Data controller
Data controller: Revenant. Scope: the revenantloncasi.com website, guild applications and management of the community roster. Contact: info@revenant.com.
Revenant refers here to the community that operates the website and guild processes.
Data categories and collection methods
Information is collected electronically through details you enter in the application form, messages you send us, application review and roster actions by administrators, and technical records generated automatically when you use the website.
| Category | Information used on this website |
|---|---|
| Character and contact details | Character name and class, Discord username, PvP/Farm preference and the address used for direct correspondence. |
| Optional application content | Available date and time range, availability note and message. |
| Application and membership administration | Application/roster identifiers, dates and times, review status, acknowledgement of terms, privacy notice version, specialisation and guild role. |
| Security information | IP address and access logs, administrator username, password hash, session and request-security records. |
| Browser preference record | Privacy notice version, save time and the choice to use necessary functions only. |
Purposes and legal grounds
Processing necessary for Revenant’s legitimate interests in responding to applications, managing the community and securing the website is addressed under KVKK Article 5/2-f, provided it does not harm your fundamental rights and freedoms. This ground does not authorise unlimited collection or publication of data.
Where a legal obligation must be met, Article 5/2-ç may apply. Article 5/2-e may apply where processing is necessary to establish, exercise or protect a right. Any new activity requiring explicit consent must offer a separate, specific and informed choice. Accepting the application terms is not blanket consent to personal-data processing.
- Application assessment and necessary follow-up: character, class, Discord and gameplay preferences, with optional availability information and messages where relevant.
- Roster and community coordination: displaying an accepted member’s character name, class, any specialisation and role on the team page, without publishing their contact details or messages.
- Security and continued service: using access and administration-session records to limit unauthorised access, spam and abuse.
- Data requests and disputes: responding to the request, carrying out necessary verification and meeting any applicable legal obligation or protecting a right.
- Privacy notice: remembering the necessary-only choice in the browser. It is not used for advertising or behavioural analytics.
Access and recipient categories
Authorised Revenant administrators may access application and membership records in the course of their duties. Hosting and security providers may process information to the extent necessary to operate and protect the website. Cloudflare is used to deliver and protect website traffic.
After acceptance, the public roster may show a character name, class, any specialisation and role. The roster transfer does not publish the applicant’s Discord username, message or availability. Information may be shared with legally authorised public bodies or other competent authorities only in connection with a valid legal request or obligation.
Services outside Türkiye
Cloudflare uses global infrastructure, which may involve processing website requests and connection information outside Türkiye. This notice does not mean that all information is stored only in Türkiye. Where a cross-border transfer occurs, the conditions in KVKK Article 9 apply. Visiting the website or reading this notice is not explicit consent to a transfer.
If communication takes place on Discord, or you follow links to services such as Discord or Instagram, that provider’s own data-processing and transfer terms also apply.
Retention and erasure
Records are retained in light of the processing purpose, the duration of the community relationship and any applicable legal obligations or need to protect rights. Deletion, destruction or anonymisation is considered when the relevant purposes and legal grounds no longer apply.
Applications are not deleted automatically after a fixed age. Management reviews correction and erasure requests against the records and applicable legal requirements. The Cookie Policy explains cookie and browser preference lifetimes.
Your rights under KVKK Article 11
- Learn whether your personal data is processed and request information about any processing.
- Learn the purpose of processing and whether the information is used in line with that purpose.
- Know the third parties to whom your personal data is transferred within Türkiye or abroad.
- Request correction of incomplete or inaccurate personal data.
- Request deletion or destruction under the conditions in Article 7.
- Request that corrections, deletions or destruction be notified to third parties receiving the data.
- Object to an adverse result produced solely by automated analysis of your personal data.
- Seek compensation for damage caused by unlawful processing of your personal data.
How to exercise your rights
Send your request to info@revenant.com. Using “KVKK request” as the subject and providing your character name, any application reference, the scope of your request and a reply address will help us find the relevant record.
Proportionate identity or account verification may be necessary to avoid disclosing information to the wrong person. Do not include a national identity number, an identity-document copy or unnecessary sensitive information in your first message. If a particular request format or further information is legally required, we will explain why and the appropriate method.
Properly submitted requests under KVKK are answered as soon as possible, depending on their nature, and within 30 days. Requests are generally free of charge; if the action incurs an additional cost, only the fee schedule permitted by the applicable rules may be used.
If your request is rejected, the response is insufficient or no response arrives on time, you may complain to the Turkish Personal Data Protection Board under the statutory conditions within 30 days of learning of the response and, in any event, within 60 days of your original request.
