Privacy and cookies | Creative Technologies Association

Privacy notice

This is an English translation of the notice prepared under the Communiqué on the Obligation to Inform. If the versions differ, the Turkish text prevails. Version 2, September 2026.

1. Data controller

The Creative Technologies Association has not been founded yet and has no legal personality. The data controller for personal data collected during the founding stage is therefore Alptekin Uzun, founding candidate acting on behalf of the Creative Technologies Association initiative. Once the association is founded, it becomes the data controller for data transferred to it on the basis of your explicit consent.

Contact: merhaba@yaraticiteknolojiler.org.tr, Ankara.

2. What data we process

Category	Data	Required?
Identity	First and last name	Yes
Transaction security	Irreversible digest (hash) of your IP address, time of submission, accepted privacy notice version	Automatic
Contact	Email address, phone number, city of residence	Email and city yes, phone optional
Professional	Profile (student, professional, academic, artist, company or institution)	Yes
Preferences	Areas of interest, type of involvement (founding member candidate, member, volunteer, speaker, sponsor)	Involvement yes
Guardian	For under-18s, the name and email of a parent or guardian	Under-18s only

We do not collect ID numbers, addresses or special categories of data such as health, religion or political opinion. Please do not share such information in the form.

3. Purposes and legal basis

Purpose	Legal basis (KVKK Art. 5)
Receiving your pre-registration and replying to you	Your explicit consent (Art. 5/1)
Forming the pool of founding member candidates and first members, meeting candidates	Your explicit consent (Art. 5/1)
Handing the pre-registration list over to the association once it is founded	Your explicit consent (Art. 5/1)
Sending emails about events, workshops and news	Separate, optional explicit consent (Art. 5/1)
Informing parents or guardians of under-18s and obtaining their consent	Explicit consent of the parent or guardian
Preventing abuse and bulk fake submissions (rate limiting)	Legitimate interest (Art. 5/2-f)
Responding to legal claims and official requests	Legal obligation (Art. 5/2-ç), establishing and protecting a right (Art. 5/2-e)

4. How we collect it

Data is collected electronically when you fill in the pre-registration form on this site and press "Pre-register". The form sends your details over an encrypted connection (HTTPS) to a server-side function of our site, which checks them and writes them to the pre-registration database.

During the request, your IP address is used to prevent abuse and bulk fake submissions (rate limiting). The IP address itself is not stored; only an irreversible digest (SHA-256 hash) is kept. Legal basis: legitimate interest (Art. 5/2-f).
The form contains a trap field that people do not see; it helps tell automated software apart and collects nothing from you.
Your record also stores which version of the privacy notice you accepted and the language of the form.

5. Who we share it with

The association, once founded: when it acquires legal personality, the pre-registration list is transferred to the Creative Technologies Association based on your consent. If the association is not founded, nothing is transferred and the data is deleted.
Founding candidates: only as far as needed to form the founding team, under a confidentiality undertaking.
Service providers (data processors):
- Vercel Inc.: hosting of the site and the server function that handles the form.
- Supabase Inc.: the pre-registration database.
- Resend: emailing the form details of each new pre-registration to the initiative team.
- Google LLC (Gmail): the initiative team's mailbox, where pre-registration notifications and emails sent to our contact address are kept.
- METUnic: the domain name and forwarding of emails sent to our contact address to the team.
These providers' servers may be located outside Türkiye. Transfers abroad are made under the standard contractual clauses published by the Board pursuant to KVKK Art. 9 and notified to the Authority within five working days of signing.
Public authorities: only where required by law.

Your data is never sold, rented or shared with third parties for marketing.

6. How long we keep it

Pre-registration data is kept until the association is founded and its first general assembly is held. It is then transferred to the association and the initiative's copies are deleted. If the association has not been founded by 31 December 2027, all pre-registration data is deleted or anonymised. If you withdraw consent, your data is deleted within 30 days.

7. Your rights (KVKK Art. 11)

to learn whether your data is processed and, if so, to request information about it,
to learn the purpose of processing and whether it is used accordingly,
to know the third parties it is transferred to in Türkiye or abroad,
to request correction of incomplete or inaccurate data,
to request deletion or destruction under KVKK Art. 7,
to request that corrections and deletions be notified to third parties it was shared with,
to object to a result against you arising solely from automated analysis,
to claim compensation for damage caused by unlawful processing.

8. How to apply

In line with the Communiqué on the Procedures and Principles of Application to the Data Controller, send your request with your name and the details of what you are asking for, from the email address you used in the form, to merhaba@yaraticiteknolojiler.org.tr. We respond free of charge within 30 days. If you are not satisfied with our reply, you may file a complaint with the Personal Data Protection Board.

I have read the privacy notice. Freely and on an informed basis:

Required consent (needed to pre-register)

I consent to the Creative Technologies Association initiative processing the name, email, phone, city, profile, interests and type of involvement I share in the pre-registration form in order to record my pre-registration, contact me and form the pool of founding member candidates and first members, and to transferring this data to the Creative Technologies Association once it is founded.

Optional consent

I consent to my name and email being processed to receive emails about events, workshops and news. Not giving this consent does not affect my pre-registration.

I know I can withdraw my consent at any time by writing to merhaba@yaraticiteknolojiler.org.tr. Withdrawal does not affect processing carried out before it.

Separate written consent is obtained on the day for publishing photos and videos taken at events; for under-18s it is obtained from a parent or guardian.

Cookie policy

This policy follows the Turkish Personal Data Protection Authority's Guidelines on Cookie Practices (2022).

What are cookies?

Cookies and similar technologies (such as browser storage) are small pieces of data saved on your device when you visit a website.

What we use

We use no cookies and no browser storage. There are no analytics, advertising or social media trackers. Fonts, images and all files load from our own server, so your visit is not reported to any third party. That is why we show no cookie banner.

When you submit the pre-registration form, your IP address is used only to prevent abuse and a digest (hash) of it is stored; this is not a cookie and is explained in the privacy notice above.

If this policy changes

If a measurement tool or non-essential cookie is ever added, this page will be updated and we will show a consent banner with equally visible accept and reject options, in line with the KVKK Cookie Guidelines. Non-essential cookies will not run without your consent.

Your personal data