TEXHIBITION ISTANBUL

COOKIE POLICY

Version: 1.0 Effective date: [……/……/20……]

1. PURPOSE, SCOPE AND RELATED DOCUMENTS

This Cookie Policy has been prepared to provide information about the cookies, online identifiers and similar tracking technologies used on the website at www.texhibitionist.com and its subdomains (the “Website”), which is operated by İTKİB Fuarcılık A.Ş. (the “Organizer”), and to explain how Users can manage their preferences.

This Policy has been prepared on the basis of the Turkish Personal Data Protection Law No. 6698 (the “KVKK”) and the current version of the Guidelines on Cookie Practices published by the Turkish Personal Data Protection Authority.

Details concerning the processing of personal data by means other than cookies are provided in the Texhibition Istanbul Website and Visitor Registration Privacy Notice (the “Privacy Notice”). This Policy constitutes the detailed cookie layer of the Privacy Notice.

2. DATA CONTROLLER

3. COOKIES AND SIMILAR TECHNOLOGIES

“Cookie” means a small text file stored on or read from a device through the browser when a website is visited.

“Pixels and Tags” mean invisible visual elements that send a request to a server when a page or email is opened.

“Local Storage” means a technology that enables a browser to store data on a device independently of cookies.

“Server-Side Measurement” means a method by which data relating to a Visitor’s interaction is transmitted to a provider through the Organizer’s server instead of through the browser.

“Session Recording” means recording a User’s movements, clicks and scrolling behavior on a page in a manner that allows the session to be replayed.

These technologies may be used to process the IP address, device and browser information, operating system, language preference, time of visit, pages viewed, referring link, campaign parameters and online identifiers. An IP address constitutes personal data. For analytics services, IP address truncation or masking is enabled to the extent offered by the provider.

4. COOKIE CATEGORIES AND THE LEGAL BASES RELIED UPON

For a cookie to be used without explicit consent, either its sole purpose must be to technically enable communication over an electronic communications network or it must be strictly necessary to provide a service explicitly requested by the User. A cookie that meets neither of these criteria may be used only with prior explicit consent.

Strictly Necessary Cookies: These cookies are strictly necessary for displaying the Website, operating the registration form, maintaining the session and preventing fraud and automated bot attacks during form submissions. Legal basis: Article 5(2)(c) of the KVKK concerning the establishment or performance of a contract and Article 5(2)(f) concerning legitimate interests. Explicit consent is not required.

Functional Cookies: These cookies remember preferences such as language and appearance or enable additional functions requested by the User. To the extent that they are not strictly necessary for the requested service, they are subject to explicit consent and are disabled by default in the preference panel.

Analytics and Measurement Cookies: These cookies are used to measure Website traffic, page usage and performance. Legal basis: explicit consent under Article 5(1) of the KVKK. They are disabled by default.

Advertising and Marketing Cookies: These cookies are used for campaign measurement, conversion tracking, targeting, remarketing, User profiling and measuring social media interactions. Legal basis: explicit consent under Article 5(1) of the KVKK. They are disabled by default.

Any processing involving behavioral advertising or profiling is subject to explicit consent for the relevant category and is not carried out without such consent.

5. COOKIE INVENTORY

The inventory below is based on the scan results generated by the cookie management tool operating in the production environment on the inventory’s most recent verification date. The provider’s role is indicated according to whether the relevant provider processes the data for purposes determined by that provider.

The inventory is updated in line with periodic scans performed by the cookie management tool.

Third-party providers are also subject to a separate obligation to inform under Article 10 of the KVKK with respect to their own processing activities. The providers’ privacy policies may be accessed through the links in the cookie management panel.

6. ADDITIONAL INFORMATION ON SESSION RECORDING

Where consent is given for the Analytics category, the session recording feature—which records User behavior in a replayable manner—may be activated.

The following safeguards apply to this feature:

• Text entered into form fields is masked before recording.
• Fields containing information such as first name, surname, email address, telephone number and passport information are excluded from recording.
• Session recording is disabled on screens involving payment or identity verification.
• Recordings are reviewed solely for User experience analysis and under restricted access permissions.

If consent is not given for the Analytics category, session recording is not activated under any circumstances.

7. SERVER-SIDE MEASUREMENT AND CONVERSION INTERFACES

Advertising measurement may be carried out using server-side methods in addition to browser cookies. Under this method, interaction data is transmitted to the relevant provider through the Organizer’s server.

Although server-side measurement is a technology independent of browser cookies, it serves the same purpose and is therefore subject to explicit consent for the Advertising and Marketing category. If consent is not given for the relevant category, no server-side transfer is made.

8. WEB PUSH NOTIFICATIONS

The Website may offer the ability to send instant notifications through the browser. This feature is not a cookie; it is based on the browser’s notification permission and a subscription record.

A notification subscription is created through a separate permission flow. Where a notification is commercial in nature, the provisions of the Law No. 6563 on the Regulation of Electronic Commerce and the Regulation on Commercial Communications and Commercial Electronic Messages shall apply.

The subscription may be terminated at any time through the browser settings or the preference panel on the Website.

9. EMAIL TRACKING

Newsletters sent by the Organizer may use pixels to measure whether the message has been opened and whether links have been clicked.

To the extent that such measurement is carried out for marketing purposes, it is subject to explicit consent. A plain-text version without tracking may be requested. Requests may be sent to [email protected].

10. EXPLICIT CONSENT AND PREFERENCE MANAGEMENT

On the first visit to the Website, non-essential cookies are disabled and no identifiers are placed.

The obligation to inform is fulfilled no later than when personal data is obtained—that is, upon entry to the Website. Information is provided in layers: essential information is provided in the first layer of the cookie panel, this Policy in the second layer and the cookie inventory in the third layer.

The “Accept All,” “Reject All” and “Manage Preferences” options in the cookie panel are presented with equal prominence in terms of color, size, font size and position. Rejecting cookies requires the same number of clicks as accepting them.

Access to the Website is not blocked if non-essential cookies are rejected; no cookie wall is used.

Separate preferences may be set for the Functional, Analytics and Advertising categories. A preference may be changed or withdrawn at any time through the “Cookie Preferences” link in the Website footer. Withdrawal of consent takes effect prospectively.

11. CROSS-BORDER DATA TRANSFERS

Depending on the nature of the cookies and technologies used, your personal data processed through cookies may be transferred to service providers located abroad, such as Google, Meta, Yandex, LinkedIn, Brevo, PushOwl and Cloudflare. Such transfers are carried out in accordance with the conditions governing cross-border data transfers under Article 9 of the Law: primarily on the basis of an adequacy decision; where no such decision exists, on the basis of one of the appropriate safeguards provided for by the Law; and where such safeguards cannot be ensured, within the framework of the exceptional transfer conditions set out in the Law.

12. RETENTION AND DISPOSAL

Cookies are retained for the maximum duration shown in the inventory or until they are deleted by the User or consent is withdrawn.

When consent is withdrawn, the relevant identifiers are deleted from the device or expired as soon as technically possible, and no new identifiers are placed.

When the retention period expires or the legal basis for processing ceases to exist, personal data is disposed of in accordance with the Regulation on the Deletion, Destruction or Anonymization of Personal Data and at the periodic disposal intervals specified in the Organizer’s Personal Data Retention and Disposal Policy.

13. DATA SUBJECT RIGHTS AND APPLICATIONS

Data subjects may apply to the Organizer to exercise the rights listed in Article 11 of the KVKK. These rights include learning whether personal data is being processed; requesting information if it has been processed; learning the purpose of processing and whether it is being used in accordance with that purpose; knowing the third parties to whom it has been transferred; requesting correction if it has been processed incompletely or inaccurately; requesting its deletion or destruction; and claiming compensation for damage suffered.

Applications may be submitted by the following methods pursuant to the Communiqué on the Procedures and Principles of Application to the Data Controller:

• in writing, by submitting a wet-signed petition to YENİBOSNA MERKEZ MAH. SANAYİ CAD. NO: 3 BAHÇELİEVLER / İSTANBUL;
• through a registered electronic mail (KEP) address;
• using a secure electronic signature or mobile signature;
• by sending an email to [email protected] from an email address previously registered in the Organizer’s system.

Applications will be concluded within thirty days at the latest. If an application is rejected, the response is found to be insufficient or no response is given within the prescribed period, the data subject may lodge a complaint with the Personal Data Protection Board.

14. BROWSER SETTINGS

Cookies may also be deleted or blocked through browser settings. However, browser settings do not replace the category-based preference panel on the Website.

Blocking strictly necessary cookies may prevent the registration form or security features from functioning.

15. UPDATES AND VERSION MANAGEMENT

This Policy is updated when the cookie inventory, providers or applicable legislation changes. Each version is published with a version number and effective date; previous versions are kept accessible as an archive.

16. CONTACT

You may contact İTKİB Fuarcılık A.Ş. at [email protected] regarding cookies and your personal data.