GALATAPERFORM
INFORMATION NOTICE AND PRIVACY AGREEMENT ON THE PROCESSING OF PERSONAL DATA

Data Controller

As GalataPerform Kültür Sanat Eğitim ve Teknoloji Limited Şirketi (“GalataPerform” or the “Company”), located at Hacı Kadın Mah. Kâtip Çelebi Cad. İMÇ 3. Blok No: 2 Inner Door No: 3504 Fatih/Istanbul, we process your personal data in our capacity as the data controller within the scope of the Law No. 6698 on the Protection of Personal Data (“KVKK”).

This Information Notice relates to personal data processed within the scope of theatre workshop services and other related content provided through the website https://galataperform.com/.

1. Personal Data Processed

The website does not have a membership system; however, the following data may be processed:

  • Identity and contact data: full name, email address, phone number
  • Transaction and order data: purchased workshop details, payment information (card data is processed directly by the payment institution)
  • Customer transaction data: requests, complaints, and communication records
  • Transaction security data: IP address, log records
  • Marketing data: email address במסגרת newsletter subscription (upon explicit consent)
  • Cookie data: technical and analytical data related to website usage

2. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

a) Service Provision and Performance of the Contract

  • Carrying out workshop sales transactions
  • Managing payment processes
  • Providing information regarding the purchased service

b) Communication Processes

  • Responding to your questions and requests
  • Providing information regarding workshops

c) Fulfillment of Legal Obligations

  • Fulfilling tax, accounting, and other legal obligations
  • Providing information to authorized institutions and organizations

d) Dispute Management

  • Creating evidence in possible legal disputes
  • Establishing, exercising, and protecting legal rights

e) Improvement of Service Quality

  • Measuring website performance
  • Improving user experience

f) Marketing and Newsletter Distribution (Upon Explicit Consent)

  • Providing information about events, workshops, and announcements
  • Sending e-newsletters

3. Legal Grounds for Processing Personal Data

Your personal data is processed pursuant to Article 5 of the KVKK based on the following legal grounds:

  • Establishment and performance of the contract (Art. 5/2-c) → workshop sales
  • Fulfillment of legal obligations (Art. 5/2-ç) → tax, accounting
  • Establishment, exercise, or protection of a legal right (Art. 5/2-e)
  • Legitimate interest of the data controller (Art. 5/2-f) → website security, analytics
  • Explicit consent (Art. 5/1) → marketing and cookies (where required)

4. Transfer of Personal Data

Your personal data may be transferred to the following parties:

  • Payment institutions and banks
  • E-commerce infrastructure and technical service providers
  • Accounting and financial service providers
  • Authorized public institutions and organizations

Transfers are carried out in accordance with Articles 8 and 9 of the KVKK.

Your personal data may also be transferred to service providers located abroad for the purpose of providing services and maintaining the technical infrastructure. In this context, your data may be transferred to and processed on servers located abroad within the scope of:

  • web sitesi altyapı ve hosting hizmetleri,
  • analytics services (e.g., Google Analytics)
  • advertising and marketing services (e.g., Meta Pixel)
  • email delivery services (e.g., Mailchimp)

.

Such transfers are carried out in accordance with Article 9 of the KVKK, either upon obtaining explicit consent or by ensuring other appropriate safeguards stipulated by the Law.

5. Methods of Collecting Personal Data

Your personal data is collected electronically through:

  • forms on the website
  • Ödeme süreçleri
  • email and communication channels
  • cookies and analytical tools

.

6. Your Rights as a Data Subject

Under Article 11 of the KVKK, you have the following rights:

  • To learn whether your personal data is being processed
  • To request information if it has been processed
  • To learn the purpose of processing
  • To know the third parties to whom it has been transferred
  • Eksik/yanlış işlenmişse düzeltilmesini isteme
  • To request deletion or destruction
  • To object to automated systems
  • To claim compensation in case of damage

You may submit your applications:

  • in writing to the company address
  • via email

.

Your applications will be concluded within 30 days at the latest.

7. Data Retention Periods

Your personal data is retained for the period required by the processing purposes and within the retention periods stipulated by the relevant legislation.

In this context:

data related to workshop participation and services is retained for the periods stipulated by applicable legislation following the termination of the contractual relationship

communication data is retained for a reasonable period following the resolution of the request

data related to commercial electronic communication consents is retained for the period required under the relevant legislation for proof obligations

cookie data is retained for varying periods depending on the type of cookie

At the end of the relevant periods, your personal data is deleted, destroyed, or anonymized.

8. Data Security

Şirket, kişisel verilerin korunması için gerekli teknik ve idari tedbirleri almaktadır.

9. Updates

This text may be updated depending on changes in legislation and practices. All references in this Information Notice to the Law No. 6698 on the Protection of Personal Data (KVKK) shall mean the version of the law that is currently in force in the Republic of Türkiye.