Privacy Policy
Privacy Policy
How GTA Society processes personal data, separates public and private information, retains records and handles your privacy rights.
- Version
- 1.0.0
- Effective date
- Operating name
- Sunucum Veri İşleme ve Pazarlama
- Service country
- Türkiye
- Contact and privacy requests
- [email protected]
1.Scope and operator
This policy describes personal data processing on GTA Society, operated in Türkiye under the operating name Sunucum Veri İşleme ve Pazarlama. Send privacy questions and requests to [email protected].
It covers visitors, members, server managers, creators and people who submit applications or make transactions through the platform. Independent game servers and linked external services have their own processing practices. Changes to the operator details or business registration will be announced in a new document version.
2.Categories of personal data
The data involved depends on the features you use. The existence of a feature does not mean its data is collected from every visitor.
- Account and security: name, email address, password hash, verification and security records, and two-factor authentication or passkey information when used.
- Profile and content: selected handle, public profile, biography, submitted content, reviews, suggestions and visibility preferences.
- Server management: catalogue entries, connection information, ownership claims, assignments and private documents supporting management authority.
- Applications and Trust cases: form answers, drafts, interview information, complaints, messages and uploaded evidence.
- Preferences and technical use: language and appearance, follows and collections, notification preferences, session information, IP address, browser information and security or transaction logs.
- Enabled paid services: order, payment status, necessary billing information, licence, refund and dispute records. Card information collected in a payment provider’s own interface is subject to that provider’s processes.
3.Collection, purposes and legal grounds
We receive data electronically through forms, account and preference actions, uploads, support correspondence and technical records generated by the service. Server catalogue information, authorised technical measurements and transaction notifications may also come from the relevant sources.
Necessary account, requested service and transaction processing may rely on entering into or performing a contract. Required records and responses may rely on legal obligations; dispute and evidence management may rely on establishing, exercising or protecting a right. Security and abuse prevention may rely on legitimate interests subject to your fundamental rights and freedoms.
Optional activities requiring explicit consent have a separately explained purpose and consent step. Agreeing to the Terms of Service is not general marketing permission or consent to all personal data processing. Do not upload unnecessary sensitive information or unrelated personal data about others.
4.Public and private information
Published server information, profile fields you make public and content approved for publication may be publicly accessible and discoverable by search engines. Email addresses, account secrets and private transaction records do not become public for that reason.
Application drafts, private interviews and evidence are restricted by purpose and current assignments or access permissions. Transferring server ownership or management does not automatically transfer access to previous private applications or evidence. Receiving a notification does not itself grant access to a private file.
Sharing evidence with a particular recipient and publishing a case summary are separate decisions. Sharing can be restricted to a purpose, expiry and, where applicable, a redacted file version.
5.Recipients and service providers
To the extent needed for a request or transaction, data may be shared with authorised reviewers, the recipients of a relevant application, transaction parties, and providers of hosting, storage, email, security or enabled payment services. Information may also be provided to competent authorities and authorised parties where legally required.
Review the recipient and transaction scope before submitting an application or purchase. Private application and evidence content is not used for advertising targeting. Optional marketing communications are handled separately from service and security notices.
Where an overseas service entails an international transfer, the requirements and an appropriate transfer mechanism under Turkish Law No. 6698 must be assessed separately. This policy does not itself constitute consent to an international transfer; additional information is provided where needed for the relevant process.
7.Retention, deletion and backups
Retention is limited by purpose, record status, the relevant transaction and legal requirements. Application drafts, completed applications, evidence, security logs and financial records do not all have the same retention period. An active dispute or legal preservation requirement may justify retaining particular records longer.
Closing an account does not mean that independent server entries, published content, other people’s rights, transaction records and necessary audit information are all erased simultaneously. Requests are assessed by data category, with deletion, anonymisation or removal of access applied where appropriate.
Removing access in the live service, purging stored files and rotating backups are separate stages. Content previously made public may remain in third-party caches over which we do not have simultaneous, complete control.
8.Security and access boundaries
Technical and organisational measures include authorisation, private-file access controls, account security and transaction records. Access is limited by role, purpose and current permission. No online system can guarantee absolute security.
Keep account secrets private and report suspected unauthorised access. We may request necessary and proportionate information to verify ownership of an account or a privacy request. Do not email passwords, verification codes or unnecessary identity documents.
9.Your rights and how to contact us
Subject to applicable conditions, you may ask whether data is processed, request information about processing and recipients, seek correction or erasure, request relevant recipient notifications, object to adverse automated assessment and seek compensation for unlawful processing.
Email [email protected] with a relevant account or transaction reference and a description of your request. Requests are assessed within the statutory period, taking account of identity verification and applicable application procedures. Your rights to complain to the competent authority and use other legal remedies remain available.
You can withdraw consent for an optional consent-based activity through the relevant preference control or contact channel. Withdrawal does not retroactively invalidate earlier lawful processing; necessary records supported by another legal ground are assessed separately.
10.Minors and other people’s data
The legal capacity and representative provisions in the Terms of Service apply to use of the platform. Contact us if you identify a concern about a minor’s personal data or an unauthorised disclosure.
Only submit information necessary for the relevant purpose. Do not publish other people’s private correspondence, contact details or sensitive information in public areas. Submit necessary evidence through the platform’s private channels.
11.Policy updates
The version and effective date appear at the top of this page; earlier texts remain available in the version history. Material changes to purposes, recipients or operation are announced through an appropriate channel, with additional information and separate consent steps where required.