Privacy
PRIVACY POLICY AND PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA
23.09.2026
This notice has been prepared pursuant to Article 10 of the Law No. 6698 on the Protection of Personal Data and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform, in order to inform data subjects about the personal data processed through the europort.com.tr website and the Europort Istanbul mobile application, and within the scope of the Europort Istanbul exhibition.
1- DATA CONTROLLER
1.1. Your personal data is processed by Bonn Uluslararası Fuarcılık A.Ş. (“Bonn” or the “Company”) in its capacity as data controller.
Information | Details |
Trade name | Bonn Uluslararası Fuarcılık A.Ş. |
MERSIS No | [MERSIS number] |
Address | [Address registered with the trade registry] |
Registered electronic mail (KEP) address | [KEP address] |
E-mail for data protection (KVKK) requests | |
Website | europort.com.tr |
1.2. The Europort Istanbul exhibition is organised by Bonn in cooperation with Rotterdam Ahoy (the Netherlands), under the supervision of the Union of Chambers and Commodity Exchanges of Türkiye (TOBB) pursuant to Law No. 5174.
2- DEFINITIONS
In this notice, the following terms shall mean:
- Law: the Law No. 6698 on the Protection of Personal Data;
- Board: the Personal Data Protection Board;
- Exhibition: the Europort Istanbul exhibition organised by Bonn and the events held within the scope of the exhibition, such as MariMatch and the BlueBridge Maritime Istanbul Forum;
- Website: the website with the domain name europort.com.tr;
- Application: the Europort Istanbul mobile application published on the App Store and Google Play, together with its connected management systems;
- Exhibitor: a company that opens a stand at the Exhibition, and its authorised representatives and employees;
- Visitor: a person who registers to visit the Exhibition or who visits the Exhibition.
3- SCOPE
3.1. This notice covers the following groups of data subjects:
- visitors to the Website;
- persons who subscribe to the newsletter through the Website;
- persons who register as visitors through the online registration page at europort.expoffs.com;
- authorised representatives and employees of Exhibitor companies;
- persons who contact Bonn by e-mail or telephone;
- Exhibitors and Visitors who use the Application;
- Visitors at the Exhibition venue and event participants.
3.2. The Application and the Exhibition are intended for professionals aged 18 or over.
4- PERSONAL DATA PROCESSED
4.1. The following personal data is processed, depending on the group of data subjects:
Data category | Data subject group | Data |
Identity | All (except Website visitors) | Name, surname |
Contact | All (except Website visitors) | E-mail address, telephone number |
Professional information | Exhibitor, Visitor, Application user | Company/firm information, position/title, city |
Customer transaction | Application user | Status as Exhibitor/Visitor, meeting requests and responses, matchmaking records, digital business card sharing records |
Transaction security | Application user, Website visitor | Device type (iOS/Android), push notification device token, and the IP address, date-time and transaction information contained in server and access logs |
Marketing | Newsletter subscribers and persons who have given consent | Consent to commercial electronic messages and preference records |
Visual records | Persons at the Exhibition venue | Photographs and video footage taken at the Exhibition venue |
Cookie data | Website visitor | Data obtained through the cookies and similar technologies specified in the Cookie Policy |
4.2. The Application does not collect location/GPS information. The Application does not collect IP addresses as a separate data field; IP addresses appear only technically in server and access logs.
4.3. Bonn does not request special categories of personal data in the processes covered by this notice. We kindly ask you not to enter special categories of personal data, such as health, religion or political opinion, in profile and message fields.
5 – PURPOSES AND LEGAL GROUNDS OF PROCESSING
5.1. Your personal data is processed for the following purposes and on the basis of the legal grounds set out in Article 5 of the Law:
Purpose | Data | Legal ground |
Creating and managing Application user accounts | Identity, contact, professional information | Art. 5(2)(c): establishment and performance of a contract |
Carrying out Exhibitor and Visitor procedures (registration, badges, admission to the Exhibition, publication of company information in the exhibitor list) | Identity, contact, professional information | Art. 5(2)(c): establishment and performance of a contract |
Carrying out meeting and matchmaking processes | Identity, professional information, customer transaction | Art. 5(2)(c): performance of a contract |
Providing the digital business card feature | Identity, contact, professional information | Art. 5(2)(c): performance of a contract |
Providing push notification services | Device type, push token | Art. 5(2)(c): performance of a contract |
Carrying out communication processes, responding to requests and complaints | Identity, contact | Art. 5(2)(c): performance of a contract; Art. 5(2)(f): legitimate interest |
Ensuring the information security of the Website and the Application, detecting errors and misuse | Transaction security | Art. 5(2)(ç): legal obligation (Art. 12 of the Law); Art. 5(2)(f): legitimate interest |
Sending newsletters and promotional commercial electronic messages | Identity, contact, marketing | Consent obtained pursuant to Art. 6 of Law No. 6563 |
Documenting the Exhibition by photographs and video, and using them in the exhibition report and news | Visual records | Art. 5(2)(f): legitimate interest |
Measuring the use of the Website through non-essential cookies | Cookie data | Art. 5(1): explicit consent |
Submitting the exhibition results report to TOBB | Numerical and statistical information only | Art. 5(2)(ç): legal obligation |
Responding to requests from competent authorities; protecting rights in legal disputes | Relevant data | Art. 5(2)(ç): legal obligation; Art. 5(2)(e): establishment, exercise or protection of a right |
5.2. Your personal data is not sold or rented, and is not used for any purposes other than those specified in this Article.
5.3. Photographs and video footage in which a person is in the foreground and identifiable are used in promotional and advertising materials only with the explicit consent of the data subject. You may request the removal of your image through the channels set out in Article 13.
6- SPECIAL PROVISIONS ON THE MOBILE APPLICATION
6.1. The Application is operated by Eron Software as data processor, on behalf of Bonn and in accordance with Bonn’s instructions. Application data is stored not in a third-party CRM service but on servers located in the data centre of Mars Veri Merkezi Hizmetleri A.Ş. in Istanbul.
6.2. Within the scope of the meeting and matchmaking functions, your name, surname, company, position/title and city may be viewed by other Exhibitors and Visitors registered in the Application; users to whom you send a meeting request or whose request you accept have access to this information.
6.3. When you use the digital business card feature, the information on your business card is transmitted only to the user with whom you share your business card.
6.4. Push notifications are subject to the permission you grant through your device’s operating system. You may turn off notification permission at any time in your device settings.
6.5. The Application includes a function allowing you to delete your account. When you delete your account, your account data is deleted or anonymised in accordance with the periods set out in Article 10.
6.6. Exhibitors and Visitors with whom you share your information or hold meetings process such information under their own responsibility. An exhibitor company is responsible for the commercial messages it sends to you.
7 – TRANSFER OF PERSONAL DATA
7.1. Your personal data may be transferred to the following recipients, limited to the purposes set out in Article 5 and in accordance with Articles 8 and 9 of the Law:
Recipient | Capacity | Purpose of transfer | Location |
Eron Software | Data processor | Development, operation and maintenance of the Application | Türkiye |
Mars Veri Merkezi Hizmetleri A.Ş. | Data processor | Hosting of the Application servers | Türkiye (Istanbul) |
Amazon Web Services (AWS) | Data processor | Hosting of the Website | Abroad(US) |
Fuar Bilgi İşlem | Data processor | Online visitor registration | Türkiye |
NetGSM İletişim ve Bilgi Teknolojileri A.Ş. | Data processor | Sending SMS messages and Message Management System (İYS) operations | Türkiye |
Google (Google Workspace) | Data processor | Provision of the e-mail service | Abroad |
Google (Firebase Cloud Messaging) and Apple (Apple Push Notification service) | Service provider | Delivery of push notifications to your device | Abroad |
Google (Google Tag Manager and the measurement services loaded through it; YouTube) | Service provider | Measuring the use of the Website only with your cookie consent; playing videos embedded in the Website | Abroad |
Cloudflare | Data processor | Security and performance of the Website | Abroad |
Rotterdam Ahoy | Co-organiser | Sales and operational processes for international Exhibitor companies | The Netherlands |
Exhibitors and Visitors with whom you hold meetings or share your business card | Data controller | Establishing the business meeting and communication initiated at your request | Türkiye or abroad |
TOBB | Professional organisation with the status of a public institution | Exhibition results report (statistics only) | Türkiye |
Competent public institutions and organisations, judicial authorities | Public authority | Fulfilment of legal obligations | Türkiye |
7.2. Transfers abroad are carried out, pursuant to Article 9 of the Law, by executing the standard contracts announced by the Board and notifying them to the Personal Data Protection Authority; and, where the counterparty in a meeting or business card exchange is located abroad, as an incidental transfer necessary for the performance of the contract concluded with you, within the scope of the sixth paragraph of Article 9 of the Law.
8 – METHOD OF COLLECTING PERSONAL DATA
Your personal data is collected through the Application registration and profile screens, the meeting and digital business card functions, the online registration page, the newsletter subscription page, e-mail and telephone correspondence, registration and admission procedures at the Exhibition venue, photography and video recording, your device’s operating system, cookies, and server and access logs; by partly automated and partly non-automated means.
9 – COOKIES
9.1. The Website uses cookies that are strictly necessary for the operation and security of the Website. Non-essential cookies are activated only if you give your explicit consent through the cookie banner displayed on your first visit to the Website or through the cookie preferences panel.
9.2. The name, purpose, duration and provider of the cookies used are set out on the europort.com.tr/privacy page. You may change your cookie preferences or withdraw your consent at any time through the cookie preferences panel.
10 – RETENTION PERIODS
10.1. Your personal data is retained for the periods set out below. When the period expires or the reason for processing ceases to exist, the data is erased, destroyed or anonymised in periodic destruction cycles not exceeding six months.
Data | Retention period | Start date |
Application account and profile data | As long as the account remains open; 24 months for inactive accounts | Last log-in or end of the last Exhibition attended (whichever is later) |
Accounts deleted from the Application | Permanent deletion within 30 days; within 90 days at the latest in backups | Deletion request |
Meeting and matchmaking records | 12 months; anonymised thereafter | End of the Exhibition |
Digital business card sharing records | 12 months | End of the Exhibition |
Push notification device token | Immediately, within 7 days at the latest | Log-out, account deletion or invalidation of the token |
Server and access logs (including IP addresses) | 2 years | Date of the record |
Online visitor registrations | 24 months; anonymised thereafter | End of the Exhibition |
Newsletter subscription data | Until consent is withdrawn | – |
Records of consent to commercial electronic messages | 3 years | Withdrawal of consent |
Requests submitted by e-mail and telephone | 2 years | Conclusion of the request |
Data protection (KVKK) applications and responses | 10 years | Conclusion of the application |
11 – DATA SECURITY
11.1. Pursuant to Article 12 of the Law, Bonn takes the necessary technical and organisational measures to ensure an appropriate level of security in order to prevent the unlawful processing of personal data and unlawful access to it, and to ensure its safeguarding. Contracts on the protection of personal data are concluded with data processors.
11.2. If the personal data processed is obtained by others through unlawful means, this shall be notified to the data subject as soon as possible and, in accordance with the Board’s decision, to the Board within 72 hours at the latest.
12 – RIGHTS OF THE DATA SUBJECT
Pursuant to Article 11 of the Law, by applying to Bonn, you have the right to:
- learn whether your personal data is processed;
- request information if your personal data has been processed;
- learn the purpose of processing of your personal data and whether it is used in accordance with its purpose;
- know the third parties to whom your personal data is transferred in Türkiye or abroad;
- request the rectification of your personal data if it is incomplete or inaccurately processed;
- request the erasure or destruction of your personal data under the conditions set out in Article 7 of the Law;
- request that the rectification, erasure and destruction operations be notified to the third parties to whom your personal data has been transferred;
- object to a result to your detriment arising from the analysis of the processed data exclusively through automated systems;
- claim compensation for damage if you suffer damage due to the unlawful processing of your personal data.
13 – APPLICATION PROCEDURE
13.1. Pursuant to the Communiqué on the Procedures and Principles for Applications to the Data Controller, you may submit your requests concerning your rights in Turkish:
- by a petition bearing your wet signature, delivered in person or through a notary public to the address in Article 1;
- to our KEP address with a secure electronic signature or mobile signature;
- from the e-mail address you previously provided to Bonn and that is registered in our system, to [email protected].
Your application must include your name, surname, Turkish ID number (for foreign nationals, nationality and passport number), address for notification, e-mail and telephone number if any, and the subject of your request.
13.2. You may delete your Application account directly through the account deletion function within the Application.
13.3. Your application will be concluded free of charge as soon as possible depending on its nature, and within 30 days at the latest. If the process requires an additional cost, the fee in the tariff determined by the Board may be charged.
13.4. If your application is rejected, if you find the response insufficient, or if no response is given in due time, you may file a complaint with the Board within 30 days from the date you learn of the response and, in any event, within 60 days from the date of application.
13.5. You may withdraw your consent to commercial electronic messages at any time, free of charge, through the opt-out link or opt-out instruction in the messages sent, or through the Message Management System (iys.org.tr or e-Devlet).
14 – AMENDMENTS AND ENTRY INTO FORCE
14.1. This notice may be updated in line with changes in legislation or in our data processing activities. The current version is published, together with its effective date, at europort.com.tr and in the Application.
14.2. In the event of any discrepancy between translations of this notice into other languages and the Turkish text, the Turkish text shall prevail.