizations |
|
Legal Grounds for Processing of Personal Data |
In order to achieve the abovementioned purposes, your personal data are processed by iTicket based primarily on the legal causes stipulated by Article 5 of the LPPD as described below: ● Being expressly permitted by the law, ● It is necessary for compliance with a legal obligation which the data controller is subject to ● Processing of personal data belonging to the parties of a contract is necessary provided that it is directly related to the conclusion or fulfillment of that contract. |
|
The Method of Collection of Personal Data |
Your personal data mentioned above are collected through; ● Printed and electronic forms, ● The documents declared by the consumer. |
Special Categories of Personal Data
|
Health Information |
|
|
Personal Data Processed |
The Purposes for Processing of Personal Data |
|
● Information regarding the status of disability, ● Blood type information, ● Used device and prosthesis information ● Information regarding continuously used medication ● HES Code ● Covid-19 vaccination and PCR test information |
● Execution of Emergency Management Processes ● Execution of the Activities in Compliance with the Legislation ● Follow-up of Requests / Complaints ● Execution of Price Policy ● Providing Information to the Authorized Persons, Institutions and Organizations ● Execution of Storage and Archive Activities ● Fulfillment of Legal Obligations ● Execution of Contractual Processes with the Consumer |
|
Legal Grounds for Processing of Personal Data |
In order to achieve the abovementioned purposes, your personal data are processed by iTicket, for the purpose of “protection of public health” as stipulated by Article 6/Paragraph 3 of the LPPD and through obtaining your explicit consent as per Article 6 of the LPPD as a result of the legal obligations laid out by statutory or authorized public enterprises. |
|
The Method of Collection of Personal Data |
Your personal data mentioned above are collected through; ● Printed and electronic forms, ● The documents declared by the consumer. |
|
3.1 Identifying Information |
|
|
Personal Data Processed |
The Purposes for Processing of Personal Data |
|
● Name - Surname ● Date of birth ● Republic of Turkey ID Number |
● Execution of Other-Employee Health, Occupational Health and Safety Activities ● Execution/Supervision of work activities, Carrying out the Activities in Compliance with the Legislation ● Execution of Finance and Accounting Affairs ● Planning of Human Resources Processes ● Execution of the Production of Goods / Services, Operation and Sales Processes ● Execution of Consumer Relations Management Processes ● Execution of Activities for Customer Satisfaction ● Organization and Event Management ● Execution of Marketing Analysis Studies ● Execution of Advertising / Campaign / Promotion Processes ● Execution of Storage and Archive Activities ● Providing Information to the Authorized Persons, Institutions and Organizations ● Execution of Management Activities |
|
Legal Grounds for Processing of Personal Data |
In order to achieve the above mentioned purposes, your personal data are processed by iTicket based primarily on the legal causes stipulated by Article 5 of the LPPD as described below: ● Being expressly permitted by the law, ● It is necessary for compliance with a legal obligation which the data controller is subject to, ● ● Processing of personal data belonging to the parties of a contract is necessary provided that it is directly related to the conclusion or fulfillment of that contract. |
|
The Method of Collection of Personal Data |
Your personal data mentioned above are collected through; ● Printed and electronic forms, ● The documents declared by the consumer. |
|
3.2 Contact Information |
|
|
Personal Data Processed |
The Purposes for Processing of Personal Data |
|
● Address information ● Business and dispatch address information ● Electronic notification and registered electronic mail address (KEP) information ● E-mail address ● Mobile phone number |
● Execution of Other-Employee Health, Occupational Health and Safety Activities ● Execution/Supervision of work activities, Carrying out the Activities in Compliance with the Legislation ● Execution of Finance and Accounting Affairs ● Planning of Human Resources Processes ● Execution of the Production of Goods / Services, Operation and Sales Processes ● Execution of Consumer Relations Management Processes ● Execution of Activities for Customer Satisfaction ● Organization and Event Management ● Execution of Marketing Analysis Studies ● Execution of Advertising / Campaign / Promotion Processes ● Execution of Storage and Archive Activities ● Providing Information to the Authorized Persons, Institutions and Organizations ● Execution of Management Activities |
|
Legal Grounds for Processing of Personal Data |
In order to achieve the above mentioned purposes, your personal data are processed by iTicket based primarily on the legal causes stipulated by Article 5 of the LPPD as described below: ● Being expressly permitted by the law, ● It is necessary for compliance with a legal obligation which the data controller is subject to ● Processing of personal data belonging to the parties of a contract is necessary provided that it is directly related to the conclusion or fulfillment of that contract. |
|
The Method of Collection of Personal Data |
Your personal data mentioned above are collected through; ● Printed and electronic forms, ● The documents declared by the consumer. |
|
3.3Financial Information |
|
|
Personal Data Processed |
The Purposes for Processing of Personal Data |
|
● Bank account number and IBAN information ● Tax identification number and tax office name ● Proof of payment ● Receipt ● Billing information |
● Execution/Supervision of work activities, Carrying out the Activities in Compliance with the Legislation ● Execution of Finance and Accounting Affairs ● Execution of the Production of Goods / Services, Operation and Sales Processes ● Organization and Event Management ● Execution of Storage and Archive Activities ● Fulfillment of Legal Obligations ● Providing Information to the Authorized Persons, Institutions and Organizations |
|
Legal Grounds for Processing of Personal Data |
In order to achieve the abovementioned purposes, your personal data are processed by iTicket based primarily on the legal causes stipulated by Article 5 of the LPPD as described below: ● Being expressly permitted by the law, ● It is necessary for compliance with a legal obligation which the data controller is subject to ● Processing of personal data belonging to the parties of a contract is necessary provided that it is directly related to the conclusion or fulfillment of that contract. |
|
The Method of Collection of Personal Data |
Your personal data mentioned above are collected through; ● Printed and electronic forms, ● The documents declared by the consumer. |
|
3.4 Legal Transactions Information |
|
|
Personal Data Processed |
The Purposes for Processing of Personal Data |
|
● Signature ● Signature circular ● Certificate of good standing ● Information relating to special agents and merchant assistants |
● Execution/Supervision of work activities, Carrying out the Activities in Compliance with the Legislation ● Execution of the Production of Goods / Services, Operation and Sales Processes ● Organization and Event Management ● Execution of Storage and Archive Activities ● Fulfilment of Obligations Arising from the Legislation and Carrying out the Activities in Compliance with the Legislation ● Execution of Finance and Accounting Affairs ● Ensuring the Security of Movable Property and Resources ● Providing Information to the Authorized Persons, Institutions and Organizations |
|
Legal Grounds for Processing of Personal Data |
In order to achieve the above mentioned purposes, your personal data are processed by iTicket based primarily on the legal causes stipulated by Article 5 of the LPPD as described below: ● Being expressly permitted by the law, ● It is necessary for compliance with a legal obligation which the data controller is subject to ● Processing of personal data belonging to the parties of a contract is necessary provided that it is directly related to the conclusion or fulfillment of that contract. |
|
The Method of Collection of Personal Data |
Your personal data mentioned above are collected through; ● Printed and electronic forms, ● The information and documents declared by the person concerned. |
Processing of Special Categories of Personal Data
Special categories of personal data are processed by iTicket in accordance with the principles set forth in this notice and by taking all necessary administrative and technical measures, including the methods to be determined by the Board, and in particular in accordance with the Board’s decision dated 01/01/2018 and numbered 2018/10 and in the presence of the following conditions:
(1)Special categories of personal data apart from health and sexual life data may be processed without obtaining the explicit consent of the data subject, provided that it is explicitly permitted by the Laws, in other words the Law which related activity is subject to contains an unreserved provision that is permitting the processing of personal data. Otherwise, explicit consent of the data subject is to be sought for relevant special categories of personal data to be processed.
(2)Personal data relating to health and sexual life may only be processed without obtaining the explicit consent of the data subject for purposes of protection of public health, operation of preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing by persons under the obligation of secrecy or authorized institutions and organizations. Otherwise, explicit consent of the data subject is to be sought for relevant special categories of personal data to be processed.
Use of Our Website by the Minors
The website is not intended for individuals under the age of 13 (thirteen), and personal information should not be shared by these individuals through our website. If a parent or legal guardian becomes aware that their child has provided us with personal information without his/her parent’s or guardian's consent (for example, by stating his/her age inaccurately); such parent or legal guardian should contact us via [email protected]. If iTicket detects that it has received personal information of minors under the age of 13, it will ex officio remove such information and accounts believed to be owned by the minors under the age of 13.
To Whom and for What Purposes Your Personal Data are Transferred?
Within the scope stipulated by the legal regulation, pursuant to the rules of the Law and by taking the necessary technical and administrative measures, your personal data can be transferred to the people listed below to carry out the activities in accordance with the legislation, to inform the authorized persons, institutions and organizations, to fulfill the obligations arising from the provisions of the legislation, to conduct follow-up and carry out the legal affairs, to provide the services we have undertaken and to control the quality of the services provided:
In accordance with all paragraphs of Articles 5 and 6/Paragraph 3 of the LPPD, as part of the legitimate interest of the relevant institution and limited to the stated purposes, to Authorized Public Institutions and Organizations and all kinds of judicial authorities and to the third parties whom we receive consultancy including our representatives, lawyers, tax and financial advisors and auditors that you have authorized, to the regulatory and supervisory institutions, to our solution partners, including public professional organisation, with whom we cooperate in order to develop or carry out our activities for the above mentioned purposes,
For the purposes of conducting business activities, communication activities, carrying out ticketing activities, following up on requests and complaints, organization and event management and execution of purchase of goods/services and sales processes, processing your payment and providing information about your instrument of payment for your use in your next shopping; in accordance with Article 4 of the LPPD, to private insurance companies, contracted institutions, banks and our direct/indirect domestic/foreign affiliates; to relevant third party real/legal persons residing in Turkey or abroad, such as program-service partner persons and organizations, from whom we receive services/cooperate with (including server and storage services) to carry out our activities,
In order to refund your cancellation amount to your card with which you have shopped, for the purpose of refunding the ticket fee, your related financial information with the Banks, personal and/or private personal information with the organizers with whom The Firm cooperate for the sale and distribution of the event tickets, if required, with the organizers and/or other relevant third parties according to the scope of the service requested (car rental companies, courier/cargo companies and persons and organizations related to the service provided, including but not limited to these),
To the commercial electronic message medium service provider in order to make promotions, advertisements and offer benefits and opportunities in line with its shopping preferences, likings and habits of the consumer upon its approval on receiving commercial electronic messages,
To the associated business partners with the purposes of conducting information security processes, executing/auditing business activities, executing storage and archiving activities, executing finance and accounting affairs and conducting the processes of concluding contracts.
In addition to the above, personal data may be transferred to/stored in the foreign countries which are declared by the Board which have adequate protection, in encrypted form with the highest level of security and protocol methods, in the presence of any of the conditions in the paragraphs above.
How Long is Your Personal Data Retained?
If a period of time has been determined for data storage under the Law or other relevant legislation, your personal data must be retained until such period ends. If a period of time is not stipulated in the Law or in the relevant legislation; your personal data are stored for the periods designated for a limited and measured period of time in connection with the purposes of processing in accordance with our Destruction Policy, which is an annex to this notice.
What are Your Legal Rights as the Data Subject?
In accordance with the LPPD and relevant legislation concerning your personal data you are entitled to:
How Can You Exercise Your Rights as a Consumer or a Data Subject?
The updated provisions of this notice will be immediately entering into force at the date they are published thus made public on the website. Even in the absence of an update, if you wish to access the content of this notice, as our consumer or a data subject, please kindly contact us via [email protected] after filling out the Application Formwhich you will be subsequently contacted by a respective person.
In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, in case you want to submit an application as a Data Subject it is obligatory for your application to have the following information: name, surname, signature if the application is in writing, Republic of Turkey ID Number (if the applicant is a foreign national, his/her nationality, passport number or ID number), the place of residence or business address for formal notification, the e-mail address, telephone number and fax number for notification and information with regards to the subject of the request.
The applicant must clearly and comprehensibly state the subject requested in the application, which includes explanations regarding the abovementioned rights that he/she has requested to invoke. Information and documents related to the application must be attached to the application. Although the subject of the request must be related to the person of the applicant, if the applicant is acting on behalf of someone else, the applicant must be specifically authorized in this regard and this authority must be duly documented (power of attorney). Additionally, the application must contain identity and address information and documents confirming his/her identity must be attached to the application.
Requests made by unauthorized third parties on behalf of someone else will not be considered.
How Long Does It Take for Requests Regarding the Processing of Your Personal Data to be Answered?
Your claims regarding your personal data are evaluated and answered within 30 days at the latest from the date of receipt. In case your application is rejected, the reasons for rejection will be delivered to you via e-mail or with a document to be sent by Human Resources via registered mail/mail with return receipt requested.
Last Update Date: 22/12/2022