Privacy & Security Policy / KVKK Notice
Version 2026-10-02.1
Data controller
MED Organization Company / MED Performance Camps is operated by Gaye Madenci (sole proprietor). Tax office: Kalekapı Vergi Dairesi Müdürlüğü. Tax number: 6100640060. Registered correspondence address: Kepez Mahallesi, 3282 Sokak, Suryapı Konutları, F Parsel, L6 Blok, Kat 5, Daire 26, Kepez, Antalya, Türkiye. Email: contact@medperformancecamps.com. WhatsApp: +44 7533 927106.
Information and collection methods
We receive information electronically through account and booking forms, email and messages, and through the services operating this website. Booking fields collect names, date of birth, gender, nationality, country, contact details, room and camp choices, sporting experience, kit size and emergency contact details. Account records include email verification and marketing preferences. Booking references, payment status, communications, consent records and security/session information are also processed. Please inform other participants and emergency contacts before providing their information.
Purposes and legal grounds
Identity, contact, booking and account information is used to provide the requested account and camp services and perform the contract, under KVKK Article 5(2)(c). Necessary accounting and legal records are processed to meet legal obligations under Article 5(2)(ç). Relevant records may be retained to establish, exercise or protect rights under Article 5(2)(e). Proportionate security and abuse-prevention processing relies on legitimate interests under Article 5(2)(f), subject to your fundamental rights. Optional promotional messages rely on a separate consent where required; refusing or withdrawing it does not prevent a booking. This notice is information, not a request for blanket consent.
Recipients
Necessary information may be shared with accommodation, coaching, race and transfer providers to arrange the selected services; with hosting, authentication and email providers to operate the account and booking system; with professional advisers and authorised public bodies where required; and with the selected payment provider to process an authorised payment. Only information needed for the relevant purpose should be supplied. MED does not request or store complete card details in its booking forms.
International processing
The service uses OpenAI/Cloudflare hosting, Supabase for authentication, Resend for authentication email and Google Workspace for business email. These providers may process information outside Türkiye. Information on recipients and applicable transfer safeguards can be requested from the controller. A booking acknowledgement does not constitute explicit consent to international transfers or establish that a particular statutory transfer mechanism has been completed.
Retention and security
Information is retained for the relevant service, applicable accounting and legal retention duties and necessary dispute periods. Once no lawful retention basis remains, deletion, destruction or anonymisation is required. Access to booking records is restricted and stored booking details are encrypted. No online system can guarantee absolute security. Avoid including health documents or other sensitive information in free-text booking fields; contact MED first if a special arrangement is necessary.
Your rights and requests
Under KVKK Article 11, you may ask whether your data is processed, obtain information about processing and its purpose, learn recipients in Türkiye or abroad, request correction or deletion where the legal conditions apply, request notification to recipients, object to adverse results based solely on automated analysis and seek compensation for unlawful processing. Contact the controller at the email or correspondence address above, identifying your request. Identity verification may be necessary. Applications are assessed under the applicable statutory procedure; rights to complain to the competent authority remain available.
Marketing and photographs
Camp news is optional and separate from booking administration. Use the unsubscribe link or contact MED to withdraw marketing permission. Accepting booking terms does not authorise promotional use of your image. Any promotional photo or video use requiring permission must be addressed separately from delivery of photography included in a camp.
Website and payment security
Website connections use HTTPS. Access to customer and administrator functions requires authentication and booking access is checked on the server. Do not share your password or email verification links. MED does not collect full card numbers or card security codes in the booking form. Card details must only be entered on the payment provider’s secure page when card payment is available. Report suspected unauthorised account access to contact@medperformancecamps.com.