Privacy Policy

Admin portal · https://playstudyo.fit/

This policy describes which data the internal admin portal of PLAY STÜDYO PLUS GÜZELOBA SPORTİF HİZMETLER LİMİTED ŞİRKETİ processes, for what purpose and for how long.

1. Controller

PLAY STÜDYO PLUS GÜZELOBA SPORTİF HİZMETLER LİMİTED ŞİRKETİ
Güzeloba Mah. Havaalanı Cad. No: 48/201
07230 Muratpaşa / Antalya, Türkei
Phone: +90 216 377 75 29
E-mail: info@playstudyo.fit

2. Purpose of the application

This application is an internal admin portal. Employees of PLAY STÜDYO PLUS GÜZELOBA SPORTİF HİZMETLER LİMİTED ŞİRKETİ use it to reply to messages and comments that customers send to the company's own Facebook Pages and Instagram accounts. The application is not open to the public for registration.

3. Data processed

3.1 Data of portal users

Name and e-mail address (login)
Password — stored only as a cryptographic hash, never in plain text
Assigned permissions and time of the last login
Log of actions performed (e.g. “message answered”) for traceability

3.2 Data from Meta services

The following is retrieved via the official Meta Graph API:

Messages from Facebook Messenger and Instagram Direct addressed to the company's accounts — including the senders' name and profile ID
Public comments on the company's posts
The company's posts and related metrics (followers, likes)

Caching. So that the application remains usable and Meta does not have to be queried again on every click, this content is copied into our database when a fetch is triggered manually and kept there. It is used solely to handle customer enquiries, not analysed and not shared. We delete it at any time on request — see Data deletion.

3.3 Access credentials for the Meta API

An access token is transmitted encrypted and stored on the server so that the application can access the company's own accounts on its behalf. It is visible to administrators only.

4. Legal basis

Processing takes place to carry out pre-contractual and contractual communication (Art. 6(1)(b) GDPR) and on the basis of our legitimate interest in orderly customer service (Art. 6(1)(f) GDPR). For users in Turkey, the corresponding provisions of the KVKK (Law No. 6698) apply.

5. Disclosure to third parties

There is no disclosure to third parties. No data is sold, rented or passed on to third parties for advertising purposes. Data is exchanged exclusively with Meta Platforms Ireland Ltd. as the operator of the interfaces used.

6. Retention period

Portal accounts: until deleted by an administrator
Activity log: a maximum of 12 months
Messages and comments: stored from the time of retrieval, deleted on request within 30 days

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. To exercise them, contact info@playstudyo.fit. We respond within 30 days.

How to request deletion of your data is explained on the Data deletion page.

8. Security

Transmission exclusively encrypted via HTTPS
Passwords hashed with salt (bcrypt)
Protection against cross-site request forgery on all forms
Access only after login and only within the assigned permissions

9. Changes

We adapt this policy when the processing changes. The version published on this page applies. The English text is a translation; in case of discrepancies the German original prevails.