Privacy & Security Policy

Last updated: March 2024

This Privacy Policy describes how Cogito Istanbul ("we," "our," or "us") collects, uses, and protects your personal information when you use our services, website, and mobile applications.

1. Information Collection

1.1 Personal Information

We collect the following types of personal information:

  • Name, email address, phone number, and postal address
  • Payment information and billing details
  • Date of birth and gender (for age-restricted events)
  • Profile pictures and social media handles (if provided)
  • Event preferences and attendance history

1.2 Automatically Collected Information

We automatically collect:

  • IP address and device information
  • Browser type and version
  • Operating system details
  • Time zone and location data
  • Website usage patterns and behavior

2. Use of Information

2.1 Primary Purposes

  • Process ticket purchases and reservations
  • Send event confirmations and updates
  • Provide customer support and assistance
  • Personalize your event experience
  • Improve our cultural programming

2.2 Marketing Communications

  • Send newsletters and event announcements
  • Provide personalized recommendations
  • Conduct surveys and feedback collection
  • Share cultural content and updates

3. Data Security

3.1 Security Measures

  • 256-bit SSL encryption for all data transmission
  • PCI-DSS compliant payment processing
  • Regular security audits and penetration testing
  • Multi-factor authentication for staff access
  • Encrypted database storage

3.2 Data Retention

  • Personal data retained for 24 months after last activity
  • Financial records kept for 5 years (legal requirement)
  • Immediate deletion upon request (where legally permitted)

4. Your Rights

4.1 Data Subject Rights

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing

4.2 Exercise Your Rights

To exercise your rights, contact our Data Protection Officer:

  • Email: [email protected]
  • Response time: Within 30 days
  • Identity verification may be required

5. Cookies and Tracking

5.1 Cookie Usage

  • Essential cookies for website functionality
  • Analytics cookies for performance measurement
  • Marketing cookies for personalized content
  • Social media cookies for sharing features

5.2 Cookie Control

  • Cookie preferences can be modified anytime
  • Browser settings can block cookies
  • Third-party cookie management tools supported