Cookie Policy

This Cookie Policy has been prepared to inform visitors and users about the data processing carried out through cookies and similar technologies used on the Müzik Hackathon website (the "Platform"). It has been drawn up taking into account Law No. 6698 on the Protection of Personal Data ("KVKK"), the related secondary legislation, and the Guidelines on Cookie Practices published by the Turkish Personal Data Protection Authority.

1. DATA CONTROLLER

For personal data processed through cookies, the data controller is the Konya Büyükşehir Belediyesi, which runs the Müzik Hackathon event as part of Genç Kültür Kart (the "Municipality" or the "Data Controller"). Müzik Hackathon and Genç Kültür Kart operate within the Municipality and within the scope of the project in delivering the related digital services.

Project contact address: Bosna Hersek, Osmanlı Cd. No: 2, 42250 Selçuklu/Konya. Requests under the KVKK must be submitted through the current official application channels announced by the Municipality.

2. WHAT IS A COOKIE?

Cookies are small data files stored through your browser or device when you visit a website. They may be used to keep a session running, to recognise a user securely, to make core site features work, and to maintain technical security. Cookies are not always personal data on their own; however, the personal data processing rules under the KVKK apply to the extent that a cookie can be linked to an identified or identifiable natural person.

Server access logs, IP records, error logs and similar transaction security records are technical records kept separately from cookies. The principles governing the processing of those records are explained separately in the Müzik Hackathon KVKK Privacy Notice.

3. COOKIES USED ON THE PLATFORM

Under the Platform's current model, only strictly necessary cookies are intended to be used, so that the site and the member panel work securely and correctly. As things stand, the Platform does not use advertising or marketing cookies aimed at advertising, retargeting, or tracking user behaviour on behalf of third parties.

Strictly necessary cookies are required to deliver the digital service the user has expressly requested, to keep the session running, to authenticate users and to maintain security. They may therefore be used on the basis of the lawful processing conditions set out in Article 5(2) of the KVKK. No separate explicit consent is required for these cookies.

If the cookie inventory changes for technical reasons, the purpose, party, type, retention period and legal basis of the cookie in use are reviewed against the new situation and this Policy is updated accordingly.

4. NON-ESSENTIAL COOKIES AND EXPLICIT CONSENT

If functional, performance/analytics, or advertising/marketing cookies that are not strictly necessary are added to the Platform in future, the related processing activity will be assessed separately under the KVKK. Non-essential cookies for which explicit consent is the only valid processing condition are not run automatically on a user's first visit to the site.

Where such cookies need to be used, users are given clear, plain-language information about the cookie categories, an active choice is obtained from them, and they are able to choose freely between "Accept" and "Reject". Pre-ticked boxes, silence, continued use of the site, or merely linking to the cookie policy are not treated as explicit consent.

Declining non-essential cookies is not on its own a reason to block access to the Platform's core membership, sign-in and application features, which work with strictly necessary cookies.

5. THIRD-PARTY COOKIES AND EMBEDDED CONTENT

The Platform's current policy does not provide for the use of third-party cookies for advertising or tracking. If third-party services such as YouTube, social media, maps, analytics or advertising are embedded in the Platform in future and run cookies or similar tracking technologies on the user's device, the cookie inventory and the related KVKK obligations, including international data transfers, will be assessed separately before any such use is enabled.

Third-party cookies that require explicit consent are not run unless the user has clearly given consent. The relevant provider's own policies may also apply to that provider's own data processing.

6. DATA THAT MAY BE COLLECTED THROUGH COOKIES

Depending on the nature of the cookie, the following may be processed: session ID, sign-in/session status, technical security tokens, the time of a visit or transaction, and the limited technical information needed for the cookie to work. Strictly necessary cookies are not used to build advertising profiles from user behaviour or for third-party ad targeting.

Cookie data is matched with other personal data only to the extent that this is necessary, proportionate and lawful for the relevant processing purpose.

7. TRANSFER OF PERSONAL DATA AND INTERNATIONAL TRANSFERS

Data obtained from strictly necessary cookies may be transferred, for the secure operation of the Platform and the provision of technical services, to the authorised units within the Municipality and — only as far as necessary to deliver the service — to data processors providing hosting, software, maintenance and information security services. Transfers to authorised public institutions and organisations are made only within the scope of legal powers and obligations.

If a service is to be used that involves transferring personal data abroad through cookies or similar technologies, the transfer conditions and appropriate safeguards set out in Article 9 of the KVKK will be put in place before the transfer begins. Where necessary, this Policy and the KVKK Privacy Notice will be updated.

8. HOW LONG COOKIES ARE STORED

Cookies are stored only for as long as their purpose requires. As a rule, the current strictly necessary session cookie is used only while the user's session is active, or for the technical period needed to end the session securely. Cookies whose retention period has expired or whose purpose no longer applies are no longer used for that purpose.

Retention periods for personal data obtained through cookies and also processed in server logs are governed by the principles set out in the Müzik Hackathon KVKK Privacy Notice, according to the data category and processing purpose concerned.

9. MANAGING AND DELETING COOKIES

Users can view, delete or block cookies through their browser settings. How these settings are changed varies from browser to browser and device to device.

• If strictly necessary cookies are blocked entirely, signing in to a membership account, keeping a session secure, or some core features of the application panel may not work.
• Where non-essential cookies are used, users are given an accessible preference tool on the Platform, in addition to their browser settings, so they can change their cookie choices later.
• Deleting a cookie from your browser does not automatically delete transaction or security records already created lawfully on the server side.

10. USERS AGED 15-17

The Platform, as it currently stands, does not provide for the use of non-essential advertising, behavioural tracking or profiling cookies for users aged 15-17. If the use of such technology is considered in future, those cookies will not be enabled until the legal basis for the processing and, where required, the legal guardian process have been assessed separately.

11. YOUR RIGHTS UNDER THE KVKK

Data subjects whose personal data is processed through cookies may exercise their rights under Article 11 of the KVKK: to learn whether their personal data is processed; to request information if it has been processed; to learn the purpose of processing and whether the data is used in line with that purpose; to know the third parties to whom the data has been transferred; to request the correction of incomplete or inaccurate data; to request erasure or destruction where the conditions are met; and to exercise the other rights set out in the Law.

Requests concerning these rights may be sent to the Data Controller through the current KVKK application methods announced by the Konya Büyükşehir Belediyesi. For further details, please see the Müzik Hackathon KVKK Privacy Notice.

12. UPDATES TO THIS POLICY

This Policy is updated whenever there is a change in cookie use, in the providers involved, in cookie categories, in retention periods, or in the applicable legal bases. If a new non-essential cookie requires explicit consent, it will not be run until the necessary information and choice mechanism are in place.

The current Cookie Policy is published in an accessible form on the Platform. Depending on their nature, significant changes may be announced to users through the Platform or through other suitable communication channels.