1. Data Controller
Your personal data is processed by SMİ, the organiser of the Mobility Vision 2040 event, acting as data controller within the framework of the KVKK and related legislation.
- Address: Esentepe, Kolektif House, Talatpaşa Cd. No:5/1, 34394 Şişli/İstanbul
- E-mail: info@smi.social
- Phone: +90 534 543 98 69
This notice covers only the registration requests submitted through this website and the processing activities carried out for the organisation of the event.
2. Personal Data We Process
If you complete the registration request form, the following categories of personal data are processed:
- Identity data: first name and surname.
- Contact data: e-mail address, phone number.
- Professional experience data: the company or institution you work for, your job title.
- Transaction security data: the IP address from which the request was submitted, browser information, and the date on which the request was created and updated.
- Request management data: any notes you add to the form and your consent preferences (acknowledgement of this notice and the record of your explicit consent for announcements).
No special categories of personal data — such as health data, religious belief or trade union membership — are requested for event registration. Please do not enter such information into the form fields.
3. Purposes of Processing
Your personal data is processed for the following purposes:
- Receiving, verifying and evaluating your request to attend the event.
- Managing capacity and the guest list.
- Informing you of your attendance status and communicating with you as a participant.
- Planning the event organisation and carrying out registration and welcome procedures.
- Responding to the questions, requests and suggestions you send us.
- Where your explicit consent exists, sending announcements, reminders and updates about the event by e-mail and phone.
- Ensuring information security and preventing duplicate, erroneous and automated (bot) submissions.
- Fulfilling legal obligations and establishing, exercising and protecting rights in the event of a dispute.
4. Legal Grounds for Processing
The processing activities carried out for the purposes above rely on the following legal grounds set out in Article 5 of the KVKK:
- KVKK Art. 5/2-(c): Processing is necessary for the personal data of the parties to a contract, provided that it is directly related to the conclusion or performance of that contract — for receiving and evaluating your request and establishing the attendance relationship.
- KVKK Art. 5/2-(f): Processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject — for capacity management, event security and information security measures.
- KVKK Art. 5/2-(ç): Processing is necessary for the data controller to fulfil its legal obligations — for retention and disclosure obligations arising from legislation.
- KVKK Art. 5/1: Explicit consent — solely for sending announcements and updates about the event by e-mail and phone.
Withholding your consent for announcements does not affect the evaluation of your request to attend; you may withdraw this consent at any time.
5. Method of Collection
Your personal data is collected electronically and by partially automated means through the registration request form on this website.
In addition, information you send us by e-mail or phone is processed for the same purposes and on the same legal grounds.
6. Transfer of Personal Data
Your personal data may be transferred to the following groups of recipients, limited to what the purposes of processing require:
- Service providers involved in the organisation of the event (registration and welcome services, the venue operator) — only to the extent necessary to enable your attendance.
- The information technology infrastructure provider hosting the website and the database.
- The e-mail infrastructure provider used to send informational messages.
- Authorised public institutions and judicial authorities, upon request and within the limits prescribed by legislation.
Your personal data is never sold, rented or transferred to third parties for marketing purposes.
Where the servers of the hosting and e-mail delivery infrastructure used are located abroad, such transfers are carried out in accordance with the conditions set out in Article 9 of the KVKK.
7. Retention Period
Your personal data is retained for as long as the purpose of processing requires and, in any case, for a maximum of two (2) years following the completion of the event.
Where legislation prescribes a longer retention period, or where a statute of limitations applies in respect of a potential dispute, retention continues for that period.
For announcements based on explicit consent, your data is retained until you withdraw that consent.
Once the retention period ends, your personal data is deleted, destroyed or anonymised.
8. Your Rights as a Data Subject
Under Article 11 of the KVKK you have the right to apply to the data controller and make the following requests regarding your personal data. The final item reflects your right to withdraw consent in respect of processing activities based on explicit consent.
- To learn whether your personal data is being processed.
- To request information if your personal data has been processed.
- To learn the purpose of the processing of your personal data.
- To learn whether your personal data is used in accordance with that purpose.
- To know the third parties in Türkiye or abroad to whom your personal data has been transferred.
- To request the rectification of your personal data if it has been processed incompletely or inaccurately.
- To request the erasure or destruction of your personal data within the conditions set out in Article 7 of the KVKK.
- To request that any rectification, erasure or destruction carried out at your request be notified to the third parties to whom your personal data has been transferred.
- To object to an outcome to your detriment arising from the analysis of your processed data solely by automated systems.
- To claim compensation for damage suffered as a result of the unlawful processing of your personal data.
- To withdraw, at any time, the explicit consent on which processing is based (the sending of event announcements).
9. How to Exercise Your Rights
You may submit requests concerning the rights listed above in accordance with the procedures set out in the Communiqué on the Procedures and Principles of Application to the Data Controller, either by a signed written petition sent to Esentepe, Kolektif House, Talatpaşa Cd. No:5/1, 34394 Şişli/İstanbul, or by e-mail from the address registered in our system to info@smi.social.
Your application must clearly state your first name and surname, your signature in the case of written applications, your Turkish identity number if you are a citizen of the Republic of Türkiye, your address or e-mail address for notification purposes, and the subject of your request.
Your request will be concluded free of charge as soon as possible and in any case within thirty (30) days, depending on its nature. If responding entails an additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged.
If your application is rejected, if you find the response insufficient, or if no response is provided within the statutory period, you may file a complaint with the Personal Data Protection Board within 30 days of learning of the response and, in any event, within 60 days of the date of your application.
10. Changes to This Notice
This privacy notice may be revised in line with changes in legislation or updates to our data processing activities.
The current version is always published on this page, and its effective date is stated at the top of the text.