Legal
Website Visitor Privacy Notice
Last updated: 11.10.2026
This Notice is issued under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") by ONDOKUZ ORGANİZASYON REKLAMCILIK DANIŞMANLIK VE TURİZM LİMİTED ŞİRKETİ, acting as data controller, to inform visitors of the website ondokuz.org about the processing of their personal data.
Article 1 – Identity of the data controller
Your personal data is processed by ONDOKUZ ORGANİZASYON REKLAMCILIK DANIŞMANLIK VE TURİZM LİMİTED ŞİRKETİ ("Ondokuz"), whose details are given below, as data controller and within the scope described in this Notice.
| Name | ONDOKUZ ORGANİZASYON REKLAMCILIK DANIŞMANLIK VE TURİZM LİMİTED ŞİRKETİ |
|---|---|
| Address | Doğu Karadeniz Cad. No:28/E Ihlamur Köşk Sitesi Villa 5, Burhaniye / Beylerbeyi, Üsküdar, Istanbul |
| Data protection e-mail | kvkk@ondokuz.org |
| Phone | 0216 318 03 19 |
| Website | ondokuz.org |
| MERSIS no | 0643031948800017 |
| Tax office / no | Üsküdar VD / 6430319488 |
| KEP | ondokuzorganizasyon@hs06.kep.tr |
Article 2 – Purpose and scope
This Notice explains for which purposes and on which legal grounds we process the personal data of natural persons who visit ondokuz.org, view or interact with its content and/or contact Ondokuz through the contact form, e-mail or telephone ("Visitor"), to whom the data may be transferred, how it is collected, and your rights under Article 11 of the KVKK.
Details on cookies and similar technologies are given in the Cookie Policy; this Notice only summarises them.
Article 3 – Categories of personal data
| Category | Data | Explanation |
|---|---|---|
| Identity | Name and surname | Shared by you when you contact us through the contact form, e-mail or telephone |
| Contact | E-mail address, phone number, company / brand | Shared by you as part of your enquiry (phone and company are optional) |
| Request | Message content | The text you write in the contact form |
| Transaction security | IP address, browser and device information, date and time of visit, requested page, referring address; the IP address from which the form was sent and the time you confirmed this Notice | Technical records created automatically by the server when the site is accessed |
The site also keeps anonymous visit statistics: page viewed, where the visit came from (e.g. a search engine), the country of the visit, device and browser type, screen width, time spent on the page, how fast the page loaded and the type of button clicked. No cookie is used and no IP address is stored: the IP address and browser string are hashed one-way with a random key that changes every day and is not kept, and only that hash is saved. The hash cannot be traced back to a person, and the next day the same visitor gets a different value. The country is looked up from the IP address in a database kept on the site's own server; only the two-letter country code is recorded, and the IP address is not sent anywhere for this purpose.
The site does not use Google Analytics, advertising or remarketing pixels, or any similar third-party measurement tool.
Article 4 – Collection method and legal basis
| Category | Collection method | Legal basis (KVKK Art. 5) |
|---|---|---|
| Identity, contact, request | You fill in the contact form or contact us of your own accord by e-mail or telephone | Art. 5/2-f – legitimate interest of the data controller (answering your request); Art. 5/2-c where your request concerns entering into a contract |
| Transaction security | Automatically by the server infrastructure during your visit | Art. 5/2-f – legitimate interest (security and proper functioning of the site); Art. 5/2-ç – legal obligation under Law No. 5651 |
| Anonymous visit statistics | By the server and the measurement code on the page, without cookies | Anonymous data that does not identify a person; to the extent it qualifies as personal data, Art. 5/2-f – legitimate interest (improving the site) |
Your data is collected electronically by automatic or partly automatic means. The tick box on the contact form is for you to confirm that you have read this Notice; it is not a declaration of explicit consent.
Article 5 – Purposes of processing
Your personal data is processed within the conditions of Articles 5 and 6 of the KVKK and limited to the following purposes:
- Operating and displaying the website and ensuring its functionality
- Assessing and answering information, proposal, partnership and contact requests sent through the contact form, e-mail or telephone
- Providing information, on request, about the event management and organisation services offered by Ondokuz
- Securing the website and information systems, preventing misuse and unauthorised access
- Fulfilling record-keeping and retention obligations under Law No. 5651 and related legislation
- Responding to requests from competent public authorities and managing legal disputes
- Understanding which parts of the site draw interest through anonymous visit statistics and improving the site
Article 6 – Cookies
ondokuz.org does not place cookies on visitors' devices. Only your light/dark theme choice and your answer to the cookie notice are kept in your browser's local storage; they are not sent to our server. Videos on project pages load from YouTube's privacy-enhanced mode (youtube-nocookie.com) only after you press play; from then on YouTube (Google) cookies may apply. See the Cookie Policy for details.
Article 7 – Transfers
Your personal data may be transferred within the conditions of Articles 8 and 9 of the KVKK and limited to the purposes in this Notice, to the following parties:
- Hosting (abroad): The website and contact form records are hosted on a server in the data centre of Hetzner Online GmbH in Nuremberg, Germany. This transfer takes place only to the extent that one of the appropriate transfer mechanisms under Article 9 of the KVKK (adequacy decision, standard contract, binding corporate rules or exceptions set by the Board) is in place.
- Within Türkiye: legal advisers and auditors; public institutions and judicial and administrative authorities where legally authorised.
- YouTube: If you choose to play a video, the video and related technical data are exchanged directly between your browser and Google LLC (USA). Ondokuz does not initiate this exchange; it happens only when you press play. Google's privacy policy applies.
Anonymous visit statistics and server access records are not shared with third parties; they are kept on the server hosting the site.
Article 8 – Retention
- Requests sent through the contact form, e-mail or telephone: up to 2 years from the date of the record. Form records in the management panel are deleted automatically at the end of this period.
- Server access records: at least 1 and at most 2 years under Law No. 5651 and the related regulation. Records older than 2 years are deleted automatically.
- Anonymous visit statistics: detailed records up to 400 days. Daily totals derived from them (for example the number of visits on a given day), which cannot be linked to any visitor, may be kept without a time limit.
- Theme and notice preference in your browser: until you clear your browser data, on your device only.
Personal data whose retention period has ended is deleted, destroyed or anonymised. Statutory limitation periods are reserved.
Article 9 – Your rights
Under Article 11 of the KVKK you may apply to Ondokuz to:
- Learn whether your personal data is processed
- Request information if it has been processed
- Learn the purpose of processing and whether it is used accordingly
- Know the third parties in Türkiye or abroad to whom it is transferred
- Request correction if it is incomplete or inaccurate
- Request deletion or destruction under the conditions of Article 7 of the KVKK
- Request that correction, deletion or destruction be notified to third parties to whom the data was transferred
- Object to a result against you arising solely from analysis by automated systems
- Claim compensation if you suffer damage from unlawful processing
Article 10 – How to apply
You may send requests concerning these rights, together with documents proving your identity and in line with Article 13 of the KVKK and the Communiqué on Application Procedures to the Data Controller, through one of the channels below. Requests are concluded free of charge within 30 days at the latest; where the process requires an additional cost, the fee set by the Personal Data Protection Board may be charged.
| kvkk@ondokuz.org – from the e-mail address known to us | |
| In writing | By registered mail or by hand to: Doğu Karadeniz Cad. No:28/E Ihlamur Köşk Sitesi Villa 5, Burhaniye / Beylerbeyi, Üsküdar, Istanbul |
| KEP / secure e-signature | ondokuzorganizasyon@hs06.kep.tr |
Article 11 – Entry into force
This Notice enters into force when approved by Ondokuz and published on ondokuz.org. It may be updated in line with changes in legislation or in Ondokuz's processing activities; the current version is always available on ondokuz.org.