Privacy Policy

İstanbul Fintech Week is organised by FNTCH OÜ. FNTCH OÜ is the data controller for the personal data described on this page. Our registered details and contact channels are at the end of this policy.

We collect only what a given interaction needs:

• Ticket and registration data. Your name, email address, and the company and job title you enter when you buy a pass, together with the pass type, your ticket barcode and whether you have checked in — so we can issue your ticket, admit you to the venue and send you event information.
• Payment information. Card details are entered into Eventbrite's checkout and are processed by Eventbrite and its payment providers. We never see, receive or store your full card number, expiry date or security code. What reaches us is the order record: what was bought, by whom, and whether it was paid.
• Enquiries. The name, email address, phone number, company and message you submit through our contact, sponsorship or application forms.
• Account data. If you create an attendee account, the profile details you choose to add and the sessions, meetings and favourites you save.
• Newsletter. Your email address, if you subscribe.
• Technical data. Standard web analytics — pages viewed, approximate location, device and browser — collected through Google Analytics, only if you accept analytics cookies.

• To perform our contract with you: issuing and validating tickets, managing your registration, running the event, and handling refunds under our Refund Policy.
• For our legitimate interests: replying to enquiries and keeping the site secure and working.
• With your consent: analytics and marketing cookies, marketing emails and the newsletter. You can withdraw consent at any time — for cookies from "Cookie settings" at the bottom of every page, for email using the unsubscribe link in any such email, or by writing to us.
• To meet legal obligations: accounting and tax records for completed ticket sales.

We do not sell personal data. We share it only with the service providers needed to run the event, and only with what they need:

• Eventbrite — ticket sales and payment processing. Their handling of your data is governed by Eventbrite's privacy policy. Their checkout runs inside a frame on our ticket page, and it brings its own measurement and advertising cookies from its partners. Those are set by Eventbrite, not by us: we do not choose them, cannot switch them off from here, and receive nothing they collect.
• Hilton İstanbul Maslak — the venue, for access, accommodation bookings you request, and safety obligations.
• Email and hosting providers — to deliver your ticket and event emails and to run this site.
• Google — website usage measurement through Google Analytics, if you accept analytics cookies.
• LinkedIn — measuring which of our LinkedIn ads lead to action on this site, and showing our ads to people who have visited it, if you accept marketing cookies. See the cookies section below.

Sponsors and partners receive your details only if you ask us to share them — for example by opting in at their stand or in a form that says so. Attending the event does not hand your data to sponsors.

The site is served over HTTPS throughout. Access to registration and attendee records is limited to the organising team members who need it, and is protected by individual accounts. Because payment card data is handled inside Eventbrite's checkout rather than on our systems, a compromise of this site could not expose card numbers.

Ticket and order records are kept for as long as accounting and tax law requires. Enquiry messages are kept for up to two years so we can follow up across event cycles. Newsletter subscriptions are kept until you unsubscribe. Attendee accounts are kept until you ask us to delete them.

You can ask us to give you a copy of your personal data, correct it, delete it, restrict how we use it, or object to our using it. You can also ask to receive it in a portable format, and withdraw any consent you have given. Write to contact@istanbulfintechweek.com and we will respond within one month. If you are not satisfied with our response, you may complain to your local data protection authority — in Estonia, the Data Protection Inspectorate (Andmekaitse Inspektsioon); in Türkiye, the Personal Data Protection Authority (KVKK).

When you first visit, we ask which optional cookies you accept. Until you choose, only strictly necessary cookies are used: Google Analytics sets no cookie, and Google Tag Manager and the LinkedIn Insight Tag are not loaded at all. You can change or withdraw your choice at any time from Cookie settings — the same link is at the bottom of every page. We ask again after twelve months.

LinkedIn is an independent controller for the data it collects through its tag; what it does with it is covered by LinkedIn's own privacy policy, and you can also turn this off for your LinkedIn account in its advertising settings.

Two other parties can set cookies from content embedded in our pages. Videos are played from YouTube, which may set its own cookies when a video loads. Eventbrite's checkout frame on the ticket page brings measurement and advertising cookies from its partners; those are set by Eventbrite, not by us. You can block or delete any cookie in your browser settings; the site will still work, but signed-in features will not keep you signed in.

If we change how we handle personal data we will update this page and move the "last updated" date at the top.