Privacy and Personal Data Protection

Data Controller

This notice is given under the Turkish Personal Data Protection Law No. 6698 (KVKK).

DropYourTime is a product of Finatech Bilişim ve Danışmanlık Hizmetleri Ltd. Şti. (“Finatech”). Finatech is the data controller of the personal data processed within DropYourTime.

For questions and requests about your personal data, contact us at support@dropyourtime.com.

What Data We Process

To provide the DropYourTime services we process the following personal data:

• Account information: your name, email address, phone number, country and (if you are in Türkiye) province, invite code, preferences and consent records.
• Account activity: your favourite athletes and clubs, notification preferences, athlete profile linking and name masking requests, your notes on these requests and the decisions made.
• Meet data: the athlete's first and last name, club or school, birth year, race category, times, split times, rankings and result statuses found in published meet documents.
• Form information: the messages, name and email address you share in contact and correction reports.
• Technical information: session information, IP address, access time and server logs needed to run and secure the service.

Cookies: We use cookies needed for the service to work, such as session management, sign-in, and language and appearance preferences. We do not use cookies for advertising or for tracking user behaviour. If such use arises, you will be informed and, where the law requires it, asked for your consent beforehand.

How We Collect Data

Your personal data is obtained:

• Directly from you, when you create an account, edit your profile or fill in forms.
• From meet documents published openly by the bodies and organisations that hold the meets.
• From the session and technical records created when you use the website or the mobile app.

Data is collected and processed electronically by automated or partly automated means and, for meet documents, by manual processing where needed.

Why We Process Data

We use your personal data to:

• Create your user account, sign you in and manage your account preferences.
• Offer features such as favourites, athlete profile linking and name masking.
• Send email verification, account notices and the outcome of your requests.
• Provide meet calendars and results, rankings and athletes' time histories.
• Review correction reports, support requests and contact messages.
• Improve meet and result coverage for your region and contact you about volunteering to help collect results (country and province; providing them is optional).
• Keep the service secure, prevent misuse and meet our legal obligations.

We process your personal data in a way that is linked, limited and proportionate to these purposes.

Legal Grounds

We process your personal data on the following legal grounds set out in Article 5 KVKK:

• Setting up or performing a contract (Art. 5/2-c): creating user accounts, signing in and providing account features.
• Legal obligation (Art. 5/2-ç): keeping the records the law requires and answering legal requests.
• Establishing, exercising or protecting a right (Art. 5/2-e): reviewing claims, correction reports where needed and disputes.
• Legitimate interest (Art. 5/2-f): keeping the service secure, managing user requests and providing meet data, provided that the fundamental rights and freedoms of the persons concerned are not harmed.

Meet data is obtained from documents published openly by the organising bodies. That information is public does not, however, mean that personal data may be processed without limit. When this data is processed, the rights of the persons concerned, the nature of the data and the purpose of processing are taken into account.

Where a processing activity requires explicit consent, your consent is asked for separately.

Who We Share Data With

Your personal data may be shared with the following groups of recipients, to the extent needed to provide the service:

• Service providers: organisations that provide hosting, email delivery, technical infrastructure and information security services.
• Platform users: race results and athlete information are shown to website and mobile app users under the access conditions of the pages concerned.
• Competent authorities: the public bodies and authorities concerned, where the law requires it.

The technical infrastructure of our service uses servers and service providers located abroad, so your personal data may be transferred abroad. These transfers must be subject to the conditions and safeguards set out in Article 9 KVKK.

We do not sell your personal data or share it with third parties for advertising.

How Long We Keep Data

We keep your personal data for as long as the purposes of processing require and in line with the applicable law.

• Account information: kept while your account is open. When you close your account, the personal data linked to it is deleted or made anonymous, except for records the law requires us to keep.
• Account activity: your favourites, notification preferences, invite code and the account links you set up with athlete profiles are removed as part of closing the account.
• Request and activity records: kept for as long as needed to meet legal obligations and to review possible disputes.
• Form messages: kept for at most two years after your request is settled; where a valid legal reason requires a longer period, kept only for as long as needed.
• Technical records: kept for as long as the security of the service requires, then deleted.
• Meet data: kept as part of the meet archive for as long as valid legal grounds and the purpose of processing continue.

When the legal reasons for keeping data no longer apply, the data is deleted, destroyed or made anonymous in line with the law.

Closing Your Account and Athlete Data

Closing your account

You can close your DropYourTime account at any time from the Close My Account section of the My Profile page. Closure takes effect immediately and cannot be undone.

When you close your account, your name, email address, phone number, country and province, favourites, notification preferences, invite code and the athlete profile links associated with your account are deleted.

Records needed to meet our legal obligations or to protect our legal rights may be kept, limited to that purpose and period. Correction reports you sent earlier may also be kept on this basis.

If you have trouble closing your account, contact us at support@dropyourtime.com.

Meet results and athlete data

Closing your account does not delete the athlete records, race results and times compiled from public meet documents. This data is handled independently of user accounts.

For data about yourself or a swimmer you are the legal representative of, you can also ask for correction, masking or deletion. When a name masking request is accepted, the athlete's name is shown by its initials; race results and times are kept.

These requests are reviewed in the light of the purposes and legal grounds for processing the data concerned. When the conditions requiring processing no longer apply, the data is deleted, destroyed or made anonymous as needed.

Your Rights and Requests

Under Article 11 KVKK, regarding your personal data you can:

• Learn whether your data is processed and, if so, request information about it.
• Learn the purpose of processing and whether the data is used in line with it.
• Learn the third parties your data is transferred to.
• Ask for incomplete or inaccurate data to be corrected.
• Where the legal conditions are met, ask for your data to be deleted or destroyed and for this to be notified to the third parties it was transferred to.
• Object to a result against you that arises from analysis made solely by automated systems.
• Ask for compensation if you suffer damage because of unlawful processing.

You can close your account directly from My Profile → Close My Account.

You can send your other personal data requests to support@dropyourtime.com. You can make formal requests under the KVKK from the email address registered in our system and previously notified to us, or by the other methods the law provides.

Requests are reviewed after verifying identity and, where needed, the authority to represent. Requests made in due form are settled as soon as possible according to their nature, and within 30 days at the latest. Requests are as a rule free of charge; a fee may be charged where the law allows.

If your request cannot be met in full or in part, you are told why.

If your request to the data controller is refused, you find the answer insufficient, or no answer is given in time, you can complain to the Personal Data Protection Board within the legal time limits.

Source documents are taken into account when correcting errors in meet results. Your legal rights over the protection of personal data are, however, not limited by the information being present in a source document.

Changes

We may update this notice according to changes in how the service works or in the law.

The current text and the date of its last update are published on this page. Significant changes are announced by appropriate means.

If the purposes of processing personal data change, you will be informed as required. Your consent is asked for separately for processing for which the law requires explicit consent.

Contact

You can close your account from My Profile → Close My Account.

For problems you meet while closing your account, other questions about your personal data, and correction and data masking requests, write to support@dropyourtime.com.

For general questions and suggestions, use info@dropyourtime.com or the form on the Contact page.