Last updated: August 21, 2026
Under Turkish Personal Data Protection Law No. 6698 ("KVKK"), the data controller is Kodventure Teknoloji Anonim Şirketi. Our address is Tahtakale Mah. Ayçiçeği Sok. No:2/6 İç Kapı No: 2 Avcılar / İstanbul and our email is info@turnigym.com.
Data, purposes, and legal grounds
- Identity and contact: account creation, authentication, gym applications, support, and notices; contract performance, legal obligations, and legitimate interests.
- Membership and transaction: sports business, plan, credit, appointment, QR check-in, and app usage records; service provision, contract performance, and legitimate interests.
- Profile and potentially sensitive data: optional photo, blood group, body measurements, and health notes; to provide the selected feature and, where required, based on separate explicit consent.
- Technical and security: IP, device, session, notification token, and audit records; security, legal obligations, and legitimate interests.
- Payment and support: order, amount, payment status, billing, and support records; contract performance, legal obligations, and establishment/exercise/protection of rights.
- Marketing preferences: campaign consent and communication choices; explicit consent/electronic marketing approval. Permission is optional and may be withdrawn.
Collection method
Data is collected automatically or partly automatically through forms and activity in the mobile app and web panel, QR transactions, records of the relevant sports business, support channels, your device, and PayTR payment result notifications. TurniGym does not collect or store card credentials.
Transfers
As limited by purpose, data may be transferred to the relevant sports business, PayTR, hosting, communication/notification, security and support providers, financial/legal advisers, and authorized public bodies. If an international transfer is required, the conditions and safeguards under Article 9 KVKK apply.
Controller roles
TurniGym is controller for its own account, security, and support activities. Your connected sports business may separately be controller for member management, appointments, and access; you may also address requests concerning those activities to that business.
Retention and your rights
Data is retained for the purpose and applicable legal retention/limitation periods; financial and commercial records may be retained for up to 10 years where required. It is then deleted, destroyed, or anonymized.
You may exercise the rights under Article 11 KVKK, including information, access, correction, deletion/destruction, notification to recipients, objection to automated analysis, and compensation where legally applicable. Submit sufficient identity verification and a description of your request to info@turnigym.com or Tahtakale Mah. Ayçiçeği Sok. No:2/6 İç Kapı No: 2 Avcılar / İstanbul. Requests are resolved within the statutory period.
This notice is not a consent statement. A separate choice is presented where explicit consent is required.