Current Version: 2026-09-16
This page describes use of teniskortum.com and how personal data is processed. By using the platform you acknowledge this notice. It is not a substitute for advice from a qualified lawyer.
Data controller: İhsan Yiğit Özbek (natural person, non-commercial activity). Contact and data-protection requests: [email protected]
teniskortum.com is a community platform for tennis players (court occupancy, matching, related features). It is not a party to private legal, commercial, or in-person arrangements between users.
Current operating model: The service is run without a profit motive at present. The controller may promote the teniskortum.com brand and service (e.g. social media, search, digital or traditional advertising, partnerships, word of mouth); this privacy policy does not forbid ordinary marketing of the website. Today we do not send bulk electronic commercial messages from a promotional list built from user records (e.g. mass marketing e-mail or SMS to subscribers); that line and İYS / Law 6563 are explained in section 13. In the future the service may move to a commercial model (paid features, on-platform ads, broader partnerships, etc.); if so, terms and this notice will be updated in advance and new legal duties assessed separately.
In summary: identity and contact from Google or Apple sign-in; profile fields (username, photo, city/district, date of birth for age rules and display settings, gender, level, bio, preferences); location or search data related to maps and courts; message content; reservations/check-ins; listing text and images; cookies/session identifiers, technical logs, optional client error reports; notification preferences and push identifiers; partner ratings, reliability score, and auto-match records.
Workout and health data (optional, explicit consent only): When you use the workout recording feature in the mobile app, the following data may be processed only with your explicit consent: duration, distance, steps, calories, heart-rate samples, a per-minute heart-rate series (the low, high and average of each slice, used to draw the match chart), per-set and per-game average and peak heart rate, set and game durations, forehand/backhand stroke counts, heart-rate effort zone distribution (time spent in each zone), estimated maximum heart rate, and post-match heart-rate recovery (via Apple HealthKit, Apple Watch, or the phone's own workout recording), and the GPS coordinates of the tennis court (the first location fix taken during the match from the phone or from the Apple Watch itself — for court identification). Each consent (health data and location data) is managed independently and can be withdrawn at any time from the in-app Settings screen; GPS coordinates can be permanently erased on demand.
Purposes: operating accounts and profiles, delivering court/community features, security and abuse prevention, legal compliance, and notifications according to your preferences.
Application servers and the primary database are in Germany. Encryption: Selected identity and contact fields (e.g. e-mail, display name, identity-provider user identifiers, date of birth) and all workout, health and location data (heart-rate samples and series, effort zones, recovery pulse, distance, calories, steps, stroke counts, court and live-map position) are stored encrypted at the application layer with AES-256-GCM; traffic between your browser or app and our servers uses TLS (HTTPS). Message content and some content types may follow separate retention rules as part of the product; not every category of data is encrypted in the same way. Limited transfers may occur to providers such as e-mail delivery, push (e.g. OneSignal), and maps (e.g. Google Maps), possibly in Turkey or abroad. Data are not sold for advertising. Cross-border transfers follow Turkish law and appropriate safeguards.
Account and profile data are kept while your account is active or until a deletion request is fulfilled, subject to mandatory legal retention. Message content is stored permanently; you may request anonymisation of all your personal data at any time by deleting your account.
Match and workout records: A match you delete from your history disappears from your lists and statistics, while the record itself stays in the database marked as deleted. The same match is also your opponent's record, and rankings and statistics were already derived from it. A record in that state is never shown back to you and is stored encrypted. If you want it destroyed outright, ask through the KVKK contact address and the health, location and match data will be permanently erased.
Under Turkish Law No. 6698 you may request information, rectification, erasure where applicable, learn about transfers, object to certain automated outcomes, and seek remedies. Contact: [email protected] — complaints: Turkish Personal Data Protection Authority. See also Data & rights.
We do not guarantee accuracy of listings, messages, or user content. The controller is not liable for harm or disputes arising when users meet or interact offline. Equipment sales, coaching, meetups, etc. are solely users’ responsibility.
Cookies or similar identifiers may be required to stay signed in; blocking them may prevent login.
Processed under platform rules; may change based on accept/reject/expiry and similar behaviour.
Preferences you choose for the community home-feed “find someone to play” flow (e.g. age-band derived from birth date, gender, level — empty selections mean “any”) are used only for matching and notifications; when a session ends or a request is created, records are kept under the same retention rules as other match features.
On the same card you can turn background auto-proposals on or off; when off, proposals are created only when you connect manually from the list (you always confirm in chat).
For new accounts, the in-app preference for auto-match notifications is on by default. You can turn it off anytime in profile settings, or choose to disable it when declining a suggestion. While off, you will not receive home-feed match requests, chat approval reminders, or related notifications (separate from your profile and “seeking partner” setting).
teniskortum.com may use personal data to train artificial intelligence (AI) models for improving the services it offers. Data that may be used for this purpose includes: profile information (level, game preferences, city/district), match records, reservations/check-in history, and notification preferences. Message content is never used for AI training.
Legal basis: Explicit consent under KVKK Art. 5/2-c. Separate consent for this purpose will be requested at your first login; you may continue using the platform without granting it. You may withdraw consent at any time via profile settings or by writing to [email protected].
Third-party sharing: Your data will not be sold or transferred to third parties for AI training purposes. Infrastructure providers used for AI processing are bound as data processors under KVKK and applicable law with appropriate safeguards.
Automated decision-making: Match suggestions may be AI-assisted. To request information, object to an automated outcome, or ask for human review, contact [email protected].
The service is not directed at people under eighteen (18); we do not knowingly collect data from children.
This table is a public summary. The detailed mapping is maintained as an internal document
at
docs/legal/tr/01-kanuni-dayanak-haritasi.md (Turkish) and
docs/legal/en/01-legal-basis-mapping.md (English summary) in the project repository. A lawyer
should validate each line.
| Processing (summary) | Typical legal basis |
|---|---|
| Membership, profile, messaging, listings, reservations/check-in | Performance of a contract Art. 5/2-e |
| Push and optional e-mail (when in-app preferences are on) | Explicit consent Art. 5/2-c (preference/opt-in) |
| Essential security and service notifications | Contract performance and/or legal obligation Art. 5/2-e / f |
| Security, abuse prevention, limited technical logs | Legitimate interest or legal obligation Art. 5/2-f (proportionate) |
| Auto-match and reliability score (linked to feature use and notification settings) | Contract performance, legitimate interest; preferences may rely on Art. 5/2-c |
| Hosting and processor transfers (e.g. DE servers, notification/e-mail vendors) | Service performance; cross-border tools under applicable Turkish rules |
| Service improvement and AI model training | Explicit consent Art. 5/2-c — withdrawable at any time; see section 9 |
| Marketing bulk e-mail / İYS-regulated commercial messages | Not applicable today. The controller is not currently subject to İYS and does not send marketing or promotional bulk electronic messages. If such activity is planned later, Law No. 6563 and İYS rules must be assessed with counsel. |
Sign-in text and this policy provide notice and terms; they are not, alone, explicit consent under Art. 5/2-(c) for every activity.
Separate or strong opt-in examples: push; optional e-mail channels; auto-match notification preferences (on by default for new accounts; can be turned off in settings or when declining a suggestion). You can manage these in app settings.
Special-category data (health and location): Heart-rate data and GPS location coordinates are processed as part of the workout recording feature. These data are collected only after the user reads a separate in-app disclosure and provides explicit consent. Both consent types are independent and may be withdrawn at any time; GPS coordinates can be permanently deleted.
For transparency on automated processing, see section 8; for AI use, see section 9; contact [email protected] for objections or withdrawals.
We may send service-essential messages (e.g. security, booking-related communication, in-app and preference-based notifications).
Current status: The controller is not currently covered by the İleti Yönetim Sistemi (İYS) and does not send marketing or promotional bulk electronic messages (e.g. commercial e-mail campaigns) to users.
If İYS-regulated marketing or bulk promotional communication is introduced later, legal requirements,
registration,
and consent flows will be handled separately with counsel. Internal note:
docs/legal/tr/06-ticari-ileti-iys.md.
Content accuracy is users’ responsibility. Violations of community rules may lead to restrictions or account closure.
Legal or data requests: [email protected]
ROPA, processor DPA checklists, data-breach response drafts, and English summaries live under
docs/legal/ in the repository for audits and operations. This page is the public summary.