1. Data controller
- Operator
- Ertuğrul Çetrefli – Fethi Online
- Address
- Piripaşa Mah. Viran Aralığı Sok. No: 6 Daire: 10, Beyoğlu / İstanbul
- Tax office / no.
- Kasımpaşa / 35695458690
- [email protected]
The Turkish text is the binding version; this English text is a translation.
2. Personal data we process
- Account data: account name, e-mail address, password, account language, account creation date, date and IP address of your consent to the terms.
- Connection and security logs: IP address, login and logout times.
- Purchase records: amount of FO bought, price, date, the payment provider's transaction number and your acceptance of the Terms of Sale. Your card details are not passed to us.
- Game data: characters, items, in-game actions, in-game messages and game logs.
- Support correspondence: e-mails you send us.
3. Purposes and legal bases
| Purpose | Legal basis (KVKK art. 5(2)) |
|---|---|
| Creating the account, login, providing the game, e-mail verification and password reset | (c) formation and performance of the contract |
| Selling and delivering FO, keeping sales records | (c) performance of the contract, (ç) legal obligation |
| Preventing cheating, bots, account selling, fraud and abuse; security of the Service | (f) legitimate interest |
| Meeting legal obligations and requests of competent authorities | (ç) legal obligation |
| Protecting our rights in disputes | (e) establishing, exercising or protecting a right |
| Answering support requests | (c) performance of the contract, (f) legitimate interest |
The data is collected electronically, directly from you and your device, when you create an account, play, buy or write to us.
4. Transfers
- Cloudflare, Inc.: network, security and content delivery, and e-mail sending (processor).
- Payment provider (Paynkolay, N Kolay Ödeme ve Elektronik Para Kuruluşu A.Ş.): taking card payments.
- Competent public authorities: only where required by law.
Some of these providers are located abroad, so data may be transferred outside Türkiye; such transfers are made under article 9 of the KVKK by signing the standard contract published by the Personal Data Protection Board and notifying the Personal Data Protection Authority.
5. Retention
Personal data is kept as long as the account exists and for the period required by the applicable law; after that it is deleted, destroyed or anonymised.
6. Your rights (KVKK art. 11)
By applying to the data controller you have the right to:
- (a) learn whether your personal data is processed,
- (b) request information about it if it is processed,
- (c) learn the purpose of the processing and whether the data is used for that purpose,
- (ç) know the third parties in Türkiye or abroad to whom the data is transferred,
- (d) request correction if the data is incomplete or wrong,
- (e) request deletion or destruction under the conditions of KVKK art. 7,
- (f) request that the actions under (d) and (e) be notified to the third parties the data was transferred to,
- (g) object to a result against you that arises only from analysis by automated systems,
- (ğ) claim compensation if you suffer damage from unlawful processing.
Send your request from the e-mail address registered to your account to [email protected], or in writing to Piripaşa Mah. Viran Aralığı Sok. No: 6 Daire: 10, Beyoğlu / İstanbul. Requests are concluded within 30 days at the latest (KVKK art. 13). You also have the right to complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).