PRIVACY NOTICE UNDER THE PERSONAL DATA PROTECTION LAW
Last Updated: October 1, 2026
Under Turkish Personal Data Protection Law No. 6698 (“KVKK”), Mergen Chess — Serkan Soysal processes personal data as data controller. This notice explains what data is processed, for which purposes and legal grounds, how it is collected, to whom it may be transferred and your rights under the KVKK.
Providing this notice and obtaining explicit consent are separate processes. Where processing requires consent, it is requested separately and freely; reading this notice does not by itself constitute consent.
1. Personal Data Processed
- Identity data: name, surname and date of birth
- Contact data: telephone number, email address and, where needed, physical address
- Education data: chess level, Lichess username, tournament analyses, homework, lesson and progress data
- Audio-visual data: lesson and meeting recordings where the required notice and legal conditions are satisfied
- Transaction and invoice data: selected programme, payment status, invoice type and corporate billing details
- Device and usage data: IP address, device type, session and security records, cookies and in-app usage
- Communication preferences: email, SMS and push-notification choices
2. Purposes and Legal Grounds
Data is processed to assess applications; administer enrolment and contracts; plan lessons; track homework and progress; provide coaching and analysis; support users; issue invoices; maintain security; comply with legal duties; and manage disputes.
Processing relies on necessity for establishing or performing a contract, compliance with legal obligations, establishment or protection of legal rights and the controller’s legitimate interests without harming fundamental rights. Promotional use, optional communications and other processing for which the law requires consent rely on explicit consent only where necessary.
3. Collection Methods
Data is collected through website and mobile-app forms, information and files supplied by students and parents, education and support communications, payment and billing processes, and device and application records by automatic, partly automatic or non-automatic means forming part of a filing system.
4. Transfers of Personal Data
Where limited and necessary for the stated purpose, data may be shared with relevant instructors; authorised participants in the same class; payment and billing providers; cloud storage, authentication, video-conferencing, notification and support providers; logistics companies where physical delivery is required; and competent public authorities where legally required.
Where technology services require an international transfer, the KVKK rules on overseas transfers and appropriate safeguards are observed.
5. Retention and Security
Data is retained for the relevant purpose and statutory retention periods, then deleted, destroyed or anonymised. Appropriate access controls, encryption, security logging and authorisation measures are used to prevent unauthorised access.
6. Your Rights Under the KVKK
Article 11 of the KVKK grants rights to learn whether data is processed; request information; learn the purpose and whether data is used accordingly; know recipients; request correction and, where conditions apply, deletion or destruction; request notification of those operations to recipients; object to an adverse result produced exclusively by automated analysis; and claim compensation for unlawful processing.
Requests may be sent with information sufficient to verify identity through the channels below. They are answered free of charge within 30 days according to their nature, unless the law permits a fee for additional cost.