Application Privacy Notice

Last updated: 9 November 2026. This page explains the current application process. The basis for international transfers, email and backup retention periods, and information for emergency contacts have not yet been finalised. The relevant sections describe the current position.

AG Training Application Privacy Notice

This notice explains how personal data is processed for applications to AG Training adult programmes and parent-submitted enquiries for AG Training Teen. It is not a participation agreement or an explicit-consent statement.

1. Data controller and contact details

Data controller: Lotus Bebek Kafe ve Gıda Sanayi Ticaret A.Ş. — operating under the AG Training service brand.

Address: Arnavutköy Mahallesi, Adalı Sokak 1/3, Esra Apartmanı No: 6, Beşiktaş/İstanbul, Türkiye.
Email: info@agtraining.pro.

2. Information collected and collection methods

The adult application form collects full name, email, telephone number, district/city, selected programme and training goal. Cycling experience, bicycle and equipment, availability and additional notes are optional. The application date, review status and date of acceptance of participation terms are also recorded.

Information is collected by partially or fully automated means when entered into the website form and stored electronically. Subsequent application correspondence is conducted by email. Teen enquiries are collected from contact details and messages sent by a parent or legal guardian through WhatsApp or email.

The application form does not request medical reports, diagnoses, medication information or identity documents. Please do not enter this information in free-text fields. This notice does not authorise processing of health data that may be needed later during training.

3. Purposes and legal bases for processing

Application review and communication: Contact details, programme preference, experience, goals and availability are processed to discuss the requested service, assess the application and send accepted applicants pricing, payment and starting information. For necessary information, the legal basis is processing directly related to establishing or performing a contract under Article 5/2(c) of Türkiye’s Personal Data Protection Law (KVKK).

Protecting rights relating to applications: In a specific dispute or claim, necessary application and correspondence records may be processed under KVKK Article 5/2(e) to establish, exercise or protect a right. This does not justify retaining every application indefinitely.

Data subject requests: Information needed to receive KVKK requests, verify identity and respond is processed to fulfil legal obligations under KVKK Article 5/2(ç).

Application information is not used on the basis of this application to send advertising or bulk marketing messages. Acceptance of participation terms is not treated as explicit consent to process personal data for any purpose or transfer it abroad.

4. Service providers and data transfers

Form information is stored in the application plugin on the AG Training website hosted by WordPress.com. Authorised AG Training management accesses it to review applications. WordPress.com/Automattic provides hosting and technical infrastructure; Turhost email infrastructure sends application notifications and approval emails. WP Mail SMTP is the plugin used to send email.

Application notifications are sent to info@agtraining.pro, while approval and participation information is sent to the applicant’s email address. The recipient’s email provider also processes the message during delivery. Parent communications through WhatsApp are also processed through WhatsApp infrastructure.

TrainingPeaks and Garmin links in the approval email direct users to those services. The reviewed application plugin does not automatically send form fields to them. Subsequent account connections and training-data sharing by the athlete are separate processing activities.

International transfers — section awaiting completion: The specific recipient entities, storage/access countries and applicable transfer basis under KVKK Article 9 have not yet been verified for the services used. The existence of a signed KVKK standard contract or another valid transfer mechanism is not assumed. WordPress.com’s GDPR data processing agreement cannot be presented here as a sufficient safeguard without separate assessment as a KVKK transfer basis.

5. Retention and deletion

WordPress application records: Records are permanently deleted by a daily automated check once 30 days have passed since application, regardless of payment or approval status. Trashed applications are included. Each run processes up to 100 records; scheduler delays or a processing queue may affect the actual deletion time.

Emails and other copies: Deleting records from the dashboard does not delete emails, WhatsApp messages, TrainingPeaks accounts or provider backups. Payments and athlete communications are tracked by email. We therefore do not promise that all personal data is deleted after 30 days. Applicable retention periods and deletion methods for emails and other copies must be finalised separately, distinguishing application correspondence, service/payment records and dispute documents.

6. Parent applications and emergency contacts

Teen applications are made by a parent or legal guardian. A child’s identity documents or health information are not requested in the initial discussion. If additional child data is needed, it should be handled with separate information and legal conditions appropriate to the processing activity.

The current approval email requests the name and phone number of an emergency contact by reply. This is a person other than the applicant. Direct information to that person, the processing basis, access and retention arrangements have not yet been finalised. An athlete’s acceptance of participation terms does not replace informing that person.

7. Your rights and how to submit a request

Under KVKK Article 11, you may learn whether your data is processed and request information if it is; enquire about purposes and whether use is consistent with them; and learn about recipients in Türkiye and abroad. You may request correction of inaccurate or incomplete data, deletion or destruction where legal conditions apply, and notification of these actions to recipients. You may object to an adverse outcome based solely on automated analysis and seek compensation for damage caused by unlawful processing.

You may send a signed written request to the company address above, or email info@agtraining.pro from an address you previously provided and that is registered in our system. Include full name, a signature for written requests, a Turkish identity number for Turkish citizens, or nationality and passport number or any identity number for foreign nationals; an address for service, any notification email/phone number and the subject of your request. These identity details are not requested in the athlete application form.

Requests are answered as soon as possible and within 30 days at the latest, according to their nature. If processing involves additional cost, only the fee set by the Personal Data Protection Board’s tariff may be charged.