Cookie Notice

A. Data Controller

As Istanbul Museum of Modern Art Economic Enterprise of the Istanbul Foundation for Modern Art (“Museum”), affiliated with the Istanbul Foundation for Modern Art, we attach importance to protecting your personal data and processing your personal data in a transparent and lawful manner. We recommend that you carefully read this Notice, which explains the purposes for which we process your personal data obtained through cookies, your rights as the Data Subject, and our obligations as the data controller.

Through this Notice, we inform you, in relation to the processing of personal data obtained automatically by placing cookies on your device in order to improve your experience during your use of or visit to our website (“Site”) at www.istanbulmodern.org, about the purposes for which and the types of cookies we use, the legal grounds, how you can manage these cookies, and your rights.

As Istanbul Museum of Modern Art Economic Enterprise of the Istanbul Foundation for Modern Art, we may cease using the cookies currently used on our Site, change their types or functions, or add new cookies to our Site. Accordingly, we reserve the right to amend the provisions of this Cookie Notice at any time.

Any amendment made to the current Cookie Notice shall enter into force upon being published on the Site or through any other publicly accessible medium. You can find the date of the latest update at the end of this Notice.

For further information regarding the purposes for which your personal data is processed by our organization, you may refer to the Personal Data Protection and Processing Policy of the Istanbul Foundation for Modern Art and Istanbul Museum of Modern Art Economic Enterprise of the Istanbul Foundation for Modern Art.

B. What Is a Cookie?

Cookies are small text files downloaded to your device when you visit a website. Cookies may also be sent back to the originating website or to another website that recognizes the relevant cookie, and they act as a form of memory for a website, enabling the site to remember details about previous visits. For example, cookies may remember end-user preferences, improve the user experience, and tailor content to items that are most relevant to end users.

More general information about cookies is available at www.aboutcookies.org.

C. Personal Data Processed, Purposes of Processing Personal Data and Legal Grounds

We process your personal data collected through cookies in accordance with the personal data processing conditions specified in Article 5 of the Turkish Personal Data Protection Law (“Law”) and for the purposes specified below for each type of cookie. The data processing purposes and the relevant processing condition/legal ground under the Law on which we rely when using each type of cookie are set out below.

Strictly Necessary Cookies

Strictly Necessary Cookies are cookies placed on your device while you view the Site and are required for the website to function properly.

For the data processing activities carried out during the use of these cookies, we rely on the legal grounds under Article 5/2-c of the Law that “processing of personal data belonging to the parties to a contract is necessary, provided that it is directly related to the establishment or performance of the contract” and that “processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing does not violate the fundamental rights and freedoms of the data subject.”

Accordingly, we process your user transaction information, including user identity/ID, IP address, device, browser and operating system information, the date and time of your visit and cookie preferences, location information from which you access the Site, interaction status (for example, whether you were able to access the website or received an error warning), use of features on the Site, search terms you enter, how frequently you visit the Site, language preferences, page-scrolling activity, and information regarding the tabs you access.

Functionality Cookies

For data processing activities carried out through Functionality Cookies in order to enhance the functionality of the Site and provide ease of use, we rely on the legal ground of “explicit consent” under Article 5/1 of the Law.

If you provide your explicit consent, we process your user transaction information, including user identity/ID, IP address, device, browser and operating system information, the date and time of your visit and cookie preferences, location information from which you access the Site, interaction status (for example, whether you were able to access the website or received an error warning), use of features on the Site, search terms you enter, how frequently you visit the Site, language preferences, page-scrolling activity, and information regarding the tabs you access.

Performance and Analytics Cookies

Performance Cookies enable us to monitor and analyze the number of people viewing the Site and Site traffic. Through these cookies, we may optimize the performance settings of the Site or make it easier for visitors to find what they are looking for. For data processing activities carried out during the use of these cookies, we rely on the legal ground of “explicit consent” under Article 5/1 of the Law.

If you provide your explicit consent, we process your user transaction information, including user identity/ID, IP address, device, browser and operating system information, the date and time of your visit and cookie preferences, location information from which you access the Site, interaction status (for example, whether you were able to access the website or received an error warning), use of features on the Site, search terms you enter, how frequently you visit the Site, language preferences, page-scrolling activity, and information regarding the tabs you access.

Advertising and Marketing Cookies

These cookies are used to carry out personalization, targeting and advertising activities through personalized advertising cookies and, if you have given marketing permission to our Museum, to combine your data. For data processing activities carried out during the use of these cookies, we rely on the legal ground of “explicit consent” under Article 5/1 of the Law.

If you provide your explicit consent, we process your user transaction information, including user identity/ID, IP address, device, browser and operating system information, the date and time of your visit and cookie preferences, location information from which you access the Site, interaction status (for example, whether you were able to access the website or received an error warning), use of features on the Site, search terms you enter, how frequently you visit the Site, language preferences, page-scrolling activity, and information regarding the tabs you access.

D. Types of Cookies Used on the Website

The tables below set out the cookies used on the Site, their providers, types, retention periods, purposes of use and categories.

Strictly Necessary Cookies
Cookie Name Provider Cookie Type Retention Period Description Category
AUTH_CASAFRONT Istanbul Modern (istanbulmodern.org) Authentication Cookie 5 hours (sliding) Management of member login sessions; identifying the user who is logged in to the Site Strictly Necessary
ImodernFrontSession Istanbul Modern (istanbulmodern.org) Session Cookie For the duration of the session Maintaining server-side session status (shopping cart, etc.) Strictly Necessary
memberemailcode Istanbul Modern (istanbulmodern.org) Persistent Cookie 3 minutes Temporary storage of the membership email verification code Strictly Necessary
memberemailconfirm Istanbul Modern (istanbulmodern.org) Persistent Cookie 30 minutes Tracking member email verification status Strictly Necessary
membershipsale Istanbul Modern (istanbulmodern.org) Persistent Cookie 30 minutes Storing the membership sale order code during the transaction Strictly Necessary
privatecontent_ Istanbul Modern (istanbulmodern.org) Session Cookie For the duration of the session Verifying authorization to access password-protected content (dynamic ID) Strictly Necessary
cinematicket Istanbul Modern (istanbulmodern.org) Persistent Cookie 30 minutes Temporary storage of cinema ticket purchase form data Strictly Necessary
cinematicketresult Istanbul Modern (istanbulmodern.org) Persistent Cookie 30 minutes Tracking the result of the cinema ticket transaction Strictly Necessary
eventsale Istanbul Modern (istanbulmodern.org) Persistent Cookie 30 minutes Temporary storage of event sales form data Strictly Necessary
eventsaleresult Istanbul Modern (istanbulmodern.org) Persistent Cookie 30 minutes Tracking the result of the event sales transaction Strictly Necessary
emailcode Istanbul Modern (istanbulmodern.org) Persistent Cookie 3 minutes Temporary storage of the contact form email verification code Strictly Necessary
emailconfirm Istanbul Modern (istanbulmodern.org) Persistent Cookie 30 minutes Tracking the contact form email verification status Strictly Necessary
headerannouncementshop Istanbul Modern (istanbulmodern.org) Session Cookie For the duration of the session Managing the display status of the shop header announcement/banner Strictly Necessary
headerannouncement Istanbul Modern (istanbulmodern.org) Session Cookie For the duration of the session Managing the display status of the header announcement/banner Strictly Necessary
popupannouncement Istanbul Modern (istanbulmodern.org) Session Cookie For the duration of the session Managing the display status of the opening pop-up announcement Strictly Necessary
cookienotification Istanbul Modern (istanbulmodern.org) Persistent Cookie 15 days Storing the closed status of the cookie notification bar Strictly Necessary
cart2 Istanbul Modern (istanbulmodern.org) Persistent Cookie 3 days Storing shopping cart contents (products) and maintaining the shopping process Strictly Necessary
cartTotalItems Istanbul Modern (istanbulmodern.org) Session Cookie For the duration of the session Displaying the total number of products in the shopping cart Strictly Necessary
orderapproved Istanbul Modern (istanbulmodern.org) Session Cookie For the duration of the session Ensuring that the order confirmation screen is displayed correctly Strictly Necessary
returnurl Istanbul Modern (istanbulmodern.org) Persistent Cookie 15 minutes Storing the page to which the user will be redirected after login Strictly Necessary
loginSuccess Istanbul Modern (istanbulmodern.org) Session Cookie For the duration of the session Tracking successful completion of the login process Strictly Necessary
.AspNetCore.Antiforgery.RVs_9bo3Eeg Istanbul Modern (istanbulmodern.org) First-party For the duration of the session Works together with .AspNetCore.Session to provide protection against cross-site request forgery (also known as XSRF or CSRF). Strictly Necessary
__cf_bm .fonts.net Third-party 30 minutes Used to distinguish between humans and bots. This is useful for the website in generating valid reports on website usage. Strictly Necessary
Performance and Analytics Cookies
Cookie Name Provider Cookie Type Retention Period Description Category
_ga Google (GA4 — G-1EQ03ZTWRV) Persistent Cookie 2 years Measuring visitor and session statistics Analytics
_ga_ (e.g. _ga_1EQ03ZTWRV) Google (GA4) Persistent Cookie 2 years Distinguishing user sessions and traffic source Analytics
_clck Microsoft (Clarity) Persistent Cookie 1 year Session identification and heat mapping Analytics
XXX Microsoft (Clarity) Persistent Cookie 1 year Clarity visitor identifier Analytics
XXX Microsoft (Clarity) Persistent Cookie 1 day Combining page views into a session Analytics
_gid Google (GA4) Persistent Cookie 24 hours Daily unique user identification Analytics
_gat Google (GA4) Persistent Cookie 1 minute Limiting request rate Analytics
ANONCHK Microsoft (Clarity/Bing) Persistent Cookie 1 day Anonymous session identifier Analytics
_ga .istanbulmodern.org Persistent Cookie 1 year Registers a unique ID used to generate statistical data on how the visitor uses the website. Analytics
_ga_1EQ03ZTWRV .istanbulmodern.org Persistent Cookie 1 year Used by Google Analytics to store user-specific statistical data. Analytics
Advertising and Marketing Cookies
Cookie Name Provider Cookie Type Retention Period Description Category
_gac_gb_<id> Google (GA4/Ads) Persistent Cookie 90 days Transferring Google Ads campaign information to GA4 Advertising
_gcl_au Google (Ads) Persistent Cookie 90 days Advertising conversion and retargeting Advertising
_gcl_ls Google (Ads) Session Cookie For the duration of the session Google Click ID status Advertising
IDE Google (doubleclick.net) Persistent Cookie 1 year Interest-based advertising (DoubleClick) Advertising
__gads / __gpi Google Persistent Cookie 1 year Advertising preferences and conversion Advertising
NID Google Persistent Cookie 6 months Search/reCAPTCHA preferences and advertising personalization Advertising
1P_JAR Google Persistent Cookie 1 month Conversion measurement and targeting Advertising
ANID Google Persistent Cookie 1 year Targeting using the Google Ads profile Advertising
CONSENT Google Persistent Cookie Persistent Consent preferences across Google services Advertising
_fbp Meta (Facebook Pixel) Persistent Cookie 3 months Meta advertising conversion and retargeting Advertising
fr Meta (Facebook) Persistent Cookie 3 months Targeting and measurement on the Meta platform Advertising
YSC .youtube.com Third-party For the duration of the session Used by YouTube to remember user input and associate a user's actions. This cookie remains valid while the user's browser is open. Advertising
SM .c.clarity.ms Third-party For the duration of the session Registers a unique ID identifying the user's device during repeat visits across websites using the same advertising network. The ID is used to enable targeted advertising. Advertising
VISITOR_PRIVACY_METADATA .youtube.com Third-party 180 days Used to track and enhance users' privacy settings on the YouTube platform. Advertising
VISITOR_INFO1_LIVE .youtube.com Third-party 180 days Used by YouTube to collect information about the user's browser and device, such as screen resolution and preferred language. Advertising
__Secure-ROLLOUT_TOKEN .youtube.com Third-party 180 days Registers a unique ID to maintain statistics on which YouTube videos the user has watched. Advertising
MUID Microsoft (Bing) Persistent Cookie 1 year General identifier for the Bing advertising network Advertising
_uetsid Microsoft (Bing UET) Session Cookie For the duration of the session Bing conversion tracking (UET) Advertising
_uetvid Microsoft (Bing UET) Persistent Cookie 1 year Bing UET retargeting Advertising
ins-id Insider (useinsider.com) Persistent Cookie 1 year Insider visitor ID (segmentation) Marketing
insider-* / _insp_* Insider (useinsider.com) Persistent/Session Variable Personalization, recommendation engine and campaign tracking Marketing
efl-uuid Efilli (efilli.com) Persistent Cookie 1 year Efilli visitor UUID (marketing automation) Marketing
efl-* Efilli (efilli.com) Persistent/Session Variable Email/marketing campaign tracking Marketing
.AspNetCore.Antiforgery.ZJXsqh_syYI Istanbul Modern (istanbulmodern.org) Session For the duration of the session Works together with .AspNetCore.Session to provide protection against cross-site request forgery (also known as XSRF or CSRF). Functional
E. Third Parties with Whom Personal Data Is Shared and Purposes of Sharing
Purpose of Personal Data Transfer Parties to Whom Personal Data Is Transferred
Fulfilment of our legal obligations where authorized institutions or organizations request information from our organization or where we are required to make notifications to such institutions. Authorized institutions and organizations
Obtaining product/service support from cookie service providers, suppliers and business partners within the purposes specified under “C. Personal Data Processed, Purposes of Processing Personal Data and Legal Grounds.” Domestic and international suppliers and business partners

Your personal data is transferred abroad in accordance with the Regulation on the Procedures and Principles Regarding the Transfer of Personal Data Abroad, published in the Official Gazette dated July 10, 2024 and numbered 32598, and applicable legislation, provided that appropriate safeguards are ensured. Necessary technical and administrative measures are taken to ensure that international data transfers are carried out securely.

F. Method of Collecting Your Personal Data

We collect your personal data electronically and automatically through cookies.

G. Disabling the Use of Cookies

In addition to the Cookie Preferences Panel, you may change your browser and/or mobile device settings to prevent cookies from this website from being placed on your computer or mobile device. In most cases, browser settings can be changed to reject new cookies, disable existing cookies, or simply notify you when new cookies are sent to your device.

However, cookies that are strictly necessary for the operation of the Site must be used. We would like to remind you that if Strictly Necessary Cookies are not used, certain functions of the Site may operate partially or may not operate at all.

Information on how you can manage your preferences regarding the cookies used on the Site is provided below:

Visitors may customize their cookie preferences by changing the settings of the browser through which they view the Site. If the browser in use provides this option, cookie preferences may be changed through browser settings.

Accordingly, although the available options may vary depending on the browser, visitors may prevent the use of cookies, choose to receive a warning before cookies are used, or disable or delete only certain cookies.

General information on disabling cookies is available at www.aboutcookies.org.

H. Rights of the Data Subject Listed under Article 11 of the Law

You may submit your requests concerning your personal data and your rights under Article 11 of the Turkish Personal Data Protection Law at any time, in accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller,” in writing or by using a registered electronic mail (KEP) address, secure electronic signature, mobile signature, or an email address that you have previously notified to the Museum and that is registered in our systems, using the contact details below.

Data Controller: Istanbul Foundation for Modern Art

Email: kisisel.veriler@istanbulmodern.org

Address: Kılıç Ali Paşa Mah. Tophane İskele Cad. No:1/1 Beyoğlu/Istanbul

Registered Electronic Mail (KEP) Address: istanbulmodern@hs02.kep.tr

When submitting applications concerning your rights under the Law, you may use the Data Subject Application Form available on the Istanbul Modern website. Depending on the nature of your request, your application will be concluded free of charge as soon as possible and no later than thirty days.

If processing the request incurs an additional cost, a fee may be charged in accordance with the tariff to be determined by the Turkish Personal Data Protection Board.

Last updated: July 27, 2026