GDPR Notice

This notice explains how personal data is processed when you use kinayde.enjoyvent.com, in accordance with Articles 13 and 14 of the General Data Protection Regulation (EU) 2016/679 ("GDPR").

It sits alongside the Privacy Policy and the Cookie Policy and, where they differ, this notice governs the matters the GDPR requires to be stated.

1. Who Is Responsible for Your Data

Two organisations process personal data through this site, each deciding independently why and how it does so. Each is a separate controller for its own processing; neither is a joint controller of the other's, and neither acts on the other's instructions.

The Organiser (controller)

Kınay Global Ug
Address: Manteuffelstraße 18/a
Country of establishment: Germany
Email: [email protected]
Business/tax registration number: 322044540

The Organiser runs the events sold on this site, controls entry to them, and decides on its own marketing.

Enjoyvent (controller, and processor for the Organiser)

Enjoyvent Etkinlik Biletleme ve Teknoloji A.Ş.
Address: Yeşilce Mah. Destegül Sok. No: 1/1 D: 3 Kağıthane İstanbul 34245
Web: enjoyvent.com
Email: [email protected]

Enjoyvent operates the platform this site runs on. It is a controller for the account, payment and platform-security data it processes in its own right, and a processor acting on the Organiser's documented instructions for the parts it handles on the Organiser's behalf, under a written agreement meeting Art. 28 GDPR.

Enjoyvent is established outside the Union. Where it processes your personal data as a controller, it has designated no Art. 27 representative in the Union at this time; requests may be addressed to either contact above and will be answered by whichever of us is responsible for the processing concerned.

2. What Personal Data Is Processed

• Identity data — first name, surname, and, where you give them, gender and date of birth
• Contact data — mobile number, email address
• Account and order data — tickets bought, orders, refunds, exchanges, entry and QR validation records
• Payment data — payment method, billing details, amount, and payment references. Card numbers are entered on and held by the payment provider; neither the Organiser nor Enjoyvent stores them
• Technical data — IP address, browser and device type, operating system, server logs, pages viewed
• Preference and marketing data — language, city, interests, campaign participation, consent status, cookie identifiers
• Support data — messages, requests, complaints and records of correspondence about them

Most of it comes from you. Technical data is generated by your use of the site; payment confirmations come from the payment provider. No special categories of data (Art. 9 GDPR) are collected, and you are asked not to supply any.

3. Why, and On What Legal Basis

Purpose	Legal basis (Art. 6(1) GDPR)
Creating and running your account; selling, delivering, exchanging and refunding tickets; entry control	(b) performance of a contract with you
Taking payment and preventing payment fraud	(b) contract, and (c) legal obligation under payment and anti-fraud rules
Accounting, tax and invoicing records	(c) legal obligation
Keeping the platform available and secure, detecting abuse, and defending legal claims	(f) legitimate interests — in running a secure service and protecting our rights, balanced against yours
Operational messages about an event you hold a ticket for (time, venue, cancellation)	(b) contract
Marketing email, SMS and WhatsApp messages	(a) your consent, withdrawable at any time
Analytics, advertising and audience measurement cookies	(a) your consent, given through the cookie banner and withdrawable at any time

Where the basis is legitimate interests, you may object at any time under Art. 21 GDPR, and we stop unless we can show compelling grounds that override your interests. Where the basis is consent, withdrawing it does not affect the lawfulness of what was done before you withdrew it.

Giving us identity, contact and payment data is a contractual requirement: without it a ticket cannot be issued or a ticket-holder admitted. Everything else is optional and refusing it costs you nothing but the feature it powers.

4. Who Receives It

• The Organiser, for running the event you bought a ticket for
• Enjoyvent, as operator of the platform
• Payment institutions and acquiring banks
• Hosting, cloud and infrastructure providers
• SMS, email and WhatsApp delivery providers
• Analytics and advertising providers, only where you accepted the relevant cookies
• Professional advisers, auditors and insurers where they need it
• Courts, regulators and public authorities where the law requires disclosure

Personal data is not sold, and it is not shared for another company's own marketing.

5. Transfers Outside the EEA

This is the point that most concerns a European buyer, so it is stated plainly. The Enjoyvent platform is operated from, and its databases are hosted in, the Republic of Türkiye. Some providers (analytics and advertising in particular) process data in the United States. Your personal data is therefore transferred outside the European Economic Area.

Türkiye is not the subject of an adequacy decision of the European Commission under Art. 45 GDPR. Those transfers are made under the Standard Contractual Clauses adopted by the Commission (Decision 2021/914) pursuant to Art. 46(2)(c) GDPR, together with a transfer impact assessment and technical measures — encryption in transit, encryption of stored credentials, and access restricted and logged. You may obtain a copy of the clauses relied on by writing to either contact in section 1.

Transfers to providers in the United States rely either on that provider's certification under the EU–US Data Privacy Framework or on the same Standard Contractual Clauses.

6. How Long It Is Kept

• Account data — while the account exists, then up to 12 months
• Order, ticket and payment records — for the period accounting and tax law requires of the Organiser, and in any event while a claim arising from the sale can still be brought
• Server and security logs — generally up to 12 months
• Marketing consent records — while the consent stands, and afterwards for as long as we must be able to prove it was given and withdrawn
• Cookie data — for the lifetime stated in the Cookie Policy

After that it is deleted or irreversibly anonymised.

7. Your Rights

Under Articles 15 to 22 GDPR you have the right to:

• Access — a copy of the personal data held about you and the information in this notice
• Rectification — correction of data that is wrong or incomplete
• Erasure — deletion, where there is no longer a lawful reason to keep it
• Restriction — that processing be paused while a dispute about it is resolved
• Portability — the data you gave us, in a structured, machine-readable form, and its transmission to another controller where technically feasible
• Objection — to processing based on legitimate interests, and at any time and without reason to direct marketing
• Withdrawal of consent — at any time, with effect from then on
• Not to be subject to a decision based solely on automated processing that produces legal effects concerning you. No such decision is taken on this site; ticket allocation and fraud checks are reviewed by a person before any sale is refused

Write to:

• The Organiser: [email protected]
• Enjoyvent: [email protected]

We answer within one month of receiving the request, extendable by two further months for requests that are complex or numerous, in which case we tell you within the first month and why. Answering is free unless a request is manifestly unfounded or excessive.

8. Complaints

You have the right under Art. 77 GDPR to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement. We would rather you told us first, but that is your choice, not a condition.

9. Cookies

Nothing other than strictly necessary cookies is placed on your device until you accept it. You can change or withdraw that choice at any time from the cookie preferences panel linked in the footer of every page, and the Cookie Policy lists what each category does.

10. Changes to This Notice

If this notice changes, the updated version is published on this page and applies from the date it appears here. Where a change materially affects how your data is used, we tell you before it takes effect.