1. Data controller Congport (“Congport”, “we”) operates the congport.com platform and congress workspaces. Contact: info@congport.com · +905414819500 · Pamukkale Teknokent B Blok Pamukkale - Denizli. Website: https://congport.com 2. Scope This policy applies to visitors of the Congport marketing site, customers who request or accept a proposal, and users of a provisioned congress workspace. Congress organisers remain responsible for personal data they collect from their own participants, reviewers and website visitors. 3. Data we collect We may process: identity and contact data (name, organisation, email, phone); account data; proposal and contract acceptance records; billing data you provide; technical logs (IP address, browser, date/time); and support correspondence. Payment card numbers are not stored on Congport servers. Card payments are processed by PayTR (PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş.) as a licensed payment institution. 4. Purposes and legal bases We process data to: provide and improve the SaaS service; prepare and perform proposals; take payment and issue invoices; open your workspace after payment; send service messages; meet legal, tax and anti-fraud duties; and, where required, for legitimate interests such as security and product improvement. Where consent is required (for example certain cookies or optional messages), we ask for it separately. 5. Recipients Data may be shared with: hosting and infrastructure providers; e-mail delivery providers; PayTR for checkout; professional advisers; and public authorities when the law requires. We do not sell personal data. 6. Retention We keep data for the life of the customer relationship and for the statutory periods that apply to contracts, invoices and logs (including commercial and tax records). After that, data is deleted or anonymised unless a longer period is required by law or an ongoing dispute. 7. Your rights Depending on applicable law (including KVKK in Türkiye and, where relevant, GDPR), you may request access, correction, deletion, restriction, objection, or data portability, and you may withdraw consent. You may lodge a complaint with the Turkish Personal Data Protection Authority (KVKK) or another competent authority. 8. Security and international transfers We use reasonable technical and organisational measures. Some processors may be located outside Türkiye; we use contractual and organisational safeguards appropriate to the transfer. 9. Cookies The marketing and application sites may use essential cookies (session, security, language) and, if enabled in platform settings, analytics tags. You can control cookies in your browser. 10. Contact For privacy requests write to info@congport.com. We may need to verify your identity before fulfilling a request. This text is provided for operational and payment-institution disclosure. It is not a substitute for tailored legal advice.