Bomonti Muay Thai Spor Eğitim Danışmanlık ve Organizasyın Ticaret Limited Şirketi (hereinafter “MT Studio”) attaches great importance to the processing and protection of your personal data. This Privacy Notice is prepared under Article 10 of Personal Data Protection Law No. 6698 (“Law” or “KVKK”) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform, to inform our customers, members and visitors about personal data processed and transferred when providing and improving our services.

PURPOSES, LEGAL GROUNDS AND METHODS OF COLLECTION

If you visit, join or shop through MT Studio's website or mobile application, attend its physical or online training or events, or use its services, your personal data is processed in accordance with KVKK and other regulations for the purposes and on the legal grounds below.

IDENTITY INFORMATION
Personal data processed: First name, surname, Turkish identity number, gender and date of birth.

Purposes: Conducting communications; finance and accounting; company, product and service loyalty processes; conducting and auditing business activities; ensuring business continuity; product/service sales and after-sales support; regulatory compliance; customer relationship management and satisfaction activities; advertising, campaigns and promotions; contract and membership processes; services, events and training; retention and archiving; tracking requests and complaints; providing information to authorised persons, institutions and organisations; legal affairs; audit and ethics activities; and internal audit, intelligence and investigations.

Legal grounds: MT Studio processes identity information for these purposes on the grounds specified in Article 5 of KVKK and relevant legislation:
• Processing is expressly provided for by law.
• Processing the contracting parties' personal data is necessary and directly related to establishing or performing a contract.
• Processing is necessary to fulfil the data controller's legal obligations.
• Processing is necessary for the controller's legitimate interests without harming the data subject's fundamental rights and freedoms.

Collection methods: Documents completed during membership and shopping; telephone calls; electronic and contact forms; information you provide; emails; optional fields on the website or mobile application; contracts; written documents or forms completed during services, training, events or seminars; third-party social media platforms; and third-party identity-verification systems.

CONTACT INFORMATION
Personal data processed: Delivery and billing addresses, postal address, email address, telephone number and mobile number.

Purposes: Conducting communications; finance and accounting; company, product and service loyalty processes; conducting and auditing business activities; ensuring business continuity; product/service sales and after-sales support; regulatory compliance; customer relationship management and satisfaction activities; advertising, campaigns and promotions; contract and membership processes; services, events and training; retention and archiving; tracking requests and complaints; providing information to authorised persons, institutions and organisations; legal affairs; audit and ethics activities; and internal audit, intelligence and investigations.

Legal grounds: MT Studio processes contact information for these purposes under Article 5 of KVKK and relevant legislation where:
• Processing the contracting parties' personal data is necessary and directly related to establishing or performing a contract.
• Processing is necessary to fulfil the controller's legal obligations.
• Processing is necessary for the controller's legitimate interests without harming the data subject's fundamental rights and freedoms.

Collection methods: Documents completed during membership and shopping; telephone calls; electronic and contact forms; information you provide; emails; optional website or mobile application fields; contracts; written documents or forms completed during services, training, events or seminars; third-party social media platforms; and third-party identity-verification systems.

CUSTOMER TRANSACTION INFORMATION
Personal data processed: Customer number, order information and number, invoice details, address and delivery details, payment information, Site membership information, returns, requests and complaints, certificates or documents and their numbers issued after training/events, product information, discount codes and gift vouchers, amounts, health information, and personal data arising during investigations or checks for fraudulent transactions.

Purposes: Contract processes; product/service sales and after-sales support; issuing and delivering certificates and documents after training, events and seminars; conducting and auditing business activities; customer relationship management and satisfaction; advertising, campaigns and promotions; tracking requests and complaints; strategic planning; marketing analysis and planning; regulatory compliance; providing information to authorised persons, institutions and organisations; audit and ethics activities; internal audit, investigations and intelligence; and securing the controller's operations.

Legal grounds: MT Studio processes customer transaction information for these purposes under Article 5 of KVKK and relevant legislation where:
• Processing is expressly provided for by law.
• Processing the contracting parties' personal data is necessary and directly related to establishing or performing a contract.
• Processing is necessary to fulfil the controller's legal obligations.
• Processing is necessary for the controller's legitimate interests without harming the data subject's fundamental rights and freedoms.

Collection methods: Contracts; documents completed during membership and shopping; information you provide; telephone calls; emails; electronic and contact forms; optional website or mobile application fields; written documents or forms completed during services, training, events or seminars; and information obtained through third parties.

MARKETING INFORMATION
Personal data processed: Information obtained through marketing and advertising activities, campaigns, cookie records, and targeting, segmentation and profiling activities.

Purposes: Advertising and marketing; campaigns and promotions; marketing products and services; developing and conducting strategic marketing; marketing analysis and planning; company, product and service loyalty processes; business activities; product/service sales; audits; customer satisfaction; and product development.

Legal grounds: MT Studio processes marketing information for these purposes under Article 5 of KVKK and relevant legislation where:
• Processing the contracting parties' personal data is necessary and directly related to establishing or performing a contract.
• Processing is necessary for the controller's legitimate interests without harming the data subject's fundamental rights and freedoms.

Where marketing data must be processed for reasons outside Article 5, your explicit consent will be obtained.

Collection methods: Telephone and call-centre conversations; electronic systems and forms; emails; programmes and software; information-security systems; advertising tools and activities on third-party social media platforms; search-engine advertising; and physical marketing and advertising activities.

TRANSACTION SECURITY INFORMATION
Personal data processed: Website entry and exit information, browser and system information, IP addresses, passwords, user device type and operating system, traffic data and port information.

Purposes: Information-security processes; conducting and auditing business activities; managing access authorisations; audit and ethics activities; securing the controller's operations; product/service sales and after-sales support; website and mobile application security; retention and archiving; regulatory compliance; and providing information to authorised persons, institutions and organisations.

Legal grounds: MT Studio processes transaction-security information for these purposes under Article 5 of KVKK and relevant legislation where:
• Processing is expressly provided for by law.
• Processing is necessary to fulfil the controller's legal obligations.
• Processing is necessary for the controller's legitimate interests without harming the data subject's fundamental rights and freedoms.

Collection methods: Information-security systems, electronic devices and software.

VISUAL AND AUDIO RECORDS
Personal data processed: Customer service and call-centre audio recordings, photographs and video recordings.

Purposes: Communications; organisation and event management; customer relationship management and satisfaction; company, product and service loyalty processes; providing an effective customer experience and customer-relations support for services; tracking requests and complaints; carrying out research and reviews needed to provide support for a request; and use as evidence in future disputes.

Legal grounds: MT Studio processes visual and audio records for these purposes under Article 5 of KVKK and relevant legislation on the following grounds:
• Processing is necessary for the controller's legitimate interests without harming the data subject's fundamental rights and freedoms.
• Processing is necessary to establish, exercise or protect a right.
• Explicit consent.
• The data has been made public by the data subject.

Collection methods: Customer service and call-centre conversations; social media platforms; recording digital live broadcasts; recording online training, events and seminars through applications; and taking photographs and videos.

FINANCIAL INFORMATION
Personal data processed: Encrypted credit card details, bank account/IBAN numbers and other digital payment-method information.

Purposes: Finance and accounting; product/service sales; contract processes; conducting and auditing business activities; refunds and payments; regulatory compliance; retention and archiving; legal affairs and proceedings; and providing information to authorised persons, institutions and organisations.

Legal grounds: MT Studio processes financial information for these purposes under Article 5 of KVKK and relevant legislation where:
• Processing the contracting parties' personal data is necessary and directly related to establishing or performing a contract.
• Processing is necessary to fulfil the controller's legal obligations.

Collection methods: Information you provide, electronic forms, emails, optional fields on the website or mobile application, and contracts.

PHYSICAL PREMISES SECURITY
Personal data processed: CCTV recordings.

Purposes: Securing premises, products and resources; conducting and auditing business activities; securing movable assets and fixtures; securing the controller's operations; audit and ethics activities; legal affairs; and internal audit, investigations and intelligence.

Legal grounds: MT Studio processes premises-security information for these purposes under Article 5 of KVKK and relevant legislation where:
• Processing is necessary for the controller's legitimate interests without harming the data subject's fundamental rights and freedoms.
• Processing is necessary to establish, exercise or protect a right.

Collection methods: Closed-circuit television (CCTV) systems.

LEGAL TRANSACTION INFORMATION
Personal data processed in disputes: Information in correspondence with judicial and administrative authorities, case files, formal warnings, notices, undertakings and petitions.

Purposes: Legal affairs and proceedings; contract processes; finance and accounting; conducting and auditing business activities; regulatory compliance; following up and resolving requests and complaints; and providing information to authorised persons, institutions and organisations.

Legal grounds: MT Studio processes this information for the purposes stated above under Article 5 of KVKK and relevant legislation where:
• Processing is expressly provided for by law.
• Processing is necessary to fulfil the controller's legal obligations.
• Processing is necessary to establish, exercise or protect a right.

Collection methods: Official correspondence and other printed and electronic documents.

TRANSFER OF PERSONAL DATA

Your personal data is transferred:
• To authorised public institutions and organisations to conduct activities in accordance with legislation, ensure lawful operations, provide information to authorised persons and bodies, and conduct legal affairs within the scope prescribed by law.
• To business partners involved in sales; logistics and courier companies; suppliers such as independent auditors, financial consultants and intermediary service providers; banks and payment institutions managing financial affairs; private-law legal entities; affiliates and subsidiaries. The purposes are conducting and auditing business activities; communications; product/service sales and after-sales support; contract processes; finance and accounting; logistics; customer relationship management and satisfaction; marketing and advertising; campaigns, advertising and promotions; marketing analysis; audit and ethics activities; following up and resolving requests and complaints; product/service marketing; managing access authorisations; and retention and archiving.
• In the course of MT Studio's social media activities, photographs and videos may be shared publicly on its website and the social media platforms it manages for communications, organisation and event management, and marketing, advertising, campaigns and promotions.

Your personal data is recorded in programmes and/or systems provided by our technology infrastructure suppliers and business partners whose servers are abroad, for information-security processes, retention and archiving. With your explicit consent and all necessary technical and administrative measures, service providers with servers abroad process the data on MT Studio's behalf. The data is automatically transferred abroad for the purposes stated above and is not shared with any third party beyond those specified.

YOUR RIGHTS AS A DATA SUBJECT

Under KVKK and relevant legislation, you may:
• Learn whether your personal data is processed.
• Request information if it has been processed.
• Learn the purpose of processing and whether the data is used in accordance with that purpose.
• Learn the third parties receiving your data in Turkey or abroad.
• Request correction of incomplete or inaccurate processing.
• Request deletion or destruction under the conditions prescribed by KVKK.
• Request that correction, deletion or destruction be notified to third parties receiving the data.
• Object to an adverse result arising from analysis of your data exclusively through automated systems.
• Request compensation for damage caused by unlawful processing.

HOW TO EXERCISE YOUR RIGHTS

Complete and sign the “KVKK APPLICATION FORM” on our website fully and clearly, and deliver it personally or by registered post with acknowledgement of receipt to Maslak Mahallesi Ahi Evran Caddesi No:11/3 Sarıyer/İstanbul.

Our company assesses applications concerning personal-data rights and requests and responds within 30 (thirty) days of receipt at the latest. If rejected, the reasons will be sent to the postal or email address provided, using one of your selected methods, including email or post.

INFORMATION REQUIRED IN YOUR APPLICATION

Under the Communiqué on the Procedures and Principles for Applications to the Data Controller, applications must contain:
• First name and surname.
• A handwritten signature for written applications.
• Turkish identity number; for foreign nationals, nationality and passport number or identity number, if any.
• Residential or business address for service of notices.
• Email address, telephone number and fax number for notifications, if available.
• Subject of the request.

The application must clearly explain the request and the right you wish to exercise. Supporting information and documents must be attached.

The request must concern the applicant personally. Anyone acting for another person must be specifically authorised and provide evidence of that authority, such as a power of attorney. Applications must also include identity and address details, with documents verifying identity attached.

Requests made on another person's behalf by unauthorised third parties will not be considered.

UPDATES TO THE KVKK POLICY AND PRIVACY NOTICE

Our KVKK policies and Privacy Notice may change as products, services, conditions and legal developments change. The latest versions are available on our website at www.muaytghaistudio.com.