Privacy Policy

Last Updated: March 26, 2026

1. Who We Are

Evenements is an independent student project developed by computer science students at Galatasaray University. It is not affiliated with or endorsed by the university administration. For any questions about your data, you can reach us at evenementsadmin@gmail.com.

2. Information We Collect

We collect the following information:

  • Account Data: Club name, email address, and password (stored encrypted) when you register a club account.
  • Event Data: Event titles, descriptions, dates, locations, and cover images uploaded by clubs.
  • Contact Messages: Email address and message content submitted through our contact form.
  • Anonymous Visitor ID (likes & views): When you visit or like an event, an anonymous identifier (a randomly generated UUID stored in an essential cookie called visitor_id) is recorded alongside the action to prevent duplicate counting. This identifier contains no personal information, is not linked to any account, and is not used for tracking or advertising.
  • Subscription Data: If you subscribe to email notifications, your email address and optional preferences (club, category) are stored.
  • Local Storage Data: We store your authentication token and theme preference (light/dark/vibrant mode) in your browser's local storage. This data never leaves your device except for the authentication token, which is sent with requests to verify your identity.

We do not use analytics or tracking tools. We do not collect data from users who browse events without registering a club account, other than what is stored locally on your device and the anonymous visitor ID used for like and view deduplication.

3. Legal Basis for Processing

Under the Turkish Personal Data Protection Law (KVKK, Law No. 6698), we process your personal data on the following legal bases:

  • Explicit consent: You agree to the Terms of Service and this Privacy Policy when you create an account.
  • Contractual necessity: Processing your account and event data is necessary to provide the service you signed up for.
  • Legitimate interest: Processing contact messages to respond to inquiries and improve the service.

4. How We Use Your Data

We use your data solely to:

  • Provide and maintain the service (authentication, event management).
  • Allow clubs to create, edit, and manage their events.
  • Display events to users of the platform.
  • Respond to contact messages.
  • Prevent duplicate event likes and view counts using anonymous visitor ID deduplication.
  • Send email notifications to subscribers about new announcements and events.

We do not sell, share, or transfer your personal data to any third parties for marketing or advertising purposes.

5. Data Storage & Security

Your data is stored on servers hosted on Amazon Web Services (AWS) EC2. Passwords are stored using industry-standard encryption. While we take reasonable measures to protect your data, no method of transmission over the Internet is 100% secure.

6. Cross-Border Data Transfers

Our servers are hosted by Amazon Web Services (AWS), which may store data in data centers located outside of Turkey. By using Evenements, you consent to the transfer of your data to AWS infrastructure in accordance with KVKK Article 9. AWS provides industry-standard security measures and complies with international data protection frameworks.

7. Data Retention

We retain your account data for as long as your account is active. Event data is retained for as long as the event exists on the platform. Contact messages are retained indefinitely to help us improve the service. Anonymous visitor IDs stored for event likes and views are retained for as long as the associated event exists and are deleted when the event is removed. Subscription data is retained until you unsubscribe. If you request account deletion, we will delete your account data and associated events within 30 days of your request.

8. Your Rights (KVKK)

Under the Turkish Personal Data Protection Law (KVKK, Law No. 6698), you have the right to:

  • Learn whether your personal data is being processed.
  • Request information about the processing of your personal data.
  • Learn the purpose of processing and whether your data is used accordingly.
  • Know the third parties to whom your data has been transferred.
  • Request correction of incomplete or inaccurate data.
  • Request deletion or destruction of your personal data.
  • Object to any result that is against your interests arising from the analysis of your data exclusively through automated systems.
  • Claim compensation for damages arising from unlawful processing of your data.

To exercise any of these rights, please contact us at evenementsadmin@gmail.com. We will respond to your request within 30 days.

9. Minimum Age

Evenements is designed for university students and club representatives. You must be at least 18 years old to create an account. We do not knowingly collect personal data from individuals under 18.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this page.