BIKORT PERSONAL DATA PROCESSING NOTICE (KVKK)

This Notice has been prepared to inform you about the processing of your personal data under the Law on the Protection of Personal Data No. 6698 ("KVKK").

BEEASİST TEKNOLOJİ ANONİM ŞİRKETİ

Esentepe Mah. Atom Sk. Kanyon Apt. Blok No: 20, İç Kapı No: 5, 34394 Şişli / İstanbul

E-posta: asist@beeasist.com

Telefon: +90 212 909 25 22

The Bikort website, mobile application, and related digital services are collectively referred to as the "Platform" in this Notice.

Identity Information: name, surname, account identity/ID information, age or verification information that the person is over 18.

Contact Information: phone number, email address, and other contact information shared in support/communication processes.

Profile Information: profile photo, username, sport, playing level, and other profile information shared voluntarily by the User.

Location Information: approximate or precise location depending on device permissions, location coordinates, and related technical records.

Reservation and Transaction Information: reservation history, Club/court, date-time, cancellation/refund records, transaction numbers, and service usage history.

Payment Information: payment method, payment status, transaction amount, payment/refund references, and transaction records. Full card details may be processed through the payment service provider's infrastructure and may not be stored directly by Bikort.

Sports, Match, and Performance Information: match history, scores, results, win/loss information, level/points, performance indicators, and open match and tournament participation/result information.

Social Interaction and Safety Information: open matches, player lists, matchmaking, complaints, and safety reports.

Transaction Security and Technical Information: IP address, device, operating system, browser, session/login, security, error, and abuse-prevention logs.

Usage and Analytics Information: screens/pages visited, click and interaction data, records from cookies and similar technologies, and application and web performance measurements.

Request and Complaint Information: support requests, complaints, email and support correspondence, and reservation and payment disputes.

Marketing and Communication Preferences: where the required consent exists, campaign/communication preferences and commercial electronic message opt-in and opt-out records.

Your personal data are processed within the framework of the following core activities and the corresponding legal bases. Not every data processing activity is based on explicit consent; explicit consent is obtained only where required for the relevant activity.

Processing Activity / Purpose

Primary Data Categories

Primary Legal Basis

Account creation, identity verification, and membership management

Identity, contact, account, and transaction security

Establishment or performance of a contract; legal obligation; legitimate interest

Providing court/facility reservation, open match, tournament, and lesson request features

Identity, contact, profile, reservation, sports/performance, location (if permitted)

Establishment or performance of a contract; legitimate interest; required permission/explicit consent depending on the nature of the location feature

Payment, refund, invoicing, and financial processes

Identity, contact, reservation, and payment transaction information

Performance of a contract; legal obligation; establishment, exercise, or protection of a right

Security and prevention of fraud and abuse

Transaction security, technical, usage, complaint, and transaction information

Legitimate interest; establishment, exercise, or protection of a right; legal obligation

Customer support, request, and dispute management

Identity, contact, request/complaint, reservation, and payment information

Performance of a contract; establishment, exercise, or protection of a right; legitimate interest

Analytics and product development

Usage and analytics, technical information

Legitimate interest or, where required depending on the nature of the technology, explicit consent

Marketing and campaign communications

Contact, marketing preferences, and interaction information

Where required, explicit consent and/or consent under applicable electronic messaging legislation

Location information is processed only if the User grants the required permission via the device or the Platform. Location may be used to provide nearby clubs and courts, open matches and tournaments, coaches, and other location-based features. The User may turn off location permission at any time in device settings.

For open match, tournament, and similar social features to be used, depending on the nature of the feature, the User's name, profile photo, sport, level or points information, number of matches, performance indicators, and related participation information may be shown to other Users. Bikort aims not to display contact and private account information openly to other Users when such information is not required for the relevant feature to function.

Your personal data may be transferred, limited to the purposes of processing and in accordance with applicable legislation, to the following recipient groups:

Relevant Clubs and service providers for the conduct of reservation and service processes.

Coaches and organizational parties for the conduct of lessons, tournaments, or related services.

Payment service providers, banks, and financial institutions for payment, collection, marketplace payment, refund, and financial transactions.

Cloud/hosting, database, content management, email, SMS, notification, analytics, security, customer support, map/location, and software infrastructure providers.

Legal, accounting, and other professional advisors for the establishment, exercise, or protection of a right and for legal and financial obligations.

Competent public institutions and organizations within the scope of legal obligations or lawful requests.

The systems of some technology, analytics, communication, content management, hosting, and similar service providers used by Bikort may be located abroad or may process data abroad. Where personal data must be transferred abroad, the transfer is carried out in accordance with Article 9 of the KVKK and the conditions set out in relevant secondary legislation.

Beeasist uses an adequacy decision, appropriate safeguards, standard contractual clauses, or other transfer mechanisms provided for by legislation, as applicable to the relevant transfer. Cross-border transfer mechanisms are assessed separately according to the service provider used and the data flow, and are updated when necessary.

Your personal data may be collected wholly or partly by automated means through membership and account creation forms, Platform transactions, reservation and payment processes, open match, tournament, and private lesson features, profile and content uploaded by the User, support and communication channels, device permissions, cookies and similar technologies, system/security/usage logs, and transaction records received from payment and technical service providers.

Your personal data are retained for as long as required by the relevant processing purpose and taking into account the statute of limitations, retention, and presentation periods set out in applicable legislation. When the purposes of processing and the conditions for processing personal data have entirely ceased, your personal data are deleted, destroyed, or anonymized in accordance with legislation. Closing an account may not mean that certain records required by legislation are deleted immediately.

Beeasist takes technical and administrative measures appropriate to the risk and the nature of the data to prevent unlawful processing of and access to personal data and to ensure that data are stored securely. These measures may include access authorizations, secure authentication, system and security logs, backup, technical security controls, and contractual obligations of service providers.

Operational messages required for reservation confirmation, payment notice, security notice, account transactions, and performance of the service are separate from marketing communications. Campaign, discount, promotional, and marketing electronic messages are sent based on the User's separately given consent where required.

The Bikort website and Platform may use technically necessary cookies and, depending on the User's preferences and applicable legislation, analytics and similar technologies. Detailed information is explained in the Bikort Cookie Policy.

Bikort services are not intended for persons who have not reached the age of 18. Bikort may close the accounts of persons it identifies as under 18 and may subject personal data to processing, retention, or destruction processes in accordance with applicable legislation.

To learn whether your personal data are being processed.

If processed, to request information relating thereto.

To learn the purpose of processing and whether they are used in accordance with that purpose.

To know the third parties to whom they are transferred domestically or abroad.

To request correction if they have been processed incompletely or inaccurately.

To request deletion or destruction if the conditions set out in the law are met.

To request that correction, deletion, or destruction operations be notified to third parties to whom the data have been transferred.

To object to a result against you arising from analysis exclusively by automated systems.

To request compensation for damage if you suffer harm due to unlawful processing of your personal data.

You may submit your requests under the KVKK to Beeasist by methods compliant with the Communiqué on the Procedures and Principles of Application to the Data Controller and applicable legislation. Depending on the nature of the application, information or documents verifying your identity may be requested. Applications are assessed and concluded within the periods set out in the KVKK.

BEEASİST TEKNOLOJİ ANONİM ŞİRKETİ

Esentepe Mah. Atom Sk. Kanyon Apt. Blok No: 20, İç Kapı No: 5, 34394 Şişli / İstanbul

E-posta: asist@beeasist.com

Telefon: +90 212 909 25 22

Beeasist may update this Notice in line with changes in legislation, Platform features, data processing activities, or the technology infrastructures used. The current version is kept accessible via the Platform. Changes that materially affect users' rights or data processing activities may be announced by appropriate methods.