Privacy Policy

For the purposes of this policy, the data controller of your personal data is SKYWAY TRAVEL TURİZM SEYAHAT TİCARET LİMİTED ŞİRKETİ, which operates the 'RaveHunt' brand and the ravehunt.com platform (referred to as the 'Company', 'we', or 'RaveHunt'). 'RaveHunt' is a brand and platform name; the legal entity that operates this brand and acts as data controller is SKYWAY TRAVEL TURİZM SEYAHAT TİCARET LİMİTED ŞİRKETİ.

Our contact and official registration details: Address: Cumhuriyet Mahallesi, İstiklal Caddesi No: 8, Ürgüp / Nevşehir, Türkiye · Phone: +90 384 341 25 20 · Email: contact@ravehunt.com · Web: ravehunt.com.

Ürgüp Tax Office, Tax No: 772 068 38 39 · MERSIS No: 0772068383900014.

RaveHunt is a social and ticketing platform for music events. Events and tickets are created and offered by organizers (sellers); in these sales RaveHunt acts as an intermediary service provider (marketplace) and charges a service fee (commission).

This policy applies to the web services offered through ravehunt.com. The platform is currently available via the web only; a mobile app is not yet live. The platform is intended solely for users aged 18 and over.

Account and identity data: your name or username, your email address, a securely hashed version of your password, and your profile information. We process this data to create your account, verify your identity, and provide access to the platform.

Age verification data: your date of birth or age declaration, used to confirm that you are 18 or older. Purpose: applying the 18+ age limit and preventing use by minors.

Transaction and ticket data: the event tickets you purchase, ticket types, QR code information, the tickets in your wallet, and, when you transfer a ticket to a friend free of charge, the transfer records (the transferring and receiving account details). Tickets may only be transferred for free; resale and scalping are prohibited. Purpose: carrying out ticket sales, adding tickets to your wallet, QR entry, and free transfers.

Event entry (check-in) data: records of your QR code being scanned at the door. These records may be shared with the relevant organizer for entry control.

BPM loyalty point data: BPM is a loyalty point that has no monetary value and is valid only within the app. We process the BPM you earn on each sign-in, your point balance, and records of entry to certain events made using BPM, in order to operate the loyalty programme.

Social interaction data: the content you create on your profile and in the platform's social features, your follow or friend connections, and your interactions.

Payment data: the payment system integration will be set up separately. Once payments are enabled, your card details are processed directly by the payment service provider; RaveHunt does not store your card number. We keep only order and accounting records such as the transaction amount, date, and status.

Technical and usage data: IP address, device and browser information, session logs, approximate (for example city level) location, and usage data collected through cookies. Purpose: secure operation of the platform, prevention of abuse, and improvement of the service.

Communication data: your support requests and correspondence with us. Purpose: handling your requests and providing support services.

You can sign in to the platform with your Google or Apple account. When you choose this method, authentication is carried out by the relevant provider (Google or Apple), and you do not share your password with us.

During this sign-in, we receive from the provider only the minimum data needed to create and identify your account: for example your name, email address, and the unique user identifier (ID) assigned to you by the provider. If you use Sign in with Apple, Apple may, depending on your choice, provide a relay address that hides your real email address.

Your Google or Apple sign-in data is processed solely to verify your identity and provide secure access to your account. The relevant provider also processes this data under its own privacy policy; you can manage or withdraw the permissions you granted for sign-in from the account settings of that provider.

We use strictly necessary cookies to operate the platform, keep your session secure, and remember your preferences. To the extent you allow, we may also use performance and analytics cookies.

Non-essential cookies are based solely on your consent; you can manage or reject them from your browser settings or, where available, from the cookie preference panel.

Detailed information about cookies and similar technologies (their types, durations, and purposes) is set out in our separate Cookie Policy.

To provide our service, we share your data only to the extent necessary and limited to the relevant purpose, with the following parties:

Event organizers (sellers): the ticket and check-in information needed to manage entry and attendance for the event you bought a ticket to. An organizer may act as an independent data controller for the data it processes itself.

Payment service provider: the payment system integration will be set up separately; once enabled, your card and payment information is processed directly by the payment provider under its own privacy terms.

Map service: a map provider (for example Google Maps) may be used to display event locations.

Hosting and infrastructure providers: cloud infrastructure and hosting providers used to securely store data and operate the platform.

Authentication providers: when you sign in with Google or Apple, authentication is carried out through the relevant provider (Google, Apple).

Competent authorities: public authorities and institutions, and judicial bodies, where required by law. Where a transfer abroad is involved, we act in accordance with the conditions required by KVKK (explicit consent or the safeguards provided by law).

We apply appropriate technical and administrative measures to protect your data against unauthorized access, loss, and misuse. These include secure storage of passwords, encryption in transit, access authorization, and database-level access controls.

Once payments are enabled, your card details are not stored on RaveHunt servers; this information is processed securely and directly by the payment provider.

Although no system is 100% secure, in the event of a data breach we act in accordance with the notification obligations required by law.

We retain your personal data only for as long as the processing purpose requires and for the periods stipulated in the relevant legislation.

We keep your account and profile data for as long as your account is active. If you close your account, we delete or anonymize data that is not subject to a legal retention obligation within a reasonable time.

Data subject to a legal obligation, such as transaction, ticket, payment, and accounting records, is retained for the periods required by tax and commercial legislation (as a rule, up to ten years).

RaveHunt is intended solely for users aged 18 and over. We do not knowingly collect personal data from anyone under 18.

If we become aware that we have processed data belonging to a person under 18, we delete the relevant account and data within a reasonable time. If you believe a minor has shared their data with us, please contact us at contact@ravehunt.com.

Under Article 11 of the KVKK, you have the right to learn whether your personal data is processed, to request information if it has been, and to learn the purpose of processing and whether it is used in line with that purpose.

You also have the right to request that your data be corrected, deleted, or destroyed, that these actions be notified to third parties to whom the data has been transferred, to object to processing, and to claim compensation for damage arising from unlawful processing.

To exercise your rights, you can contact us through the channels in the final section. We will conclude your request within the period stipulated by law (at the latest within thirty days). If you are not satisfied with the outcome of your application, you have the right to lodge a complaint with the Personal Data Protection Board.

This Privacy Policy may be updated from time to time in line with changes to our services, the law, or our practices.

The current version is always published on ravehunt.com. Where there are significant changes, we will inform you through appropriate channels. The effective or last updated date is indicated at the beginning or end of this policy.

You can contact us with any questions, requests, or applications regarding this policy and your personal data:

SKYWAY TRAVEL TURİZM SEYAHAT TİCARET LİMİTED ŞİRKETİ (operator of the 'RaveHunt' brand and platform) · Address: Cumhuriyet Mahallesi, İstiklal Caddesi No: 8, Ürgüp / Nevşehir, Türkiye · Phone: +90 384 341 25 20 · Email: contact@ravehunt.com · Web: ravehunt.com.

Ürgüp Tax Office, Tax No: 772 068 38 39 · MERSIS No: 0772068383900014.

You can submit your KVKK-related applications in writing to the address above or by the methods required by law. Your application must include information verifying your identity.