Personal Data Protection Notice

Data controller

The Karepix service is operated by [company name, address and registry details to be added after legal review], acting as data controller under Turkish Law No. 6698 on the Protection of Personal Data (KVKK).

For any questions or requests, write to [email protected].

What data do we process?

• Photos and videos: images and videos guests upload to the event gallery.
• Name (optional): the name a guest enters to appear next to their uploads. It can be left empty — anonymous uploads are possible.
• Guestbook notes: messages guests optionally leave.
• Technical data: IP address, browser and device information, processed for service security, rate limiting and debugging.
• Host account: the e-mail address used to sign in.

A note on EXIF and location data

EXIF metadata in the original files of uploaded photos (capture time and, if recorded, GPS location) is preserved in the original file. Only the event host can access the originals; the previews shown to guests and on the venue screen are re-generated and carry no such metadata.

If you prefer your photos to contain no location data at all, you can disable your phone camera's location permission while shooting.

Purposes of processing

• Building the event gallery and providing it to the event host
• Displaying the live slideshow and the guest gallery, if the host enables them
• Building the guestbook
• Keeping the service secure and preventing abuse
• Fulfilling legal obligations

Legal basis

Your personal data is processed based on the establishment and performance of a contract (the service agreement with the event host), the controller's legitimate interest (service security) and, for optional data, your explicit consent. You may choose not to share optional data by leaving the name field empty or not writing a note.

Retention period

Event content (photos, videos and notes) is stored for the event's retention period (12 months in the standard package; the host may extend it). Within 30 days at the latest after the retention period ends or the host deletes the gallery, all content is permanently deleted, including backups.

Technical records (IP and access logs) are kept only for the periods required by law.

Data transfers

Content is stored with the infrastructure providers we use for hosting and object storage, and is shared with them only to the extent necessary to provide the service. Your data is never transferred or sold to third parties for marketing purposes.

The event host has access to the content you upload; whom the host shares the gallery with is the host's own responsibility.

Your rights (KVKK art. 11)

• Learn whether your personal data is processed and request information
• Learn the purpose of processing and whether data is used accordingly
• Request correction of incomplete or inaccurate data
• Request deletion or destruction of your data — guests may ask the event host or us directly to delete content they uploaded
• Learn the third parties to whom data is transferred
• Request compensation if you suffer damages

Applications

You can send requests regarding your rights to [email protected]. Applications are concluded free of charge within 30 days at the latest. [Postal application address to be added after legal review.]