KVKK notice

1. Data controller

Contact for data protection matters: [email protected].

In respect of attendees, speakers and exhibitor representatives of an event conducted on Miaventi, the data controller is the event organizer; Miaventi acts as the organizer's data processor. Such persons should review the organizer's own privacy notice.

2. Personal data processed and method of collection

• Identity and contact: name, surname, business email address, telephone number, company, job title.
• Request and customer details: event type, event volume, modules of interest, message content, invoice and tax information.
• Transaction security: sign-in records, IP address (only a hash is retained for form submissions), device and browser information, security logs.
• Marketing: marketing consent and communication preferences.

These data are collected through website forms, email and telephone communications, account registration and the systems operating the website and platform, partly by automated means.

3. Purposes of processing

• Responding to requests and preparing proposals and demonstrations.
• Providing, securing, supporting and improving the platform, and managing customer and user accounts.
• Invoicing, accounting and compliance with legal obligations.
• Prevention of fraud, abuse and security incidents.
• Sending news and event information on the basis of explicit consent.

4. Legal grounds

Under Article 5(2) KVKK: processing is expressly provided for by law (a); processing is necessary for the establishment or performance of a contract (c); processing is necessary for compliance with a legal obligation of the data controller (ç); processing is necessary for the establishment, exercise or protection of a right (e); and processing is necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed (f). Marketing messages and non-essential cookies are based on explicit consent (Article 5(1)).

5. Recipients and international transfers

Personal data may be transferred, within the limits of Articles 8 and 9 KVKK and for the purposes stated above, to service providers (hosting, database, storage, email, bot protection, payments, support, streaming and mapping), professional advisers and public authorities legally entitled to request them.

Where a service provider is located outside Türkiye, data are transferred solely under the conditions of Article 9 (an adequacy decision; appropriate safeguards, such as standard contracts notified to the Authority where required; or, solely for occasional (incidental) transfers, explicit consent).

6. Retention

Form submissions are retained for 24 months and deleted automatically thereafter. Other data are retained for the period required by the purpose of processing and for the limitation, accounting and tax periods prescribed by law, and are thereafter deleted, destroyed or anonymized in accordance with the retention and destruction policy.

7. Rights under Article 11 KVKK

Data subjects, by applying to the data controller, have the right to:

• learn whether their personal data are processed;
• request information where their personal data have been processed;
• learn the purpose of processing and whether the data are used in accordance with that purpose;
• know the third parties to whom their personal data are transferred in Türkiye or abroad;
• request rectification of incomplete or inaccurate data and request that third parties to whom the data have been transferred be notified of the rectification;
• request erasure or destruction of their personal data where the reasons for processing no longer exist, and request that third parties to whom the data have been transferred be notified;
• object to a result adverse to them arising from the exclusive analysis of the processed data by automated systems;

8. Method of application

Data subjects may submit a written application, together with documents verifying their identity, to [email protected] from the email address registered in the system. Applications are concluded free of charge within 30 days at the latest, depending on the nature of the request; where the procedure requires an additional cost, the tariff determined by the Personal Data Protection Board may apply.