This English version is provided for convenience only. The Turkish text is legally binding; in case of any difference, the Turkish version prevails.

Draft — pending legal approval

Participant privacy notice

For participants who use Photo Booth, interactive / hall games, the QR controller or QR participation, and AI Avatar at events.

Effective date: _BURAYA_YURURLUK_TARIHI_

1. Kimler veri sorumlusudur?

The company organizing the event you attend (our customer) is, with respect to data processing at the event, the veri sorumlusudur. Work'n Work, which operates the technical infrastructure on behalf of that company, is the data processor. The details of the organizing company appear on the event screen or in the consent text. Work'n Work contact details:

• Company name: _BURAYA_ŞİRKET_ADI_
• MERSİS no.: _BURAYA_MERSIS_NO_
• Address: _BURAYA_ADRES_
• KEP: _BURAYA_KEP_ADRESI_
• Email: _BURAYA_E_POSTA_
• VERBİS (Data Controllers' Registry) registration no.: _BURAYA_VERBIS_NO_

2. What data is processed?

• Photo Booth: the photo taken of you and its designed version; if you request delivery by email, your email address.
• AI Avatar: the selfie you take when joining the game. The selfie is transformed by artificial intelligence into the face of the in-game character; no biometric matching or identification is performed.
• Games and QR controller: player name/nickname, score and playing time; if the event requires registration, the name, email or phone number you enter in the form.
• Technical data: connection time, device/browser type, IP address.

3. Purpose and legal ground

Data is processed for the purpose of providing the event experience (taking the photo and delivering it to you, running the game, the leaderboard). Obtaining the necessary consent for images such as photos and selfies is the responsibility of the company organizing the event as data controller. If the company has enabled the consent screen in Photo Booth, the explicit consent text is shown before the shot, and if you do not give consent, no photo is taken. In AI Avatar, you can join the game without taking a selfie by choosing «Skip».

4. Transfer

Data is transferred to the company organizing the event and to Work'n Work's hosting/email infrastructure providers (Amazon Web Services — Germany/Frankfurt). It is not shared with third parties for marketing purposes.

5. How long is data retained?

• For a paid event, the download page reached via QR code or link remains open for 15 days from the end of the event; the expiry date is shown on the page.
• The company organizing the event can access the records for 15 days from the end of the event.
• Photo Booth photos (paid plan) are retained on the servers for legal obligations for a maximum of 12 months from the end of the event and are then automatically deleted. Shots taken in the Try it now demo are deleted within approximately 30 minutes.
• Game and QR controller records (player name, score, name / email / phone entered in the registration form and the AI Avatar selfie used in the game) are retained for as long as the organizing company's account remains open; if the account is deleted, they are automatically deleted 12 months later.
• AI Avatar selfies that are taken but not used are deleted when the game session ends.

6. Your rights

To exercise your rights under Article 11 of the KVKK, you may first apply to the company organizing the event. You may also contact Work'n Work using the application form ; your request will be forwarded to the relevant company.