This English version is provided for information purposes only. This document is governed by and construed in accordance with Turkish law, and the Turkish version is the sole authentic text. In the event of any discrepancy, inconsistency or conflict between the Turkish version and this English version, the Turkish version shall prevail.
This policy explains, in plain language, what information we collect when you use Sporara, why and how we use it, who we share it with, how long we keep it and what control you have over it. For the formal notice required by Article 10 of Law No. 6698 on the Protection of Personal Data (Kişisel Verilerin Korunması Kanunu) see our Personal Data Protection Notice, and for cookies see our Cookie Policy.
1. Who this policy applies to
It applies to everyone who visits the Sporara website, becomes a member, makes a reservation or contacts us. Sporara Teknoloji Ticaret A.Ş. and Esteprime Özel Sağlık Turizm ve Danışmanlık A.Ş. are jointly responsible for your data.
| Data controller | Address | Contact for data requests |
|---|---|---|
| Sporara Teknoloji Ticaret A.Ş. | Halaskargazi Mah. Halaskargazi Cad. Garanti Apt. No: 4 İç Kapı No: 5 Şişli / İstanbul | [email protected] |
| Esteprime Özel Sağlık Turizm ve Danışmanlık A.Ş. | Şirinevler Mah. Adnan Kahveci Blv. Cemal Akın Plaza No: 194 İç Kapı No: 51 Bahçelievler / İstanbul | [email protected] |
Camp and tour products are sold by Esteprime Özel Sağlık Turizm ve Danışmanlık A.Ş.; all other services on the platform are provided by Sporara Teknoloji Ticaret A.Ş. The selling company is shown at the moment of purchase and the applicable distance sales agreement is presented separately: https://sporara.com/mesafeli-satis.
2. What information we collect
2.1. Information you give us
- Account details: name, e-mail, telephone, your password (stored irreversibly, never in plain text), your profile photograph if any and your sport preferences.
- Reservation details: the listing you choose, date and time, number of participants and participant details, billing details and any notes you add.
- Contact and support: messages you send us, support requests and correspondence with operators through the platform.
- Reviews and ratings: the score and comments you leave for a service you attended, which may be published together with your name or username.
2.2. Information generated automatically by your use
- Device and log data: IP address, browser and operating system, pages visited, clicks, error records and session information.
- Cookies and similar technologies: see the Cookie Policy for details.
- Location: at province level only. We derive your approximate province from your IP address and use your device location for features such as “near me” only if you grant permission. We do not track street- or building-level location and we do not sell location data to advertisers.
2.3. Payment information
We do not see or store your card number, expiry date or security code. Payments are taken through the secure infrastructure of a licensed payment institution; we only receive the result of the transaction, its amount, a reference number and de-identified details such as the last four digits of the card.
3. Why we use this information
- To create and manage your account and let you sign in.
- To take your reservation, process your payment and issue and deliver your e-ticket.
- To pass the necessary information to the sports centre, instructor or tour/camp operator who will deliver the service.
- To handle change, cancellation, refund and support requests.
- To show listings relevant to your province and interests and to improve search results.
- To keep the service secure and prevent fake accounts and misuse.
- To meet our legal obligations (invoicing, accounting, log retention).
- To send campaign and discount notifications where you have consented.
4. Who we share it with
- The party delivering the service: the sports centre, facility, instructor or operator offering the listing, limited to what is needed to deliver it.
- Payment institutions and banks: for payment, refund and chargeback processes.
- Infrastructure providers: cloud and hosting, e-mail and SMS delivery, security and analytics. They process your data only on our instructions and under contract.
- Courier companies: where a physical shipment is involved.
- Our advisers: accounting, legal and audit services, to the extent necessary.
- Competent authorities: public bodies and courts where required by law.
We do not sell, rent or trade your information for marketing purposes.
Some infrastructure providers may be located abroad. Any such transfer is made in accordance with Article 9 of Law No. 6698 — to countries with adequate protection, under appropriate safeguards such as standard contractual clauses, or under a statutory exception.
5. How long we keep your data
- Account details are kept for as long as your membership continues.
- Reservation, payment and invoice records are kept for 10 years under tax and commercial legislation, even if you close your account.
- Log and traffic records are kept for at least 2 years under Law No. 5651.
- Commercial electronic message consent records are kept for 3 years after consent is withdrawn.
- Support correspondence is kept for 10 years after the request is closed.
At the end of these periods your data is deleted, destroyed or anonymised so that it can no longer be linked to you.
6. How we protect your data
- The site and all form submissions use encrypted TLS connections.
- Passwords are stored using irreversible algorithms.
- Access to data is limited to staff who need it for their role, and access rights are reviewed regularly.
- Patching, backup, logging and intrusion prevention measures are applied at server and application level.
- Data processing agreements and confidentiality undertakings are signed with our service providers.
No system is completely secure. In the event of a data breach we notify the Personal Data Protection Board and the affected users within the periods required by law. We recommend that you use a strong, unique password and never share it.
7. Children’s data
Sporara membership is intended for people aged 18 and over. Persons under 18 may not open an account in their own name or make reservations directly.
The platform includes listings aimed at children, such as summer schools, children’s courses and children’s camps. For those listings the reservation is made by a parent or legal guardian through their own account. Anyone entering a child’s name, age or, where the service requires it, a health declaration is deemed to confirm that they are the child’s parent or legal guardian and are authorised to share that information. A child’s data is shared only with the relevant sports centre or operator and only to deliver the service and ensure safety; we do not profile or market to children.
If you become aware that data relating to a person under 18 is on the platform without parental consent, please contact us through the channels below and we will delete it without delay.
8. Marketing messages and withdrawing consent
Commercial electronic messages (e-mail, SMS, notifications) about campaigns, discounts and promotions are sent only with your consent under Law No. 6563 on the Regulation of Electronic Commerce (Elektronik Ticaretin Düzenlenmesi Hakkında Kanun). Your consents are registered with the Message Management System (İleti Yönetim Sistemi, İYS).
You may withdraw your consent at any time and without giving a reason:
- from the communication preferences section of your account settings;
- using the opt-out link or reply message included in every communication;
- through İYS;
- by writing to us using the contact channels below.
Transactional notifications such as reservation confirmations, e-tickets, payment and cancellation notices are not commercial messages; they are sent to perform the service and cannot be opted out of while you continue to use it.
9. Your rights
You have the right to learn whether your data is processed, to request information about it, to have it rectified, erased or destroyed, to know the third parties to whom it has been transferred, to object to adverse results produced solely by automated analysis and to claim compensation for damage. The full list of rights and the formal application procedure are set out in the Personal Data Protection Notice.
You can do much of this yourself from your account: update your profile, change your communication preferences and request closure of your account. Formal application channels:
- Sporara Teknoloji Ticaret A.Ş.
- By post: Halaskargazi Mah. Halaskargazi Cad. Garanti Apt. No: 4 İç Kapı No: 5 Şişli / İstanbul
- By e-mail: [email protected]
- Esteprime Özel Sağlık Turizm ve Danışmanlık A.Ş.
- By post: Şirinevler Mah. Adnan Kahveci Blv. Cemal Akın Plaza No: 194 İç Kapı No: 51 Bahçelievler / İstanbul
- By e-mail: [email protected]
10. Changes to this policy
We may update this policy to reflect changes in our services or in the law. The current text is always published at https://sporara.com/privacy. We announce material changes on the platform and by notification to your registered e-mail address before they take effect, and we ask for renewed consent where the nature of the change requires it.