Privacy Notice

How personal data is processed on the Insurance Sector League website and at its events

Last updated: 7 October 2026. This is an English translation of our Turkish privacy notice (KVKK Aydınlatma Metni), provided for convenience. If the two versions differ, the Turkish version prevails.

1. Data controller

This notice is issued by Leveldone Events Organizasyon Hizmetleri Ltd. Şti. (“Leveldone”, “we”) as data controller, under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the related Communiqué on the obligation to inform. For visitors from the European Union, it also serves as the information required under the EU General Data Protection Regulation (GDPR).

Address: Altayçeşme Mah. Efe Boz Sok. Freeland Plaza No:12 İç Kapı No:19 Maltepe / İstanbul, Türkiye
Email: info@sigortasektorligi.com  ·  Phone: +90 532 575 73 25

2. What data we process, why, and on what legal basis

2.1 Website visitors

DataPurposeLegal basis
IP address, page visited, date and time, device and browser typeSite security, preventing abuse, visit statisticsLegitimate interest (KVKK Art. 5/2-f; GDPR Art. 6(1)(f))
Strictly necessary cookies and browser storage (session, chosen season and language, cookie choice)Running the siteLegitimate interest and provision of the service (Art. 5/2-c, f; GDPR Art. 6(1)(b), (f))
External media (YouTube) cookiesPlaying match videos on the pageExplicit consent (Art. 5/1; GDPR Art. 6(1)(a)) — see the Cookie Policy

We do not use cookies for analytics, advertising or profiling.

2.2 Team applications and team contacts

Team name, contact person’s name, phone number and (if provided) email address are processed to receive and assess applications, contact you and enter into the participation agreement, on the basis of entering into and performing a contract (Art. 5/2-c). Where travel and accommodation are arranged, flight and transfer details are processed for the same purpose.

2.3 Mixed-team applications

Name, phone, email, company, whether you work in the insurance sector, sport, level and your optional note are processed under Art. 5/2-c to place you in a suitable team and contact you.

2.4 Players

Name, Turkish ID number, date of birth, social security start date, licence information, shirt number, position and photo are processed to verify eligibility (including the share of sector employees), prepare squads and player cards, and manage matches and discipline, under Art. 5/2-c and compliance with legal obligations (Art. 5/2-ç).

Published on the site: name, team, shirt number, position, photo and match statistics (goals, assists, cards, penalty points) are shown publicly, based on our legitimate interest in announcing tournament results (Art. 5/2-f). ID numbers, dates of birth and social security details are never published. Player pages are not indexed by search engines. You can object to publication as described in section 6.

2.5 Event photos and videos, live streaming

Photos and videos are taken at matches and events, and matches may be streamed live on YouTube. Images and audio are processed under legitimate interest (Art. 5/2-f) to document the event, let participants access their own photos (the site’s Photo Archive), inform the public and promote the event. If you ask us to remove a photo from the archive, we will consider your request and respond within a reasonable time.

2.6 Chat assistant (Sporta)

Messages you type into the chat window are sent to our AI service provider, Groq, Inc. (USA), to generate replies. We do not store your messages in our own systems; to prevent abuse we keep only the number of requests together with an irreversible hash of your IP address, for a short time. Please do not type personal data such as ID numbers or health information into the chat.

2.7 Other data processed for the events

Health data: processed only with your explicit consent (Art. 6/2) to assess fitness to play and ensure safe conditions.
CCTV recordings: processed under legitimate interest (Art. 5/2-f) to keep the event area safe.
Financial and accounting data: processed for invoicing and payments under legal obligation (Art. 5/2-ç) and performance of a contract (Art. 5/2-c).

3. Who we share personal data with

Within Türkiye: where required by law, with authorised public bodies; and, limited to the purpose, with accommodation venues, transport and transfer companies, referee and medical teams, accounting and legal advisers, banks, and the hosting company in Türkiye where the website is hosted.

Outside Türkiye: some of our services are provided by suppliers with servers abroad:

These transfers rely on one of the safeguards set out in KVKK Art. 9 (an adequacy decision, standard contractual clauses notified to the Personal Data Protection Board, or your explicit consent). YouTube videos load only if you allow them or start a video yourself.

4. How we collect data

Electronically through the website’s forms (team application, mixed-team sign-up, squad entry), the chat assistant, cookies and server logs; and through email, phone and WhatsApp conversations and registrations and filming at the event venue — by automated or partly automated means.

5. How long we keep data

DataRetention period
Identity and contact data (teams, contacts, players)For the duration of the contract and 10 years after it ends
Financial and accounting data10 years
Match statistics and resultsIndefinitely, as part of the league’s history; on objection the name is anonymised
Mixed-team applications (not placed)1 year from the end of the season
Website visit logs1 year
CCTV recordings2 years
Health dataDuration of the event + 1 year
Event photos and videosKept for archive purposes; removed on request

At the end of the period, data is deleted, destroyed or anonymised.

6. Your rights and how to apply

Under KVKK Art. 11 you have the right to: learn whether your personal data is processed and, if so, request information about it; learn the purpose of processing and whether it is used accordingly; know the third parties it is transferred to; request correction if it is incomplete or inaccurate; request deletion or destruction under KVKK Art. 7; ask that these actions be notified to the third parties it was transferred to; object to an outcome against you resulting solely from automated analysis; and claim compensation if you suffer damage from unlawful processing. Visitors covered by the GDPR also have the right to data portability and to lodge a complaint with a competent supervisory authority.

You can send your request, together with information verifying your identity, in writing to our address above, via registered electronic mail (KEP), secure electronic signature or mobile signature, or from an email address you have previously given us and that is registered in our system, to info@sigortasektorligi.com. Requests are answered free of charge within 30 days at the latest.

Related: Cookie Policy · Cookie preferences