This Privacy Policy sets out the principles regarding the processing, storage, and protection of the personal data of visitors and users of the THE LIGA APP mobile application (“Application”), in accordance with the Constitution of the Republic of Türkiye, the Law on the Protection of Personal Data No. 6698 (“KVKK”), and other applicable legislation.
THE LIGA APP is a mobile information and content platform and does not engage in commercial sales. The data controller is THE LIGA APP (hereinafter referred to as the “Data Controller”).
The Data Controller undertakes to process personal data in compliance with the following principles:
Processing in accordance with the law and the rule of good faith.
Being accurate and, where necessary, up-to-date.
Processing for specific, explicit, and legitimate purposes.
Being relevant, limited, and proportionate to the purpose of processing.
Being retained for the period required by applicable legislation or for the purpose for which they are processed.
During use of the Application, the following categories of personal data may be processed:
| Personal Data Category | Example Data | Purpose of Processing | Legal Basis (KVKK Art. 5/2) |
|---|---|---|---|
| Contact Information | Email address (for feedback or newsletter subscription), IP address | Managing user feedback, delivering requested newsletters, ensuring App security. | Legitimate interest of the Data Controller, provided that it does not harm the fundamental rights and freedoms of the data subject. |
| Transaction Security Information | IP address, session details, device information, operating system and browser type | Monitoring App traffic, preventing malicious activities, improving App performance and security. | Legal obligation (cybersecurity) and legitimate interest of the Data Controller. |
| Marketing Data | Interest segments collected through cookies or mobile analytics, visited screens, approximate location data | Analyzing user behavior, customizing App content, measuring advertising performance. | Explicit consent of the data subject (within the Cookie/Tracking Policy). |
Personal data collected may be transferred to third parties within the scope of the purposes described above and in accordance with KVKK Articles 8 and 9.
Domestic Transfers:
Personal data may be transferred to third-party analytics service providers (e.g., Google Analytics for mobile), cybersecurity service providers, and authorized public institutions when legally required.
International Transfers:
Personal data may be transferred to service providers with servers located abroad (such as Google Firebase, Google Analytics, or cloud-based mobile infrastructure services). Such transfers are carried out in compliance with legal requirements and, where necessary, with the explicit consent of the data subject.
The Application uses cookies, SDKs, and similar tracking technologies to personalize user experience, analyze traffic, measure advertising performance, and improve functionality. Details regarding the use and management of these technologies are explained in the Tracking Technologies Policy.
Every individual has the right to request from the Data Controller:
To learn whether their personal data is being processed,
To request information if personal data has been processed,
To learn the purpose of processing and whether they are used for that purpose,
To know the third parties to whom personal data is transferred domestically or abroad,
To request the correction of incomplete or inaccurate data and notification to third parties,
To request the deletion or destruction of personal data when the reasons requiring processing no longer exist,
To object to the emergence of a result against them by analyzing data exclusively through automated systems,
To request compensation if they suffer damage due to unlawful data processing.
The Data Controller implements technical and administrative measures to ensure the protection of personal data, prevent unauthorized processing, and safeguard stored data.
For your requests related to your rights, you may submit an application to the Data Controller in writing or through other methods defined by the Personal Data Protection Board, as per KVKK Article 13.