KVKK Privacy Notice

Last Updated: 13 July 2026

Under Law No. 6698 on the Protection of Personal Data ("KVKK"), we would like to inform you about the processing of your personal data.

1. Data Controller

2. Personal Data Processed

2.1 All users

• Identity: name, surname
• Contact: e-mail address, phone number
• Transaction security: IP address, device and browser information, session records

2.2 Paying users

• Financial: transaction amount, transaction date, order number, last 4 digits of the card and card type
• Invoice: invoicing details (on request: name/company, address, tax or national identity number)

Card details are not stored by the Platform. Data such as the card number, expiry date and CVC are processed solely within the secure infrastructure of the licensed payment institution iyzico.

2.3 Venue operators

• Venue name, address and contact details
• Bank account (IBAN) and tax details for settlement payments

2.4 Usage data

• Song requests, likes, session participation records, in-app preferences

3. Purposes of Processing

• Providing the service and operating session participation and song request processes
• Carrying out payment transactions and concluding refund requests
• Issuing invoices and complying with financial legislation
• Making settlement payments to venues
• Responding to support requests
• Ensuring the security of the service and detecting errors and misuse
• Fulfilling legal obligations

4. Legal Grounds

Your personal data is processed under article 5 of the KVKK on the following grounds:

• Formation and performance of a contract — providing the service, payment and refund processes
• Legal obligation — issuing invoices, retaining financial and commercial records
• Legitimate interest — service security, fraud prevention, improvement of the infrastructure
• Explicit consent — only for marketing communications and non-essential cookies

5. Method of Collection

Data is collected electronically through the website and mobile application, by means of registration and order forms, when joining a session via QR code, and through automatic system records.

6. Transfers

Your personal data may be transferred only to the extent necessary to provide the service and limited to that purpose:

Transfers are made in accordance with articles 8 and 9 of the KVKK and, where a transfer abroad is necessary, with the safeguards required by the legislation.

7. Retention Period

• Account and usage data: for as long as the account is active; deleted after account closure unless a legal obligation remains
• Financial and invoice records: 10 years under the relevant legislation
• Transaction security records: for the period prescribed by the legislation

At the end of the period, data is deleted, destroyed or anonymised.

8. Your Rights

Under article 11 of the KVKK, you have the right to:

• Learn whether your personal data is being processed
• Request information where it has been processed
• Learn the purpose of processing and whether the data is used in accordance with that purpose
• Know the third parties to whom the data is transferred, in Türkiye or abroad
• Request correction where the data is incomplete or inaccurate
• Request erasure or destruction where the conditions are met
• Request that correction and erasure be notified to the third parties to whom the data was transferred
• Object to a result adverse to you arising from analysis by automated systems
• Claim compensation for damage suffered as a result of unlawful processing

9. Applications

You may send requests concerning your rights to kvkk@siradakisarki.com or to the postal address above. Applications are concluded within 30 days at the latest and are, as a rule, free of charge.

For account deletion requests you may also use the *Delete My Account* flow within the application.

---

*This is an English translation provided for convenience. The Turkish text ("KVKK Aydınlatma Metni") is the binding version, and prevails in the event of any discrepancy.*