Privacy Policy
This policy explains how personal data is collected, used and protected when you use the Turkish Professional Footballers' Association (TPFD) member app and the tpfd.bilgo.ai website. See also the KVKK Information Notice for the detailed legal disclosure under Turkish law.
1. Who we are
Data controller: Türkiye Profesyonel Futbolcular Derneği (TPFD, the Turkish Professional Footballers' Association), founded in 1992 and based in Istanbul. TPFD is a member of FIFPRO, the world players' union.
Processor and app developer: Eray Baydemir (Bilgo AI). The developer processes personal data only on behalf of TPFD and on its instructions.
Contact: info@pfd.org.tr
2. What we collect
| Data | When and why |
|---|---|
| Email address | To sign in (one-time code by email) and to match your registered member card to your email. |
| Name, phone, birth date, city | In your membership application, to review it and contact you. |
| Football details: position, current club, past clubs, player status, optional licence number | In your membership application, to verify eligibility and create your member record. |
| Photo (optional) | To show on your digital member card and verify the card. Stored in a private area. |
| Benefit requests and messages | When you apply for a benefit, to fulfil your request. |
| Partner QR scans (time and browser information) | When a partner business scans the QR code on your card, to record when verification took place and detect misuse. |
| AI voice calls | When you call the support line, your audio is streamed in real time to AI providers so the assistant can answer. Calls are not recorded by default. Only call-session metadata (session ID, time) is stored. |
We do not use advertising, tracking or analytics cookies or SDKs. We do not sell your personal data or share it for advertising.
We do not collect Turkish national ID numbers.
4. Retention
- App account and application data: until you delete your account.
- Association membership record: for the duration of membership and as long as association law and other legal obligations require.
- Rejected applications: at most 1 year from the decision.
- Benefit requests: at most 2 years after completion.
- QR scan logs and call-session metadata: at most 12 months.
- Audio of AI calls: not retained.
5. Security
Data is encrypted in transit (TLS). Photos are kept in a non-public storage area accessible only to you and authorised staff. Access to the admin panel is limited to authorised staff.
6. Your rights
Under Article 11 of Turkish Law No. 6698 (KVKK) and, for users in the EU/EEA, the GDPR, you have the right to learn whether your data is processed, request information, learn the purpose, know the third parties it is transferred to at home or abroad, request correction, erasure or destruction, object, and claim compensation for unlawful processing. You may also request data portability and withdraw consent.
Send requests to info@pfd.org.tr. We respond within 30 days.
7. Account deletion
You can permanently delete your account at any time in the app under Profile > Delete account. This deletes your account, applications, requests and uploaded photos. The association membership record is a separate record and is not affected, because of statutory retention duties; you can write to the association to ask for it to be deleted. See /hesap-silme for details.
8. Children
The app is not directed at people under 18 and we do not knowingly collect data from them.
9. Changes and contact
We may update this policy; significant changes are announced in the app or on this page.
Questions: info@pfd.org.tr · Phone: +90 212 259 93 94