Privacy Policy & Data Protection Notice

In force since 17 September 2026

The personal data you provide through https://iconcreativeevents.com/mastermind-2027 is processed in accordance with Law No. 6698 on the Protection of Personal Data of the Republic of Türkiye (“KVKK”). This notice explains what we collect, why, who we share it with, and for how long we keep it.

1. Data controller

2. What we collect

For reservations and tickets: first and last name, e-mail address, mobile number, company and job title (if provided), country, stay dates, room and bed preference and any special requests.

For others staying in your room: first and last name, and e-mail if you wish. These details are optional — only the room contact's details are required. For children we ask only for their age, because pricing depends on it.

For event participation: participant type, spoken language, simultaneous interpretation needs, transfer request, dietary or allergy notes (if you tell us), and flight details where relevant.

For payment: the amount, the currency, the date, the card brand, the last four digits and the payment institution's transaction reference.

Automatically: your IP address, browser and device information, a session cookie, and server logs of your activity on the site.

We do not ask for identity documents, passports or visa details. Your card details never reach our servers (see section 4).

3. Why we process it

• Performance of a contract (KVKK Art. 5/2-c): creating your reservation, allocating a room, check-in and check-out, issuing your ticket.
• Legal obligation (Art. 5/2-ç): issuing invoices and retaining accounting records.
• Legitimate interest (Art. 5/2-f): planning event operations (interpretation headset counts, transfer lists, badge printing), answering your questions and keeping server logs for security and abuse prevention.
• Consent (Art. 5/1): announcement e-mails, only if you opted in. You can withdraw that consent at any time.

4. Payment details

Your card details are never stored by us and never pass through our servers. Payment is completed on the secure pages of our payment service provider (Stripe). We only receive the outcome (success or failure), a transaction reference and the amount. This is described in more detail in Secure Payment & Delivery.

5. Who we share it with

• The property you stay at: the details needed for room allocation and check-in.
• Payment institutions: to process your payment and any refund.
• Our accounting and invoicing service providers and the competent tax authorities: the details shown on the invoice, as required by law.
• The event operations team: limited to what each role needs (for example a transfer list or an interpretation requirement).
• Our hosting and e-mail providers: strictly as processors, so that the site runs and transactional messages are delivered.
• Public authorities: where disclosure is required by law or by a court order.

We do not sell your personal data or share it for marketing purposes.

6. Transfers abroad

Our servers are located in Türkiye. Where a service provider we use processes data outside Türkiye, the transfer is carried out under the conditions set out in Article 9 of the KVKK.

7. How long we keep it

Reservation and payment records are kept for the retention period required by tax legislation — ten years for invoices and accounting records. Event operation records (interpretation, transfer, badges) are deleted or anonymised within a reasonable period after the event. Correspondence and complaint records are kept for three years from the closure of the matter. Server logs are kept for a limited period for security purposes. At the end of the retention period, data is deleted, destroyed or anonymised.

8. Your rights

Under Article 11 of the KVKK you have the right to learn whether your personal data is processed, to request information about it, to learn the purpose of processing and whether it is used accordingly, to know the third parties to whom it is transferred in Türkiye or abroad, to request correction of incomplete or inaccurate data, to request its erasure or destruction, to request that such actions be notified to those third parties, to object to a result produced solely by automated analysis, and to claim compensation for any damage suffered through unlawful processing.

Please send requests to info@iconcreativeevents.com from the e-mail address registered with your booking, or by signed written application to the address in section 1. We respond within 30 days at the latest, free of charge unless the request requires a disproportionate cost.

9. Cookies

We use strictly necessary cookies only: to keep your session together, to remember your booking selections and to store your language preference. We do not use third-party advertising or profiling trackers. The detail is in the Cookie Policy.

10. Security

Data is transmitted over an encrypted connection (HTTPS). Access to the management panel is permission-controlled and actions are logged. Passwords are stored in an irreversible form, database access uses parameterised queries, and every price is recalculated on the server before payment.

11. Changes

This notice may be updated. The current version is always published on this page with its date of entry into force shown above. The version applicable to your booking is the one in force on the date the booking was made.