Cookie Policy

MÜZİK HACKATHON WEBSITE COOKIE POLICY

This Cookie Policy has been prepared to inform visitors and users about the data processing activities carried out through the cookies and similar technologies used on the Müzik Hackathon website (the "Platform"). It has been drawn up with regard to the Personal Data Protection Law No. 6698 — KVKK (Turkey's data protection law) — the related secondary legislation, and the Guideline on Cookie Practices published by the Turkish Personal Data Protection Authority.

1. DATA CONTROLLER

For personal data processed through cookies, the data controller is Konya Metropolitan Municipality (the "Municipality" or "Data Controller"), which runs the Müzik Hackathon event under the Genç Kültür Kart programme. Müzik Hackathon and Genç Kültür Kart operate within the Municipality and the scope of the project in delivering the related digital services.

Project contact address: Bosna Hersek, Osmanlı Cd. No: 2, 42250 Selçuklu/Konya. Applications under the KVKK must be made through the current official application channels announced by the Municipality.

2. WHAT IS A COOKIE?

Cookies are small data files stored via your browser or device when you visit a website. They can be used to keep your session active, recognise you securely, run essential site functions and maintain technical security. A cookie is not necessarily personal data in every case on its own; however, to the extent it can be linked to an identified or identifiable natural person, the personal data processing rules under the KVKK apply.

Server access logs, IP records, error logs and similar transaction security records are technical records separate from cookies. The principles governing their processing are explained separately in the Müzik Hackathon KVKK privacy notice.

3. COOKIES USED ON THE PLATFORM

Under the Platform's current usage model, only the essential cookies needed for the site and the member panel to run securely and properly are intended to be used. In its current form, the Platform uses no advertising or marketing cookies for advertising, retargeting or tracking user behaviour on behalf of third parties.

As essential cookies are necessary to deliver the digital service the user has expressly requested, keep the session active, authenticate the user and maintain security, they may be used on the basis of the applicable processing conditions set out in Article 5(2) of the KVKK. Separate explicit consent is not required for these cookies.

If there is a technical change to the cookie inventory, the purpose, party, type, retention period and legal basis of the cookies used are reviewed against the current situation and this Policy is updated as needed.

4. NON-ESSENTIAL COOKIES AND EXPLICIT CONSENT

If functional, performance/analytics or advertising/marketing cookies that are not strictly necessary are added to the Platform in the future, the related data processing activity will be assessed separately under the KVKK. Non-essential cookies with no valid processing condition other than explicit consent are not run automatically on the user's first visit to the site.

Where such cookies need to be used, the user is given clear and understandable information about the cookie categories; an active choice is obtained from the user, who can choose freely between "Accept" and "Reject". Pre-ticked boxes, silence, continued use of the site or a mere link to the cookie policy are not treated as explicit consent.

Declining non-essential cookies is not, on its own, grounds for blocking access to the Platform's core membership, sign-in and application functions, which run on essential cookies alone.

5. THIRD-PARTY COOKIES AND EMBEDDED CONTENT

The current Platform policy does not envisage the use of third-party cookies for advertising or tracking. If third-party services such as YouTube, social media, maps, analytics or advertising are embedded in the Platform in the future and run cookies or similar tracking technologies on the user's device, the related KVKK obligations — including the cookie inventory and international data transfers — will be assessed separately before such use is enabled.

Third-party cookies requiring explicit consent are not run until the user has clearly given consent. The relevant provider's own policies may also apply to that provider's data processing activities.

6. DATA THAT MAY BE COLLECTED THROUGH COOKIES

Depending on the nature of the cookie, the session ID, sign-in/session status, technical security tokens, visit or transaction time, and the limited technical information needed for the cookie to work may be processed. Essential cookies are not used to build advertising profiles of user behaviour or for third-party ad targeting.

Cookie data is matched with other personal data only to the extent necessary, proportionate and lawful for the relevant processing purpose.

7. TRANSFER OF PERSONAL DATA AND INTERNATIONAL TRANSFERS

Data obtained from essential cookies may be shared, for the secure operation of the Platform and the provision of technical services, with authorised units within the Municipality and, to the extent necessary to deliver the service, with data processors providing hosting, software, maintenance and information security services. Transfers to authorised public institutions and bodies are made only within the scope of legal powers and obligations.

If a service that involves transferring personal data abroad through cookies or similar technologies is to be used, the transfer conditions and appropriate safeguards set out in Article 9 of the KVKK will be ensured before the transfer begins. Where necessary, this Policy and the KVKK privacy notice will be updated.

8. COOKIE RETENTION PERIODS

Cookies are kept only for as long as their purposes require. The current essential session cookie is, as a rule, used for the duration of the user's session or for the technical period needed to end the session securely. Cookies whose retention period has expired or whose purpose no longer applies are no longer used for that purpose.

The retention periods for personal data obtained through cookies and additionally processed in server records are subject to the principles set out in the Müzik Hackathon KVKK privacy notice, according to the data category and processing purpose.

9. MANAGING AND DELETING COOKIES

Users can view, delete or block cookies through their browser settings. How to change these settings varies by browser and device.

• If essential cookies are blocked entirely, signing in to a member account, keeping a secure session active, or some core functions of the application panel may not work.

• If non-essential cookies are used, the user is offered, in addition to browser settings, an accessible preference mechanism on the Platform for changing their cookie choices later.

• Deleting a cookie from the browser does not automatically delete transaction or security records previously created lawfully on the server side.

10. USERS AGED 15-17

The Platform's current design does not envisage the use of non-essential advertising, behavioural tracking or profiling cookies for users aged 15-17. Should such technology be considered in the future, those cookies will not be enabled without a separate assessment of the legal basis for the processing and, where required, the legal guardian process.

11. RIGHTS UNDER THE KVKK

Individuals whose personal data is processed through cookies may, under Article 11 of the KVKK, learn whether their personal data is being processed, request information if it has been, learn the purpose of the processing and whether the data is used in line with that purpose, know the third parties to whom the data is transferred, request the correction of incomplete or inaccurate data, request deletion or destruction where the conditions are met, and exercise their other rights set out in the Law.

Applications concerning these rights may be submitted to the Data Controller through the current KVKK application methods announced by Konya Metropolitan Municipality. See the Müzik Hackathon KVKK privacy notice for further details.

12. UPDATES TO THIS POLICY

This Policy is updated when there are changes to cookie usage, the providers used, the cookie categories, the retention periods or the related legal bases. If the use of a new non-essential cookie requires explicit consent, that cookie is not run until the necessary information and preference mechanism are in place.

The current Cookie Policy is published in an accessible form on the Platform. Depending on their nature, significant changes may be announced to users on the Platform or through other appropriate channels.