Privacy Policy (KVKK)

Last Updated: 30 Mart 2026

DATA CONTROLLER

BİRLEŞİK FUAR YAPIM A.Ş.("BİFAŞ") acts as the data controller within the scope of the Personal Data Protection Law No. 6698 ("KVKK").

Address: Atatürk Caddesi İDTM Blokları A2 Blok No:10 Kat:10 Ofis No:323 Yeşilköy Bakırköy / İSTANBUL

Email: [email protected]

Phone: +90 212 465 04 40

PERSONAL DATA PROCESSED

Identity Data: First name, last name
Contact Data: Email address, phone number
Transaction Security Data: IP address, browser information, session data
Financial Data: Payment transaction records (card details are not stored by BİFAŞ)

PURPOSE OF PROCESSING

Execution of ticket sales and delivery of digital tickets
Fulfillment of legal obligations (invoicing, accounting records)
Providing customer communication and support services
Ensuring site security and preventing fraud
Conducting statistical analyses

LEGAL GROUNDS

KVKK Art. 5/2-c: Necessary for the establishment and performance of the contract
KVKK Art. 5/2-ç: Fulfillment of the data controller's legal obligation
KVKK Art. 5/2-f: Necessary for the legitimate interests of the data controller

DATA TRANSFER

Your personal data may be shared with the payment service provider (PayNkolay) and authorized public institutions and organizations in case of legal obligation. Your data is not transferred abroad.

RETENTION PERIOD

Your personal data is retained for the duration required by the processing purposes and within the framework of legal retention obligations. When the period expires, the data is deleted, destroyed, or anonymized.

RIGHTS OF THE DATA SUBJECT (KVKK Art. 11)

Pursuant to Article 11 of the KVKK, you have the following rights:

To learn whether your personal data is being processed
To request information about the processing of your personal data
To learn the purpose of processing your personal data and whether they are used in accordance with their purpose
To know the third parties to whom your personal data is transferred domestically or abroad
To request correction of your personal data if it has been processed incompletely or inaccurately
To request deletion or destruction of your personal data under the conditions stipulated in Article 7 of the KVKK
To request notification of the operations carried out to third parties to whom your personal data has been transferred
To object to a result that is against you through the analysis of processed data exclusively by automated systems
To claim compensation for damages arising from the unlawful processing of your personal data

APPLICATION METHOD

To exercise your rights, you may submit a written application to [email protected] along with information verifying your identity. Applications will be responded to within 30 days at the latest.