1. Data controller
The E-vent mobile app (the “App”) and the e-vent.art website (the “Site”) are published and developed by Final Terminal Bilişim A.Ş. (“Final Terminal”, “we”).
Company: Final Terminal Bilişim A.Ş.
Tax office / number: Uluçınar / 3881737795
MERSIS number: 0388173779500001
Trade registry number: 38346
Address: Muallimköy Mah. Deniz Cad. Muallimköy T.G.B. 1. Etap, 1.1.C1 Blok No: 143/8 İç Kapı No: Z01 Gebze / Kocaeli, Türkiye
Email: privacy@e-vent.art
Hotels that use E-vent may also be data controllers for the data of their own guests and employees. In that case Final Terminal acts as a data processor on behalf of, and on the instructions of, the hotel.
2. What data we process
Guests
- Account details: name, phone number, email address, room number and the hotel you are staying at.
- Reservations: the events you reserve, their date and time, and the reservation status.
- Reviews: ratings and comments you give for events and staff, whether you attended, and whether you would join again.
- Notifications: device notification token (push token), notification permission status, notifications sent to you and whether they were read.
Hotel teams (staff and managers)
- Account details: name, email address, phone number, role, hotel and account status.
- Profile details: optional profile photo, job title, languages spoken and a short bio. These are shown to guests on the events you are assigned to.
- Operational records: assignments, event start and end records, event reports and report photos, and performance data based on guest reviews.
All users
- Technical data: IP address, device and operating system information, session information, error and security logs.
- Support correspondence: information you send us by email.
The App does not collect identity numbers, location, contacts, health data or other special categories of personal data. It contains no advertising or analytics tracking tools.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Creating accounts, signing in and resetting passwords | Performance of a contract (KVKK Art. 5/2-c; GDPR Art. 6(1)(b)) |
| Showing the event schedule, taking and cancelling reservations | Performance of a contract (KVKK Art. 5/2-c; GDPR Art. 6(1)(b)) |
| Reservation confirmations, reminders and event notifications | Performance of a contract; notifications are only sent if you allow them on your device |
| Collecting reviews and reporting them to the hotel | Legitimate interests (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)) |
| Staff assignments, event reports and team performance | Performance of a contract and legitimate interests |
| Automatic translation of event content and comments | Legitimate interests |
| Security, preventing misuse and fixing errors | Legal obligation (KVKK Art. 5/2-ç; GDPR Art. 6(1)(c)) and legitimate interests |
| Answering support and legal requests | Legal obligation and the establishment, exercise or defence of legal claims (KVKK Art. 5/2-e) |
4. Service providers and international transfers
We never sell or rent your personal data. We share it with the following service providers only as far as needed for the service they provide:
| Provider | Service | Data location |
|---|---|---|
| Supabase | Database, authentication, file storage and server functions (all account, reservation, review and report data in the App) | Switzerland (Zurich) |
| OpenAI | Automatic translation of event content, notification texts and review comments (only the text to be translated) | USA |
| Expo (650 Industries) | Delivering notifications to devices (notification token and content) | USA |
| Apple and Google | Delivering notifications to iOS and Android devices; distributing the App on the App Store and Google Play | USA |
| Resend | Sending password reset emails (email address and verification code) | Ireland (EU) |
Transfers to providers outside Türkiye are carried out in line with Article 9 of the KVKK (for example under standard contractual clauses or other safeguards set out in the law). The Site and company email are hosted on our hosting provider’s servers.
5. How long we keep data
- Guest accounts: kept while your account is open; your identity and contact details are deleted immediately when you delete your account.
- Reservations and reviews: after an account is deleted, they may be kept for event statistics as anonymous records with identity and contact details removed.
- Notification records: kept until the account is deleted.
- Staff accounts: kept for as long as the person works with the hotel; when the hotel manager deletes the account, the profile and assignment records are deleted.
- Technical and security logs: kept for our providers’ retention periods, usually between a few days and a few months.
- Backups: system backups are kept for 7 days; deleted data is removed from backups after that period.
Where the law requires a longer retention period, data is kept for that period.
6. Security
Data is sent between your device and our servers over encrypted connections (TLS). The database enforces row-level access rules and role-based permissions, so every user can only access the records their role allows. Passwords must be at least 10 characters long, and passwords found in known data breaches are rejected. Event report photos are stored in a private storage area.
7. Account deletion
Guests can permanently delete their account at any time with Delete My Account at the bottom of the home screen in the App. If you cannot access the App, write to privacy@e-vent.art. See the Account Deletion page for details.
8. Your rights
Under Article 11 of the KVKK, and depending on where you live under laws such as the EU General Data Protection Regulation, you have the right to:
- find out whether your personal data is processed and request information about it,
- learn the purpose of processing and whether data is used accordingly,
- know the third parties in Türkiye or abroad to whom data is transferred,
- ask for incomplete or inaccurate data to be corrected,
- ask for your data to be deleted or destroyed,
- ask for corrections and deletions to be notified to third parties who received the data,
- object to a result against you that arises solely from automated analysis,
- claim compensation for damage caused by unlawful processing,
- where the GDPR applies, restrict processing, object to processing based on legitimate interests and receive your data in a portable format.
Send requests from the email address registered to your account to privacy@e-vent.art, or in writing to the postal address above. Requests are answered free of charge within 30 days at the latest. If your request is refused or you find the answer insufficient, you can complain to the Turkish Personal Data Protection Authority or to the data protection authority where you live.
9. Children
You must be 18 or older to create an E-vent account. Reservations for children’s events are made by a parent or legal guardian from their own account. If we become aware of an account belonging to someone under 18, we delete it.
10. Notifications
The App may send notifications for reservation confirmations, event reminders, event starts and review requests. You can turn notifications off at any time in your device settings. When you sign out, your device notification token is removed from your account.
11. Website
e-vent.art uses no cookies, analytics or advertising tools. The language you choose is stored only in your browser’s local storage so the right page opens on your next visit. Fonts and images are loaded from our own server. Our hosting provider may keep access logs, such as IP address and browser details, for security purposes.
12. Changes and contact
We may update this policy from time to time. We announce significant changes in the App or on the Site, and the current version is always on this page. For privacy questions write to privacy@e-vent.art; for app support write to support@e-vent.art.