Personal Data Protection Notice (KVKK)
Last Updated: November 2026
This notice has been prepared pursuant to the Turkish Personal Data Protection Law No. 6698 ("KVKK") to inform you about the processing of your personal data. The operator of the QReserve platform is the data controller for personal data collected through the platform. The sports clubs you are a member of are separate data controllers for data within your membership relationship; QReserve acts as a processor (platform service provider) for such data.
1. Data Controller
Trade name: QReserve Yazılım Danışmanlık Limited Şirketi · Business name: QReserve · MERSIS No: 0632157466700001 · Tax ID: 6321574667 · Registered address: ADÜ Teknokent, Ar-Ge Yerleşkesi, Zafer Mah. 152. Cad. No:39-A, Efeler/Aydın, Türkiye · Phone: +90 850 307 88 13 · Email: info@qreserve.net
2. Personal Data Processed
Identity data: name, surname, gender, date of birth, user account details. Contact data: phone number, email address. Transaction data: reservation history, club membership details, lesson/package records. Game and performance data: match history and scores, ELO rating, win/loss statistics, league and tournament participation records. Physical measurement and performance data: body measurements such as height, weight and body mass index, together with test results, recorded as part of performance tests carried out by your club (processed only with your explicit consent). Transaction security data: IP address, device and browser information, login/session records. Usage data: cookie records and platform usage information. Payment and invoice data: for all payments you make through the platform or make to your club and the club records on the platform (whatever the payment method or subject): amount, date, payment method and transaction number, the business you paid, refund requests; name, province, district, full address and invoice email address so that an invoice can be issued; your Turkish ID number if you ask for it to appear on your invoice, or the tax number, tax office and trade name if you ask for the invoice to be issued to a business (optional); the number, date and copy of the invoice issued. Card details such as card number, expiry date and security code are entered on the payment institution's secure payment page; they are not received or stored by QReserve. Legal transaction data: the copy of the pre-information form and distance sales agreement shown to you and approved before payment, the date and time of approval, IP address and browser information.
3. Purposes of Processing
Providing services through the platform; managing user accounts and authentication; carrying out and confirming reservations; collecting card payments and transferring them to the relevant business through the payment institution; recording and tracking, by the business, the payments you make to it; enabling the business you paid to issue you an invoice and delivering that invoice to you; concluding the distance sales agreement and recording and proving your approval; handling refunds and disputes; managing league and tournament organizations and participations; calculating ELO ratings and system statistics and displaying your name, ELO rating, number of matches and club in public club, district and province ranking lists (visitors who are not signed in see your name abbreviated); tracking training and development through performance tests; sending notifications (SMS, email); enabling communication between you and the sports clubs you are a member of; ensuring platform security and preventing misuse; improving services and user experience; performing statistical and analytical studies; fulfilling legal obligations.
4. Collection Method and Legal Bases
Your personal data is collected electronically through registration and membership forms, reservation transactions, payment and invoice information forms, payment and invoice details recorded on the platform by the business administrator (for payments you make directly to the business, your invoice details may be entered by the business administrator with your knowledge), records generated during service use (match results, reservation records, etc.) and cookies and similar technologies. Data is processed on the legal bases of the establishment and performance of a contract (KVKK art. 5/2-c), compliance with legal obligations (art. 5/2-ç), legitimate interest — ensuring platform security and improving services (art. 5/2-f) and, where required, your explicit consent (art. 5/1). Your physical measurement and performance data is processed only on the basis of your explicit consent (art. 6). Payment and invoice data is processed on the legal bases of the establishment and performance of a contract (art. 5/2-c) and compliance with legal obligations (art. 5/2-ç; Tax Procedure Law No. 213 and, for card payments, also Consumer Protection Law No. 6502 and the Distance Contracts Regulation). Agreement approval records are additionally retained for the establishment, exercise or protection of a right (art. 5/2-e). Including your Turkish ID number on the invoice is not mandatory; it is collected only at your own request (or entered by the business administrator with your knowledge) and stored encrypted.
5. Transfers and Hosting Abroad
Your personal data may be shared with the clubs you are a member of (limited to the information necessary to run the membership service), with SMS/notification providers in order to deliver notifications, with cloud/hosting service providers, and with authorized public institutions where legally required. Your data is hosted abroad on Google Cloud infrastructure to provide the service. Your data is never sold or transferred to third parties for marketing purposes; transfers are made in compliance with the KVKK and with the necessary security measures. If you pay by card, your name, email address, phone number, IP address and the payment amount are shared with the payment service provider QReserve works with, licensed under Law No. 6493 (payment institution), to collect the payment and transfer it to the business. Your invoice details (name, address, invoice email address, phone number and, if you requested it, your Turkish ID number or tax number) and the agreement text you approved are shared only with the business you paid, for issuing the invoice and performing the agreement. The business issuing the invoice is a separate data controller for this data. The business may issue the invoice through its own e-invoice/e-archive service provider or choose to issue it through QReserve; in that case your invoice details and the invoice content (service paid for, amount) are shared, on behalf of the business, with the e-invoice private integrator QReserve works with, authorized by the Turkish Revenue Administration, in order to create the e-invoice/e-archive document, submit it to the Revenue Administration and email the invoice to you.
6. Retention Period
Your personal data is retained for as long as required by the processing purposes and, in any case, for the periods stipulated in the applicable legislation. At the end of the retention period, your data is deleted, destroyed or anonymized in accordance with the KVKK and applicable legislation. Specific periods for card payments: the agreement texts and approval records you accept before payment are kept for at least 3 years under the Distance Contracts Regulation and are not deleted during this period even if you delete your account. Invoice details saved in your profile are deleted when you delete your account; however, invoice details recorded on a payment are kept for the period required by tax legislation (10 years).
7. Your Rights under Article 11
You have the right to learn whether your personal data is processed; to request information if it has been processed; to learn the purpose of processing and whether the data is used in line with that purpose; to know the third parties to whom it is transferred domestically or abroad; to request correction of incomplete or inaccurate data; to request deletion or destruction under the conditions set out in the KVKK; to request notification of correction, deletion or destruction operations to third parties to whom the data has been transferred; to object to a result arising against you through analysis exclusively by automated systems; and to claim compensation for damages arising from unlawful processing.
8. How to Exercise Your Rights
To exercise your rights, you can email info@qreserve.net, call +90 850 307 88 13, or submit a written application together with documents verifying your identity to our registered address (ADÜ Teknokent, Ar-Ge Yerleşkesi, Zafer Mah. 152. Cad. No:39-A, Efeler/Aydın, Türkiye). For requests specific to your club membership, you may also apply to the club management. Applications are evaluated and answered within 30 days at the latest in accordance with the KVKK.
9. Security Measures
Technical and administrative measures are taken to protect your personal data against unauthorized access, loss, damage or alteration: secure storage of passwords, secure authentication, access control and authorization mechanisms, and secure data storage and backup infrastructures.
10. Cookies
The platform may use cookies and similar technologies to maintain your session, improve user experience and analyze usage patterns. You can manage your cookie preferences through your browser/device settings.
11. Changes to this Notice
This notice may be updated in line with legislative changes or updates to our practices. Significant changes are announced through the platform; the updated notice takes effect from its publication date.
Related documents: Privacy Policy · Terms of Use