HalıSaha+

KVKK Disclosure Notice

Son güncelleme: 2026-09-19

Under the Turkish Personal Data Protection Law No. 6698("KVKK"), Parpali Yazılım ve Bilişim Hizmetleri Tic. Ltd. Şti. ("HalıSaha+") acts as the data controller. Below is how we process your personal data.

1. Data controller

Parpali Yazılım ve Bilişim Hizmetleri Tic. Ltd. Şti.
Contact: info@halisahaplus.com

2. Personal data we process

  • Identity: name, surname, date of birth, gender.
  • Contact: email, phone number, address.
  • Usage: profile photo, play preferences, location, reservation history.
  • Financial: payment method summary (last 4 digits, card brand) — full card data is processed by iyzico and not stored by HalıSaha+.
  • Transaction security: IP, device info, session logs.
  • Customer interaction and communication records: the content of messages you send to our support line via WhatsApp, SMS or email, images and documents shared in them, your WhatsApp profile name, and the delivery status of notifications we send.

3. Processing purposes

  • Account creation, management and identity verification.
  • Creating reservations, roster management, team formation.
  • Payment and refund processing (via iyzico).
  • Customer support and complaint handling.
  • Delivering transactional notifications such as reservation confirmation, cancellation and payment reminders via in-app notification, WhatsApp, SMS and email.
  • Compliance with legal obligations (tax, invoicing, retention).
  • Platform security, fraud prevention and statistical analysis.
  • Ensuring venue and user safety, preventing abuse, and blacklist (restriction) management.

4. Legal basis for processing

  • Explicit consent (e.g. marketing communications).
  • Performance of a contract (membership, reservations and the transactional notifications that come with them).
  • Legal obligation (tax, bookkeeping).
  • Legitimate interest (security, service improvement).

5. Third parties

  • iyzico Ödeme Hizmetleri A.Ş.: execution of payment.
  • Hosting provider: technical delivery of the platform.
  • Message delivery providers: WhatsApp LLC, which operates the WhatsApp Business Platform, for WhatsApp notifications, and Netgsm İletişim ve Bilgi Teknolojileri A.Ş. for SMS. The data shared is limited to the phone number and message content required to deliver the message.
  • Authorities: when legally required.
  • Analytics providers (e.g. Google Analytics): subject to your consent, for anonymized statistics.
  • Venue operators and organizers: only participant information of reservations and matches created at their own venues and events (under the legitimate interest in performing the service and venue safety).

6. Sharing with providers located abroad (KVKK Art. 9)

So that WhatsApp notifications can reach you, your phone number and the message content are shared with WhatsApp LLC (United States), the operator of the WhatsApp Business Platform. Because that company's servers are outside Türkiye, this sharing falls under Article 9 of the KVKK and relies on the "Data Controller to Data Processor" standard contract approved by the Authority's decision no. 2024/959 of 4 June 2024. As required by law, that contract was notified to the Personal Data Protection Authority on 19 September 2026. The sharing is limited to delivering the message; the provider may not use the data for its own purposes. The same principles apply to consent-based analytics services (e.g. Google Analytics). If you prefer notifications by SMS instead of WhatsApp, you can select this in the app's privacy settings; your number is then not shared with WhatsApp LLC.

7. Retention

On account deletion your data is erased within 30 days, including your support conversations and notification delivery records; records kept under tax and commercial law are retained for the statutory period.

8. Your rights (KVKK Art. 11)

  • Right to be informed about processing.
  • Right to access the data.
  • Right to learn which third parties receive data (domestic/international).
  • Right to rectification.
  • Right to erasure.
  • Right to object to automated decision-making.
  • Right to compensation for damages arising from unlawful processing.

9. How to reach us

Send requests to info@halisahaplus.com. We respond within the legally required timeframe.