toplandık.Home

Privacy notice

Why we process data is clear.

This notice describes the controller, data categories, purposes, legal grounds, transfers and rights under Türkiye’s Personal Data Protection Law No. 6698 (KVKK).

Last updated · 29 Temmuz 2026

Data controller

Personal data processed through the Toplandık website, dashboards and event album services is handled by the data controller identified below.

Payment security
Payments are completed through secure payment infrastructure without Toplandık viewing your card details.

Data categories, purposes and legal grounds

  • Account and contact: authentication, dashboard access, support and notices; necessary for contract performance and legitimate interests.
  • Event and transaction: preparing events, QR tools, album publication and duration management; contract performance and legitimate interests.
  • Photos, videos and notes: completing requested uploads, album display, downloads and presentations; establishment, exercise or protection of rights and legitimate interests.
  • Payment and finance: matching payment, publication, accounting, audits and disputes; contract performance, legal obligations and protection of rights.
  • Usage and technical records: visitor statistics, same-device deletion, security and error analysis; protection of rights and legitimate interests.

Toplandık does not collect card numbers, expiry dates or CVV data. Payments are completed through secure infrastructure with 3D Secure verification.

How do we collect personal data?

Data is collected electronically and partly automatically when you complete account or event forms, use payment links, open an event QR code or link, upload or delete media and contact support. Essential first-party cookies support sessions, visitor counts, language choice and media ownership.

Who may receive personal data?

Data may be transferred only when relevant, limited and proportionate to hosting, security, media storage, payment, accounting, legal and technical-support providers, and competent authorities where legally required. International transfers follow KVKK requirements and applicable safeguards.

Retention period

Personal data is kept for the processing purpose and mandatory legal periods. Event albums are available for the three-year period shown in the dashboard. After expiry, access and uploads stop and data enters deletion or anonymization processes subject to legal, contractual and technical requirements. Sessions are retained for up to 30 days and visitor/media ownership keys for up to 183 days.

Your rights under Article 11 of KVKK

  • Learn whether personal data is processed and request information.
  • Learn the purpose and whether data is used accordingly.
  • Know third parties to whom data is transferred.
  • Request correction, deletion or destruction when legal conditions are met.
  • Request notice of correction or deletion to recipients.
  • Object to adverse results produced solely by automated analysis.
  • Claim compensation for damage caused by unlawful processing.

How to submit a request

Send your request using the contact details below. Including your name, contact details, account email, request subject and relevant event code helps us verify and resolve it. Additional information may be requested to prevent unauthorized access.

Payment security
Payments are completed through secure payment infrastructure without Toplandık viewing your card details.