Coliseum PT App – Privacy Policy

Last updated: 22.09.2026

This Privacy Policy explains how Dost İnşaat Taahhüt Sanayi Ve Ticaret A.Ş. (“Company”), operator of the Coliseum PT mobile application (“App”), collects, processes, and shares personal data belonging to the trainers who use the App (“User”), as well as information about the trainers’ clients that is processed through the App. This policy is prepared in accordance with Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”) and, where applicable, general data protection principles.

1. Data Controller Dost İnşaat Taahhüt Sanayi Ve Ticaret A.Ş. Address: Acarlar Mah. Acarkent Sit. Acarlar İş Merkezi No: 22, Beykoz – Istanbul, Türkiye For data protection requests: coliseum@coliseum.com.tr

2. What the App Does Coliseum PT is a mobile application used by personal trainers (“PT”) working at our club to manage their own class/appointment calendar, track the packages they sell to their clients and the payments they collect, and view the resulting earnings calculation. The App’s only users are trainers (PT); there is no client/member account or login in the App.

3. Data We Collect

Trainer account data:

• Full name
• Mobile phone number (required for account creation and for SMS one-time password (OTP) login)
• Email address (optional)
• Areas of expertise, certificate/training information
• IBAN and tax information (to make earnings payments)
• Class fee/wallet transactions and financial performance data
• Device and usage information (device model, operating system, IP address, in-app activity logs — for service quality and security purposes)

Client information entered by the trainer: To track appointments and packages for their own clients, a trainer records their client’s full name and phone number (email optional) in the App; the client’s appointment/session history (date, time, status), purchased package details, and payment/wallet information are also kept in the system in connection with this. Payment information (including saved credit card details) is processed through the infrastructure of authorized, secure payment institutions; the Company does not store full card numbers on its own servers. The trainer is responsible for the accuracy of this information and for informing their client accordingly.

4. Purposes of Processing

• Creating a trainer account and authenticating via SMS OTP
• Enabling the trainer to create, change, and cancel appointments/reservations
• Package sales, payment collection, wallet balance management, and invoicing
• Paying trainers their earnings (using IBAN/tax information)
• Ensuring service security, detecting errors, and improving the App
• Fulfilling legal obligations (tax, accounting, KVKK, etc.)

5. Who We Share Data With Your personal data may be shared, strictly for the purposes above, with:

• Authorized payment institutions that process payments/collections
• The service provider delivering SMS OTP phone verification
• Server/cloud hosting providers where data is stored
• Competent public authorities, where legally required
• Club management, for the purpose of tracking trainer performance/earnings and reviewing client appointments

Your data is not shared with any other third party for marketing purposes, and is not sold.

6. Data Retention Your personal data is retained for as long as necessary to fulfil the purposes above and for the retention periods required by applicable law (e.g. the Turkish Commercial Code, Tax Procedure Law). When your account is closed, data that is not subject to a legal retention obligation is deleted or anonymized within a reasonable period.

7. Data Security Appropriate technical and administrative measures are implemented to protect data collected through the App against unauthorized access, loss, or misuse. Card information is processed through the secure infrastructure of the relevant payment institution, not stored by the Company.

8. Your Rights Under KVKK Under Article 11 of Law No. 6698, you may apply to the Company to: learn whether your personal data is being processed; request information about such processing; learn the purpose of processing and whether the data is used accordingly; know the third parties to whom your data is transferred, domestically or abroad; request correction of incomplete or inaccurate data; request deletion or destruction of your data; request that such corrections/deletions be notified to third parties to whom the data was transferred; object to a result that is to your detriment arising from analysis of your data exclusively through automated systems; and claim compensation for damages arising from unlawful processing of your data.

You may submit your requests to coliseum@coliseum.com.tr or to the Company address above, in writing.

9. Changes to This Policy This Privacy Policy may be updated from time to time. The current version is always published on this page and takes effect as of its publication date.

10. Contact For questions: coliseum@coliseum.com.tr