ISTevent

Legal & Compliance

KVKK Notice (Turkey) & GDPR Compliance Notice (EU)

KVKK Notice

Under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data may be processed by SG Group Etkinlik Yönetimi ve Turizm Hizmetleri A.Ş. ("ISTevent"), acting as the data controller, within the scope described below.

1. Data Controller

SG Group Etkinlik Yönetimi ve Turizm Hizmetleri A.Ş. — Esentepe Mah. Büyükdere Cad. Ferko Signature No: 175, Office No: 2, Şişli/Istanbul, Türkiye.

2. Personal Data We Process

We process personal data that you share with us — such as your full name, email address, phone number, company details, website, and message content — when you submit our contact form, request a proposal, or apply for an event.

If you contact us about a career opportunity, we additionally process the application details you provide — the position you are applying for, your LinkedIn or portfolio address, and the CV or résumé you choose to attach, together with the personal data it contains (such as your education, work experience, and contact details).

3. Purpose of Processing

Your personal data is processed to evaluate your requests and proposals, deliver our event and trade fair organization services, carry out contractual processes, manage customer relationships, and fulfil our legal obligations. Data submitted through a career application is processed solely to assess your suitability for open or future positions and to manage our recruitment processes.

4. Transfer of Personal Data

Your personal data may be transferred, only to the extent required by the service and in accordance with Articles 8 and 9 of the KVKK, to our business partners, suppliers, domestic and international event and trade fair organizers, and authorized public institutions.

5. Method of Collection and Legal Basis

Your personal data is collected electronically through channels such as our website's contact form, email, and phone, and is processed on the legal grounds set out in Article 5 of the KVKK — namely, your explicit consent, the direct necessity of processing for the establishment or performance of a contract, and the legitimate interest of the data controller.

6. Retention Period

We retain your personal data only for as long as the purpose for which it was collected requires, and for any period mandated by applicable legislation. CVs and résumés submitted through a career application are kept for a maximum of 24 months from the date of submission, after which they are automatically and permanently deleted from our systems. You may request the deletion of your CV at any point before that period ends by writing to us at the address below.

7. Your Rights as a Data Subject (KVKK Art. 11)

Under Article 11 of the KVKK, you have the right to: learn whether your personal data is being processed; request information about such processing if it is; learn the purpose of processing and whether your data is used accordingly; know the third parties, domestic or foreign, to whom your data has been transferred; request correction if your data has been processed incompletely or inaccurately; request deletion or destruction of your data within the framework set out in applicable legislation; request that any correction or deletion be notified to the third parties to whom your data has been transferred; object to a result that is to your detriment arising solely from the analysis of your data through automated systems; and claim compensation for any damages arising from the unlawful processing of your personal data.

8. How to Submit a Request

You may submit requests relating to the rights listed above by email to info@istevent.com, or in writing to our Istanbul office address above.

GDPR Compliance Notice

1. Data Controller

For visitors and clients based in the European Union, ISTevent (operated by SG Group Etkinlik Yönetimi ve Turizm Hizmetleri A.Ş., with an office at Im Medienwinkel 25A, 40625 Düsseldorf, Germany) acts as the data controller for personal data processed through this website, in accordance with the EU General Data Protection Regulation (GDPR).

2. What Personal Data We Collect

We collect personal data that you voluntarily provide through our contact form, including your name, email address, phone number, company name, website, and the content of your message or inquiry. Where you submit a career application, this also includes the position applied for, your LinkedIn or portfolio address, and any CV or résumé you attach, along with the personal data contained within it.

3. Purpose and Legal Basis for Processing

We process your personal data to respond to your inquiries, prepare proposals, manage client and exhibitor relationships, and fulfil contractual and pre-contractual obligations. Career application data is processed solely to assess your suitability for open or future positions and to manage our recruitment processes. Processing is based on your consent (Art. 6(1)(a) GDPR), the necessity to take steps prior to entering into a contract (Art. 6(1)(b) GDPR), and our legitimate interest in operating and improving our services (Art. 6(1)(f) GDPR).

4. Data Recipients

Your data may be shared with trusted service providers, venue partners, and event co-organisers strictly to the extent necessary to deliver the services you have requested. We do not sell personal data to third parties.

5. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA) — including to our Istanbul office — we ensure appropriate safeguards are in place, such as standard contractual clauses, in accordance with Chapter V of the GDPR.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described above, or as required by applicable Turkish and EU legal, tax, and accounting obligations. CVs and résumés submitted through a career application are retained for a maximum of 24 months from the date of submission and are then automatically and permanently erased.

7. Your Rights Under GDPR

You have the right to access, rectify, or erase your personal data; to restrict or object to processing; to data portability; and to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

8. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority.

9. Contact

For any questions or requests regarding this notice, please contact us at info@istevent.com.

Last updated: 17.08.2026. This page is provided as a general compliance notice and does not constitute legal advice.