KVKK Privacy Notice

Last updated: Mayıs 2026 — https://clubyol.com/en/kvkk

1. Data controller and scope

Under Turkish Law No. 6698 (KVKK), data controller: Erva Global İnşaat Otomotiv Emlak Ticaret ve Sanayi Limited Şirketi (services branded as ClubYol). This notice covers personal data processed during setup, subscription, panel use, referral programme, support and payments on https://clubyol.com. Data controller Seller / Service provider: • Legal name: Erva Global İnşaat Otomotiv Emlak Ticaret ve Sanayi Limited Şirketi • Brand: ClubYol (Codyol ürünü · Erva Group çatı markası) • Address: Gazi Osman Paşa Mah. Yalova-Bursa Yolu Cad. No: 91/1 İç Kapı No: 18, Merkez / Yalova • Trade registry no.: 13533 • MERSİS: 0376030543900001 • Email: destek@clubyol.com • Phone: 0850 308 77 00 • Web: https://clubyol.com

2. Categories of personal data

Identity: name, surname; national ID or tax ID where required; club representative title. Contact: email, phone, address, city/district. Club/organisation: club name, ASKF data, province, logo, sport branch, short description. Financial/payment: invoice title, tax office, billing address, transaction amount, referral code; card data processed only by PayTR, not stored on our platform. Security/transaction: IP, session ID, device/browser data, logs, payment confirmations, contract consent timestamps. Special categories (health, biometric, political opinion, etc.) are not knowingly collected; if you upload such content, you remain responsible.

3. Collection methods and legal basis

Data is collected via web forms, setup wizard, panel, email/SMS, payment provider callbacks and server logs (automated or partly automated). Legal bases (KVKK Art. 5–6): contract performance; legal obligation; legitimate interests (security, fraud prevention, service improvement); explicit consent where required (non-essential marketing/cookies). Payment and early-service consents are recorded separately under distance-sales rules.

4. Purposes of processing

Subscription lifecycle; domain/DNS/site provisioning; payments and invoicing; authentication and abuse prevention; support and disputes; legal compliance; security, backup and disaster recovery; aggregated analytics where possible.

5. Transfers and international transfers

Data may be shared with payment, domain, hosting, email/SMS providers and authorities when necessary. Some infrastructure may be located abroad; transfers follow KVKK Art. 9. We do not sell or rent your data for marketing.

6. Retention

Active subscription period; up to 3 years after expiry; invoice records at least 5 years; security logs typically 2 years; consent records for limitation periods. Data is deleted, anonymised or archived when no longer required.

7. Security measures

Technical: TLS/SSL, access control, firewall, backups, privileged access management. Administrative: policies, confidentiality undertakings, incident response. Breach notifications will follow KVKK where applicable.

8. Your rights (KVKK Art. 11)

You may request information, correction, deletion, objection and compensation where applicable. Applications: destek@clubyol.com — ID verification may be required; response within 30 days. You may complain to the Turkish Personal Data Protection Authority. Withdrawal of consent does not affect lawfulness of prior processing; processing required for the contract may continue.

9. Automated decision-making

We do not profile you or make solely automated decisions with legal effect; pricing and referral discounts use rule-based business logic.

10. Current notice

Published at https://clubyol.com/en/kvkk — Full privacy policy: https://clubyol.com/en/privacy