TEXHIBITION ISTANBUL
WEBSITE AND VISITOR REGISTRATION PRIVACY NOTICE
Version: 1.0 Effective date: [……/……/20……]
This Privacy Notice has been prepared pursuant to Article 10 of the Turkish Personal Data Protection Law No. 6698 (the “KVKK”) and the Communiqué on the Procedures and Principles to Be Followed in Fulfillment of the Obligation to Inform.
1. DATA CONTROLLER
Texhibition Istanbul Fabric, Yarn and Textile Accessories Fair (the “Fair”) is held in cooperation with the Istanbul Textile and Raw Materials Exporters’ Association (İTHİB) and the Istanbul Chamber of Commerce (İTO) and is organized by İTKİB Fuarcılık A.Ş.
| Data controller | İTKİB Fuarcılık A.Ş. (the “Organizer”) |
|---|---|
| Registered office address | YENİBOSNA MERKEZ MAH. SANAYİ CAD. NO: 3 BAHÇELİEVLER / İSTANBUL |
| MERSİS number | 0483033615900013 |
| VERBİS registration number | |
| Contact person | |
| [email protected] | |
| Registered electronic mail (KEP) address | [email protected] |
2. SCOPE AND CATEGORIES OF DATA SUBJECTS
This Privacy Notice applies to the following categories of persons:
- Visitors to the Website;
- persons who complete a Visitor registration for the Fair;
- Visitors entering the Fair venue;
- participants in seminars, panels and events held as part of the Fair program;
- persons who contact the Organizer.
3. CATEGORIES OF PERSONAL DATA PROCESSED
| Category | Scope |
|---|---|
| Identity | First name, surname, date of birth (for age verification purposes), signature |
| Contact | Email address, mobile telephone number, business telephone number, country, city, address |
| Professional experience | Position/title, employer/company, sector, field of activity, areas of interest |
| Customer transaction | Visitor registration number, Admission Badge number, entry and exit records, stand visit records |
| Transaction security | IP address, device and browser information, cookies and online identifiers, session records, log records |
| Marketing | Commercial electronic communication consent and opt-out records, İYS records, newsletter interaction data, cookie preferences |
| Visual and audio records | Security camera footage from the Fair venue, photographs and video recordings for promotional purposes, call recordings |
| Request and complaint management | Application/request content, correspondence records, satisfaction survey responses |
| Legal transaction | Records relating to disputes and correspondence with public authorities |
4. METHODS AND TOOLS USED TO COLLECT PERSONAL DATA
Your personal data is collected by partly or wholly automatic means through the following methods and tools.
| Collection tool | Nature of the method | Principal data collected |
|---|---|---|
| Visitor registration form on the Website | Automatic — electronic environment | Identity, contact, professional experience |
| Cookies and similar tracking technologies | Automatic — electronic environment | Transaction security, marketing |
| Admission Badge production and barcode scanning system | Automatic — electronic environment | Customer transaction, identity, professional experience |
| Turnstile and reader systems at the Fair entrance | Automatic — electronic environment | Customer transaction |
| Closed-circuit television system | Automatic — electronic environment | Visual records |
| Email, call center and contact form | Partly automatic | Contact, request and complaint management |
| Newsletter delivery and measurement infrastructure | Automatic — electronic environment | Marketing |
| Web push notification infrastructure | Automatic — electronic environment | Transaction security, marketing |
| Photography and video recording at the Fair venue | Non-automatic or partly automatic | Visual and audio records |
| Printed registration and invitation forms | Non-automatic — physical environment | Identity, contact, professional experience |
| Satisfaction surveys | Automatic — electronic environment | Request and complaint management |
5. PURPOSES OF PROCESSING AND THE LEGAL BASES RELIED UPON
Your personal data will be processed for the purposes set out below, within the personal data processing conditions specified in Article 5 of the KVKK and in a manner that is relevant, limited and proportionate to those purposes pursuant to Article 4 of the Law.
The purposes for which personal data is processed are set out below and may be updated in line with our obligations arising from applicable legislation:
| Purpose | Data categories | Legal basis |
|---|---|---|
| Creating the Visitor registration and producing the Admission Badge | Identity, contact, professional experience | Art. 5(2)(c): Processing is directly related to the establishment or performance of a contract |
| Providing admission to the Fair venue and keeping admission records | Identity, customer transaction | Art. 5(2)(c) and Art. 5(2)(f): Legitimate interests |
| Verifying the accuracy of registration information and preventing duplicate and fraudulent registrations | Identity, contact, transaction security | Art. 5(2)(f): Legitimate interests |
| Providing operational information concerning the Fair program and changes to its date or venue | Contact | Art. 5(2)(c): Performance of a contract |
| Ensuring the security of the Fair venue and Exhibitors, including camera recording | Visual records, customer transaction | Art. 5(2)(f): Legitimate interests |
| Ensuring the security of the Website and information systems, including strictly necessary cookies | Transaction security | Art. 5(2)(c) and Art. 5(2)(f) |
| Retaining internet traffic information | Transaction security | Art. 5(2)(a): Expressly provided for by law (Law No. 5651) |
| Producing Visitor statistics under fair legislation and preparing the Fair results report | Customer transaction, professional experience | Art. 5(2)(ç): Compliance with a legal obligation (Law No. 5174 and fair legislation) |
| Keeping financial and commercial records and retaining documents | Identity, customer transaction | Art. 5(2)(ç): Compliance with a legal obligation (Tax Procedure Law and Turkish Commercial Code) |
| Responding to requests, suggestions and complaints | Contact, request and complaint management | Art. 5(2)(c) and Art. 5(2)(f) |
| Following up legal disputes and exercising the right of defense | Legal transaction and all relevant categories | Art. 5(2)(e): Establishment, exercise or protection of a right |
| Responding to requests from competent public institutions and authorities | Relevant categories | Art. 5(2)(ç): Compliance with a legal obligation |
| Sending commercial electronic communications to recipients qualifying as merchants or tradespersons | Contact, marketing | Art. 5(2)(f): Legitimate interests — together with the consent exemption under Law No. 6563 |
| Analyzing the Visitor profile in aggregated form and improving the organization of the Fair | Professional experience, customer transaction | Art. 5(2)(f): Legitimate interests |
6. SCANNING OF THE ADMISSION BADGE AND TRANSFER TO EXHIBITORS
At the Fair venue, Exhibitors may wish to scan the barcode or QR code on the Visitor’s Admission Badge. The badge is scanned only where the Visitor physically presents it. The transfer of registration information to the relevant Exhibitor as a result of the scan is subject to the Visitor’s explicit consent. Consent is obtained separately during registration or when the badge is scanned for the first time.
Once the transfer takes place, the relevant Exhibitor becomes an independent data controller for the purposes determined by that Exhibitor and is required to fulfill its own obligation to inform. The Exhibitor is responsible for the processing of such data.
7. RIGHTS OF THE DATA SUBJECT AND APPLICATION PROCEDURE
Pursuant to Article 11 of the KVKK, the data subject has the right to apply to the Organizer and:
- learn whether their personal data is being processed;
- request information if their personal data has been processed;
- learn the purpose of the processing and whether the personal data is being used in accordance with that purpose;
- know the third parties to whom the personal data has been transferred in Türkiye or abroad;
- request correction if the personal data has been processed incompletely or inaccurately;
- request deletion or destruction of the personal data;
- request notification of correction, deletion and destruction operations to the third parties to whom the personal data has been transferred;
- object to any outcome against the data subject arising from the analysis of the personal data exclusively by automated systems;
- claim compensation for damage suffered as a result of unlawful processing.
The data subject is entitled to the rights listed above.
Applications may be submitted by the following methods pursuant to the Communiqué on the Procedures and Principles of Application to the Data Controller:
- in writing, by submitting a wet-signed petition to YENİBOSNA MERKEZ MAH. SANAYİ CAD. NO: 3 BAHÇELİEVLER / İSTANBUL;
- through a registered electronic mail (KEP) address;
- using a secure electronic signature or mobile signature;
- by sending an email to [email protected] from an email address previously registered in the Organizer’s system.
Applications will be concluded within thirty days at the latest. If fulfilling the request requires an additional cost, the fee specified in the tariff determined by the Personal Data Protection Board may be charged.
If the application is rejected, the response is found to be insufficient or no response is given within the prescribed period, the data subject may lodge a complaint with the Personal Data Protection Board within thirty days of learning of the response and, in any event, within sixty days of the application date.
8. UPDATES
This Privacy Notice is updated in line with changes to applicable legislation or processing activities. Each version is published with a version number and effective date.
