USER AND CONFIDENTIALITY AGREEMENT

This User and Confidentiality Agreement (hereinafter referred to as the “Agreement”) is executed by and between SICPA TURKEY ÜRÜN GÜVENLİĞİ SANAYİ VE TİCARET A.Ş. with the MERSIS No.0769045850200017 (hereinafter referred to as the “SICPA Türkiye”) and internet users (hereinafter referred to as the “USER”) to visit the address of www.muze.gov.tr (hereinafter referred to as the “Website”), which is run by SICPA Türkiye.

The USER is deemed to have accepted this Agreement by performing transactions via the Website.
This Agreement contains the provisions of confidentiality between SICPA Türkiye and the USER.
The USER is deemed to undertake to act in accordance with this Agreement, all kinds of terms of use published and to be published by SICPA Türkiye and legislation of the Republic of Turkey. Otherwise all legal and penal liability shall rest with the USER.
The USER shall make the payment of the tickets/cards ordered via the Website and confirmed by SICPA Türkiye by means of credit card.
Contact information in order for the USER to communicate with SICPA Türkiye is as follows:
Address: Levent Mah. Bambu Sok. No:4 Beşiktaş/İstanbul/Türkiye
Telephone: 444 6893
E-mail: yardim@muze.gov.tr
The USER may communicate with SICPA Türkiye using this information.
The USER is entitled to return the tickets/cards purchased via the Website within 14 (fourteen) days provided that SICPA Türkiye receives notice for right of withdrawal within the aforementioned period. The USER, who fails to fulfill this legal liability, may not return the tickets/cards.
The right of withdrawal shall be valid if the notice is sent within the time period of 14 (fourteen) days written in article 6. In the event that the USER wishes to return the card received; the USER agrees to send the front and back sides of the card via e-mail. The USER accepts to send the relevant ticket to SICPA Türkiye by means of e-mail if wishes to return the ticket sent to his/her e-mail address. Otherwise the ticket fare shall not be refunded.
SICPA Türkiye and also all content-creators, employees of the site, individuals and organizations authorized by SICPA Türkiye shall not have any legal and penal liability for the claims for all kinds of pecuniary losses and intangible damages to arise due to failure of the USER to read these terms and conditions or to act accordingly despite reading.
As per the Distance Contracts Regulation, SICPA Türkiye shall keep all information and documents about the USER for each transaction related to the right of withdrawal, information, delivery and other liabilities for a period of 3 (three) years. When the USER accepts the Agreement, this legal right of SICPA Türkiye is also deemed to be accepted.
All other rights of SICPA Türkiye, which are not written here and granted by the laws of the Republic of Turkey, are reserved.
Cards purchased over the Website shall be delivered within 30 days following the date of payment.
The USER confirms that he/she has understood the basic features and price of the ordered ticket/card, including taxes, at the time of order, and registered his/her information and delivery information on the system in an accurate and complete manner. SICPA Türkiye shall not be responsible for the circumstances, where this information is not accurate or complete, namely the damages to arise due to misinformation registered by the USER on the system at the time of order.
In the event that the card subject to the Agreement is delivered to someone other than the USER, SICPA Türkiye shall not be responsible if the individual to receive the card refuses the delivery.
In case of any problem identified in the order, SICPA Türkiye shall suspend the performance of the order for a period of 7 (seven) days unless communication is established by the telephone and e-mail address provided by the USER. Unless the USER contacts with SICPA Türkiye in this time period, the order is cancelled and the ticket fare of the USER is refunded.
Cargo fee shall be paid by SICPA Türkiye as long as the USER sends the card to be returned by means of the contracted cargo firm of SICPA Türkiye. In the event that the card to be returned by the USER is sent by a cargo firm other than the contracted cargo firm, SICPA Türkiye shall not be responsible for the return cargo fee and damage of the card likely to occur during the cargo process.
This Agreement is prepared in the Turkish and English languages. In case of discrepancy between the texts, Turkish text shall prevail.

WEBSITE USER PRIVACY NOTICE REGARDING THE PROCESSING OF PERSONAL DATA

Dear Website User;

As SICPA Turkey, we provide services to our valued users through the https://muze.gov.tr/ website. In this regard, certain personal data is processed by us in order to provide services such as issuing a Müzekart and Museum Pass in your name via the website, completing the necessary registration procedures, issuing an electronic ticket in your name, and sending the Müzekart and Museum Pass to your address.

This privacy notice has been prepared by SICPA TURKEY Ürün Güvenliği Sanayi ve Ticaret Anonim Şirketi, acting as the data controller, in accordance with Article 10 of Law No. 6698 on the Protection of Personal Data (Kişisel Verilerin Korunması Kanunu, "KVKK") and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform, to inform and enlighten you about the processing purposes, legal grounds, collection methods, to whom they may be transferred, and your rights under KVKK regarding your personal data.

Processing purposes,
Legal grounds,
Collection methods,
To whom they may be transferred,
Your rights under KVKK,

to inform you as a website user.

1. Which of Your Personal Data Do We Process?

Data Categories	Examples of Data Types Processed in This Category
Identity Data	Your name and surname, Your Turkish ID number, date of birth, passport details, and the name and surname of the gift card recipient when purchasing a Gift Mobile Museum Card.
Contact Data	Your phone number, mailing address, email address, and the email address of the gift card recipient if purchasing a Gift Mobile Museum Card
Legal Transaction Data	Your information in correspondence with judicial authorities, Your information in the case file
Customer Transaction Data	Call center records, Invoice, promissory note, check information, Information on cashier receipts, Order information, Request information, etc.
Profile Account Data	Login ID, password, other security codes and your profile photos if you upload photos to the profile account you created on the website
Marketing Data	Purchase history information, surveys, cookie records, information obtained through campaign activities, etc.
Location	Your location information, if you grant permission via the https://muze.gov.tr/ website and your entry and exit information for the museums and historical sites you visited

2. For What Purposes Do We Process Your Personal Data?

Execution of Emergency Management Processes
Execution of Information Security Processes
Execution of Audit/Ethics Activities
Execution of Access Authorizations
Execution of Activities in Compliance with Legislation
Execution of Finance and Accounting Operations
Execution of Company/Product/Service Loyalty Processes
Ensuring Physical Premises Security
Execution of Assignment Processes
Monitoring and Execution of Legal Affairs
Execution of Communication Activities
Execution/Audit of Business Activities
Execution of Logistics Activities
Execution of Goods/Services Procurement Processes
Execution of Goods/Services After-Sales Support Services
Execution of Goods/Services Sales Processes
Execution of Goods/Services Production and Operations Processes
Execution of Customer Relationship Management Processes
Execution of Activities Aimed at Customer Satisfaction
Organization and Event Management
Execution of Storage and Archiving Activities
Execution of Contract Processes
Tracking of Requests/Complaints
Execution of Fee Policy
Execution of Product/Service Marketing Processes
Ensuring the Security of Data Controller Operations
Providing Information to Authorized Persons, Institutions, and Organizations
Execution of Management Activities
Creation and Tracking of Visitor Records

For these purposes, they will be obtained, processed, recorded, stored, retained, and classified.

3. To Whom and For What Purposes Do We Transfer Your Personal Data?

Recipient Group	Examples of Recipient Groups and Transfer Purposes
Natural Persons or Private Law Legal Entities	To law firms we have agreements with for tracking legal processes, to financial advisors for financial transactions and services
Authorized Public Institutions and Organizations	To provide information to prosecutors, courts, and relevant public officials upon request and as required by legislation in matters related to public safety and potential legal disputes, and to relevant ministries and public institutions when necessary
Republic of Türkiye Ministry of Culture And Tourism	All personal data processed within the scope of the operations and services performed during the MüzeKart process are transferred to the Republic of Türkiye Ministry of Culture And Tourism
Affiliates and Subsidiaries	To the extent deemed necessary for the coordinated execution of our business activities, to our subsidiaries and affiliated companies
Suppliers	To banks for the performance of goods/services contracts, to cargo companies for sending documents and products, to accounting and CRM programs for conducting/tracking customer and financial transactions, to information technology companies for use in communication, marketing, advertising, promotion, and notification activities and within the scope of backup services, to supplier companies providing online payment services, and to subcontractors within the scope of operations management
Shareholders	Funding of company operations, ensuring the continuity of financial processes, and managing activities in compliance with regulations are communicated to our shareholders when deemed necessary.

4. What Are the Collection Methods and Legal Grounds for Your Personal Data?

The personal data in question are processed with the explicit consent of the data subject or based on the following legal grounds stipulated in Article 5-6 of KVKK:

It is expressly provided for by the laws.
It is necessary for compliance with a legal obligation to which the data controller is subject.
Processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract.
Data processing is necessary for the establishment, exercise or protection of any right.
Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject
Personal data have been made public by the data subject himself/herself.
Data subject has given his/her explicit consent,

Based on these legal grounds, within the scope of the purposes specified in this Privacy Notice and in accordance with the General Principles listed in Article 4 of the Law:

Lawfulness and fairness
Being accurate and kept up to date where necessary.
Being processed for specified, explicit and legitimate purposes.
Being relevant, limited and proportionate to the purposes for which they are processed.
Being stored for the period laid down by relevant legislation or the period required for the purpose for which the personal data are processed.

they will be processed, recorded, stored, retained, classified through automated means, and may be transferred to the parties mentioned above when necessary.

5. What Are Your Rights Regarding the Processing of Personal Data and How Can You Exercise These Rights?

Article 20 of the Constitution (Anayasa) establishes that everyone has the right to be informed about their personal data. Article 11 of KVKK lists the rights of the data subject under the law.

You may submit your requests regarding your rights under KVKK to SICPA TURKEY Ürün Güvenliği Sanayi ve Ticaret Anonim Şirketi in accordance with Article 5 of the Communiqué on Application Procedures and Principles to the Data Controller, either in writing or by using a registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the e-mail address previously notified by the data subject to the data controller and registered in the data controller's system.

Data Controller: SICPA TURKEY Ürün Güvenliği Sanayi ve Ticaret Anonim Şirketi
Address: Burhaniye Mah. Kanuni Sultan Süleyman Sk. Mabeyın Konakları Sitesi D No: 4D İç Kapı No: 1 Üsküdar / İstanbul
E-mail: kvkk@sicpa.com.tr

To view the application form, click here.