Biletico

Privacy Policy and Information Notice under the Law on the Protection of Personal Data

1. Purpose and Legal Framework

Pursuant to Law No. 6698 on the Protection of Personal Data ("KVKK"), our company, acting as data controller in the processes of collecting, recording, processing, storing and transferring your personal data, takes the utmost care to protect the fundamental rights and freedoms of you, our valued users and customers. This Information Notice has been prepared under Article 10 of the KVKK and the Obligation to Inform, and aims to inform you about the purposes for which your personal data will be processed, the methods by which it is collected, with whom it may be shared and how long it will be stored.

2. Data Controller

Trade Name: BİLETİCO BİLET VE ETKİNLİK ORGANİZASYON HİZMETLERİ A.Ş.
Tax Office: Zincirlikuyu V.D.
Tax Number: 1710709047
Address: Fatih Sultan Mehmet Mh. Balkan Cd. Meydan İstanbul AVM No:62/A Ümraniye / İSTANBUL

3. Your Processed Data

The personal data that may be processed when you receive a one-time service from our company, create a membership or use our website/mobile application are listed below:

1) Identity Information: Identifying information such as name, surname, Turkish ID number, tax number, date of birth and gender.

2) Contact Information: Address (home/work), e-mail, registered e-mail (KEP) address, landline and mobile phone numbers.

3) Financial and Payment Data: Bank/credit card details relating to product/service purchases (saved payment details, if permitted), account number, receipts, invoices and information relating to the payment method.

4) Location Information: Selected city, region and location preferences.

5) Data Relating to Business Partners and Suppliers: Tax certificate, signature circular, certificate of activity, bank details, IBAN, contractual data.

6) Employee and Candidate Data: CV, photograph, interview information, employment start and termination documents, performance records, electronic communication details.

7) Customer Transaction Data: Order and service requests, complaint records, call center call recordings, IP address, device information, username/password, commercial communication consents, preferences relating to marketing activities.

8) Cookie Information:

  • Session Cookies: Valid only for the duration of the session and deleted when the browser is closed.
  • Persistent Cookies: Stored on your device for a certain period and used to recognize you on subsequent visits.
  • Strictly Necessary Cookies: Cookies that provide the site's basic functions and cannot be disabled.
  • Functional Cookies: Used for preference and personalization purposes.
  • Performance/Analytics Cookies: Intended to improve service quality by analyzing your site usage habits.
  • Advertising/Marketing Cookies: Used to display advertisements and campaigns based on your interests.
  • First-Party Cookies: Placed directly by Biletico.
  • Third-Party Cookies: Cookies placed in your browser by our business partners.
4. Purposes of Processing Your Personal Data

Your personal data is processed within the scope of the conditions set out in Articles 5 and 6 of the KVKK for the purposes of;

  • delivering the tickets/services you purchase to you,
  • carrying out membership and customer account transactions,
  • issuing invoices and fulfilling financial obligations,
  • maintaining call center and customer service activities,
  • providing information about events,
  • carrying out marketing, campaign and promotion activities,
  • developing the website and mobile application and improving the user experience,
  • fulfilling legal obligations and providing information to authorized public institutions and organizations.
5. Parties to Whom Your Personal Data May Be Transferred

In accordance with the KVKK and related legislation, your personal data may be transferred to;

  • authorized public institutions and organizations,
  • judicial authorities,
  • our business partners, suppliers and service providers,
  • banks and payment institutions,
  • companies from which we receive technology infrastructure services,
  • our business partners in Turkey and abroad (to the extent necessary).
6. Method and Legal Basis of Personal Data Collection

Your personal data is collected through our website, mobile application, call center, customer service channels, written/digital application forms, business partners and third-party service providers; by automatic or partially automatic means, verbally, in writing or electronically. The legal grounds for processing your data are;

  • Law No. 6698 on the Protection of Personal Data (KVKK),
  • the Turkish Code of Obligations, the Turkish Commercial Code, the Tax Procedure Law and the Law on the Regulation of Electronic Commerce,
  • the protection of our legitimate interests within the framework of the obligations of the relevant regulatory institutions and organizations, the fulfilment of legal obligations, and your explicit consent.
7. Retention Period of Your Personal Data

Your personal data is stored for as long as required by the purposes set out in this information notice and in accordance with the provisions of the relevant legislation. When the purpose of processing no longer exists, your personal data is deleted, destroyed or anonymized ex officio or upon your request.

Main retention periods:

  • Order, invoice and accounting records: 10 years under the Turkish Commercial Code art. 82 and Tax Procedure Law art. 253,
  • Distance sales contracts and transaction records: for the period set by consumer law,
  • Commercial message consent records: 3 years after consent is withdrawn (as proof),
  • Account data (name, contact, children and billing details, favourites): while your account is open; deleted or anonymised when you delete your account.

Data whose retention period has ended is deleted, destroyed or anonymised in periodic destruction runs held at least every 6 months.

8. Technical and Administrative Measures

Biletico takes all necessary technical and administrative measures to ensure the security of your personal data, and uses appropriate security systems to prevent unlawful access to, processing or sharing of data. Internal and external audits are carried out regularly, and employees are made aware of data security. The current version of this notice will always be available to you on our website, in line with changes in legislation.

9. Your Rights as a Data Subject

Pursuant to Article 11 of the KVKK, as a data subject you have the right to:

  • learn whether your personal data is being processed,
  • request information about it if your personal data has been processed,
  • learn the purpose of processing your personal data and whether it is used in line with that purpose,
  • know the third parties in Turkey or abroad to whom your personal data is transferred,
  • request the correction of your personal data if it has been processed incompletely or incorrectly,
  • request the deletion or destruction of your personal data within the framework of the conditions set out in Article 7 of the KVKK,
  • request that the correction, deletion or destruction be notified to the third parties to whom your personal data has been transferred,
  • object to a result against you arising from the analysis of the processed data exclusively through automated systems,
  • request compensation for damages if you suffer damage due to the unlawful processing of your personal data.
10. Right to Apply and Contact

To exercise the rights listed above, you can submit your application, containing the information necessary to identify you, your explanations regarding the right you wish to exercise and your request;

  • in person by hand to Biletico's address stated above,
  • through a notary public,
  • to [email protected] via a registered electronic mail (KEP) address, secure electronic signature, mobile signature or an e-mail address you have previously notified to us and that is registered in our system
  • If you have an account, by signing in and using Profile › My Account › “Delete my account” (deletion requests made this way are confirmed with your password and acknowledged by email)

Depending on their nature, your applications will be finalized free of charge as soon as possible and within 30 (thirty) days at the latest. However, if the process requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be charged.