A. Data Controller
As Istanbul Museum of Modern Art Economic Enterprise of the Istanbul Foundation for Modern Art (“Museum”), affiliated with the Istanbul Foundation for Modern Art, we attach importance to protecting your personal data and processing your personal data in a transparent and lawful manner. We recommend that you carefully read this Notice, which explains the purposes for which we process your personal data obtained through cookies, your rights as the Data Subject, and our obligations as the data controller.
Through this Notice, we inform you, in relation to the processing of personal data obtained automatically by placing cookies on your device in order to improve your experience during your use of or visit to our website (“Site”) at www.istanbulmodern.org, about the purposes for which and the types of cookies we use, the legal grounds, how you can manage these cookies, and your rights.
As Istanbul Museum of Modern Art Economic Enterprise of the Istanbul Foundation for Modern Art, we may cease using the cookies currently used on our Site, change their types or functions, or add new cookies to our Site. Accordingly, we reserve the right to amend the provisions of this Cookie Notice at any time.
Any amendment made to the current Cookie Notice shall enter into force upon being published on the Site or through any other publicly accessible medium. You can find the date of the latest update at the end of this Notice.
For further information regarding the purposes for which your personal data is processed by our organization, you may refer to the Personal Data Protection and Processing Policy of the Istanbul Foundation for Modern Art and Istanbul Museum of Modern Art Economic Enterprise of the Istanbul Foundation for Modern Art.
B. What Is a Cookie?
Cookies are small text files downloaded to your device when you visit a website. Cookies may also be sent back to the originating website or to another website that recognizes the relevant cookie, and they act as a form of memory for a website, enabling the site to remember details about previous visits. For example, cookies may remember end-user preferences, improve the user experience, and tailor content to items that are most relevant to end users.
More general information about cookies is available at www.aboutcookies.org.
C. Personal Data Processed, Purposes of Processing Personal Data and Legal Grounds
We process your personal data collected through cookies in accordance with the personal data processing conditions specified in Article 5 of the Turkish Personal Data Protection Law (“Law”) and for the purposes specified below for each type of cookie. The data processing purposes and the relevant processing condition/legal ground under the Law on which we rely when using each type of cookie are set out below.
Strictly Necessary Cookies
Strictly Necessary Cookies are cookies placed on your device while you view the Site and are required for the website to function properly.
For the data processing activities carried out during the use of these cookies, we rely on the legal grounds under Article 5/2-c of the Law that “processing of personal data belonging to the parties to a contract is necessary, provided that it is directly related to the establishment or performance of the contract” and that “processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing does not violate the fundamental rights and freedoms of the data subject.”
Accordingly, we process your user transaction information, including user identity/ID, IP address, device, browser and operating system information, the date and time of your visit and cookie preferences, location information from which you access the Site, interaction status (for example, whether you were able to access the website or received an error warning), use of features on the Site, search terms you enter, how frequently you visit the Site, language preferences, page-scrolling activity, and information regarding the tabs you access.
Functionality Cookies
For data processing activities carried out through Functionality Cookies in order to enhance the functionality of the Site and provide ease of use, we rely on the legal ground of “explicit consent” under Article 5/1 of the Law.
If you provide your explicit consent, we process your user transaction information, including user identity/ID, IP address, device, browser and operating system information, the date and time of your visit and cookie preferences, location information from which you access the Site, interaction status (for example, whether you were able to access the website or received an error warning), use of features on the Site, search terms you enter, how frequently you visit the Site, language preferences, page-scrolling activity, and information regarding the tabs you access.
Performance and Analytics Cookies
Performance Cookies enable us to monitor and analyze the number of people viewing the Site and Site traffic. Through these cookies, we may optimize the performance settings of the Site or make it easier for visitors to find what they are looking for. For data processing activities carried out during the use of these cookies, we rely on the legal ground of “explicit consent” under Article 5/1 of the Law.
If you provide your explicit consent, we process your user transaction information, including user identity/ID, IP address, device, browser and operating system information, the date and time of your visit and cookie preferences, location information from which you access the Site, interaction status (for example, whether you were able to access the website or received an error warning), use of features on the Site, search terms you enter, how frequently you visit the Site, language preferences, page-scrolling activity, and information regarding the tabs you access.
Advertising and Marketing Cookies
These cookies are used to carry out personalization, targeting and advertising activities through personalized advertising cookies and, if you have given marketing permission to our Museum, to combine your data. For data processing activities carried out during the use of these cookies, we rely on the legal ground of “explicit consent” under Article 5/1 of the Law.
If you provide your explicit consent, we process your user transaction information, including user identity/ID, IP address, device, browser and operating system information, the date and time of your visit and cookie preferences, location information from which you access the Site, interaction status (for example, whether you were able to access the website or received an error warning), use of features on the Site, search terms you enter, how frequently you visit the Site, language preferences, page-scrolling activity, and information regarding the tabs you access.
D. Types of Cookies Used on the Website
The tables below set out the cookies used on the Site, their providers, types, retention periods, purposes of use and categories.
| Strictly Necessary Cookies | |||||
|---|---|---|---|---|---|
| Cookie Name | Provider | Cookie Type | Retention Period | Description | Category |
| AUTH_CASAFRONT | Istanbul Modern (istanbulmodern.org) | Authentication Cookie | 5 hours (sliding) | Management of member login sessions; identifying the user who is logged in to the Site | Strictly Necessary |
| ImodernFrontSession | Istanbul Modern (istanbulmodern.org) | Session Cookie | For the duration of the session | Maintaining server-side session status (shopping cart, etc.) | Strictly Necessary |
| memberemailcode | Istanbul Modern (istanbulmodern.org) | Persistent Cookie | 3 minutes | Temporary storage of the membership email verification code | Strictly Necessary |
| memberemailconfirm | Istanbul Modern (istanbulmodern.org) | Persistent Cookie | 30 minutes | Tracking member email verification status | Strictly Necessary |
| membershipsale | Istanbul Modern (istanbulmodern.org) | Persistent Cookie | 30 minutes | Storing the membership sale order code during the transaction | Strictly Necessary |
| privatecontent_ | Istanbul Modern (istanbulmodern.org) | Session Cookie | For the duration of the session | Verifying authorization to access password-protected content (dynamic ID) | Strictly Necessary |
| cinematicket | Istanbul Modern (istanbulmodern.org) | Persistent Cookie | 30 minutes | Temporary storage of cinema ticket purchase form data | Strictly Necessary |
| cinematicketresult | Istanbul Modern (istanbulmodern.org) | Persistent Cookie | 30 minutes | Tracking the result of the cinema ticket transaction | Strictly Necessary |
| eventsale | Istanbul Modern (istanbulmodern.org) | Persistent Cookie | 30 minutes | Temporary storage of event sales form data | Strictly Necessary |
| eventsaleresult | Istanbul Modern (istanbulmodern.org) | Persistent Cookie | 30 minutes | Tracking the result of the event sales transaction | Strictly Necessary |
| emailcode | Istanbul Modern (istanbulmodern.org) | Persistent Cookie | 3 minutes | Temporary storage of the contact form email verification code | Strictly Necessary |
| emailconfirm | Istanbul Modern (istanbulmodern.org) | Persistent Cookie | 30 minutes | Tracking the contact form email verification status | Strictly Necessary |
| headerannouncementshop | Istanbul Modern (istanbulmodern.org) | Session Cookie | For the duration of the session | Managing the display status of the shop header announcement/banner | Strictly Necessary |
| headerannouncement | Istanbul Modern (istanbulmodern.org) | Session Cookie | For the duration of the session | Managing the display status of the header announcement/banner | Strictly Necessary |
| popupannouncement | Istanbul Modern (istanbulmodern.org) | Session Cookie | For the duration of the session | Managing the display status of the opening pop-up announcement | Strictly Necessary |
| cookienotification | Istanbul Modern (istanbulmodern.org) | Persistent Cookie | 15 days | Storing the closed status of the cookie notification bar | Strictly Necessary |
| cart2 | Istanbul Modern (istanbulmodern.org) | Persistent Cookie | 3 days | Storing shopping cart contents (products) and maintaining the shopping process | Strictly Necessary |
| cartTotalItems | Istanbul Modern (istanbulmodern.org) | Session Cookie | For the duration of the session | Displaying the total number of products in the shopping cart | Strictly Necessary |
| orderapproved | Istanbul Modern (istanbulmodern.org) | Session Cookie | For the duration of the session | Ensuring that the order confirmation screen is displayed correctly | Strictly Necessary |
| returnurl | Istanbul Modern (istanbulmodern.org) | Persistent Cookie | 15 minutes | Storing the page to which the user will be redirected after login | Strictly Necessary |
| loginSuccess | Istanbul Modern (istanbulmodern.org) | Session Cookie | For the duration of the session | Tracking successful completion of the login process | Strictly Necessary |
| .AspNetCore.Antiforgery.RVs_9bo3Eeg | Istanbul Modern (istanbulmodern.org) | First-party | For the duration of the session | Works together with .AspNetCore.Session to provide protection against cross-site request forgery (also known as XSRF or CSRF). | Strictly Necessary |
| __cf_bm | .fonts.net | Third-party | 30 minutes | Used to distinguish between humans and bots. This is useful for the website in generating valid reports on website usage. | Strictly Necessary |
| Performance and Analytics Cookies | |||||
|---|---|---|---|---|---|
| Cookie Name | Provider | Cookie Type | Retention Period | Description | Category |
| _ga | Google (GA4 — G-1EQ03ZTWRV) | Persistent Cookie | 2 years | Measuring visitor and session statistics | Analytics |
| _ga_ (e.g. _ga_1EQ03ZTWRV) | Google (GA4) | Persistent Cookie | 2 years | Distinguishing user sessions and traffic source | Analytics |
| _clck | Microsoft (Clarity) | Persistent Cookie | 1 year | Session identification and heat mapping | Analytics |
| XXX | Microsoft (Clarity) | Persistent Cookie | 1 year | Clarity visitor identifier | Analytics |
| XXX | Microsoft (Clarity) | Persistent Cookie | 1 day | Combining page views into a session | Analytics |
| _gid | Google (GA4) | Persistent Cookie | 24 hours | Daily unique user identification | Analytics |
| _gat | Google (GA4) | Persistent Cookie | 1 minute | Limiting request rate | Analytics |
| ANONCHK | Microsoft (Clarity/Bing) | Persistent Cookie | 1 day | Anonymous session identifier | Analytics |
| _ga | .istanbulmodern.org | Persistent Cookie | 1 year | Registers a unique ID used to generate statistical data on how the visitor uses the website. | Analytics |
| _ga_1EQ03ZTWRV | .istanbulmodern.org | Persistent Cookie | 1 year | Used by Google Analytics to store user-specific statistical data. | Analytics |
| Advertising and Marketing Cookies | |||||
|---|---|---|---|---|---|
| Cookie Name | Provider | Cookie Type | Retention Period | Description | Category |
| _gac_gb_<id> | Google (GA4/Ads) | Persistent Cookie | 90 days | Transferring Google Ads campaign information to GA4 | Advertising |
| _gcl_au | Google (Ads) | Persistent Cookie | 90 days | Advertising conversion and retargeting | Advertising |
| _gcl_ls | Google (Ads) | Session Cookie | For the duration of the session | Google Click ID status | Advertising |
| IDE | Google (doubleclick.net) | Persistent Cookie | 1 year | Interest-based advertising (DoubleClick) | Advertising |
| __gads / __gpi | Persistent Cookie | 1 year | Advertising preferences and conversion | Advertising | |
| NID | Persistent Cookie | 6 months | Search/reCAPTCHA preferences and advertising personalization | Advertising | |
| 1P_JAR | Persistent Cookie | 1 month | Conversion measurement and targeting | Advertising | |
| ANID | Persistent Cookie | 1 year | Targeting using the Google Ads profile | Advertising | |
| CONSENT | Persistent Cookie | Persistent | Consent preferences across Google services | Advertising | |
| _fbp | Meta (Facebook Pixel) | Persistent Cookie | 3 months | Meta advertising conversion and retargeting | Advertising |
| fr | Meta (Facebook) | Persistent Cookie | 3 months | Targeting and measurement on the Meta platform | Advertising |
| YSC | .youtube.com | Third-party | For the duration of the session | Used by YouTube to remember user input and associate a user's actions. This cookie remains valid while the user's browser is open. | Advertising |
| SM | .c.clarity.ms | Third-party | For the duration of the session | Registers a unique ID identifying the user's device during repeat visits across websites using the same advertising network. The ID is used to enable targeted advertising. | Advertising |
| VISITOR_PRIVACY_METADATA | .youtube.com | Third-party | 180 days | Used to track and enhance users' privacy settings on the YouTube platform. | Advertising |
| VISITOR_INFO1_LIVE | .youtube.com | Third-party | 180 days | Used by YouTube to collect information about the user's browser and device, such as screen resolution and preferred language. | Advertising |
| __Secure-ROLLOUT_TOKEN | .youtube.com | Third-party | 180 days | Registers a unique ID to maintain statistics on which YouTube videos the user has watched. | Advertising |
| MUID | Microsoft (Bing) | Persistent Cookie | 1 year | General identifier for the Bing advertising network | Advertising |
| _uetsid | Microsoft (Bing UET) | Session Cookie | For the duration of the session | Bing conversion tracking (UET) | Advertising |
| _uetvid | Microsoft (Bing UET) | Persistent Cookie | 1 year | Bing UET retargeting | Advertising |
| ins-id | Insider (useinsider.com) | Persistent Cookie | 1 year | Insider visitor ID (segmentation) | Marketing |
| insider-* / _insp_* | Insider (useinsider.com) | Persistent/Session | Variable | Personalization, recommendation engine and campaign tracking | Marketing |
| efl-uuid | Efilli (efilli.com) | Persistent Cookie | 1 year | Efilli visitor UUID (marketing automation) | Marketing |
| efl-* | Efilli (efilli.com) | Persistent/Session | Variable | Email/marketing campaign tracking | Marketing |
| .AspNetCore.Antiforgery.ZJXsqh_syYI | Istanbul Modern (istanbulmodern.org) | Session | For the duration of the session | Works together with .AspNetCore.Session to provide protection against cross-site request forgery (also known as XSRF or CSRF). | Functional |
| E. Third Parties with Whom Personal Data Is Shared and Purposes of Sharing | |
|---|---|
| Purpose of Personal Data Transfer | Parties to Whom Personal Data Is Transferred |
| Fulfilment of our legal obligations where authorized institutions or organizations request information from our organization or where we are required to make notifications to such institutions. | Authorized institutions and organizations |
| Obtaining product/service support from cookie service providers, suppliers and business partners within the purposes specified under “C. Personal Data Processed, Purposes of Processing Personal Data and Legal Grounds.” | Domestic and international suppliers and business partners |
Your personal data is transferred abroad in accordance with the Regulation on the Procedures and Principles Regarding the Transfer of Personal Data Abroad, published in the Official Gazette dated July 10, 2024 and numbered 32598, and applicable legislation, provided that appropriate safeguards are ensured. Necessary technical and administrative measures are taken to ensure that international data transfers are carried out securely.
F. Method of Collecting Your Personal Data
We collect your personal data electronically and automatically through cookies.
G. Disabling the Use of Cookies
In addition to the Cookie Preferences Panel, you may change your browser and/or mobile device settings to prevent cookies from this website from being placed on your computer or mobile device. In most cases, browser settings can be changed to reject new cookies, disable existing cookies, or simply notify you when new cookies are sent to your device.
However, cookies that are strictly necessary for the operation of the Site must be used. We would like to remind you that if Strictly Necessary Cookies are not used, certain functions of the Site may operate partially or may not operate at all.
Information on how you can manage your preferences regarding the cookies used on the Site is provided below:
Visitors may customize their cookie preferences by changing the settings of the browser through which they view the Site. If the browser in use provides this option, cookie preferences may be changed through browser settings.
Accordingly, although the available options may vary depending on the browser, visitors may prevent the use of cookies, choose to receive a warning before cookies are used, or disable or delete only certain cookies.
General information on disabling cookies is available at www.aboutcookies.org.
H. Rights of the Data Subject Listed under Article 11 of the Law
You may submit your requests concerning your personal data and your rights under Article 11 of the Turkish Personal Data Protection Law at any time, in accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller,” in writing or by using a registered electronic mail (KEP) address, secure electronic signature, mobile signature, or an email address that you have previously notified to the Museum and that is registered in our systems, using the contact details below.
Data Controller: Istanbul Foundation for Modern Art
Email: kisisel.veriler@istanbulmodern.org
Address: Kılıç Ali Paşa Mah. Tophane İskele Cad. No:1/1 Beyoğlu/Istanbul
Registered Electronic Mail (KEP) Address: istanbulmodern@hs02.kep.tr
When submitting applications concerning your rights under the Law, you may use the Data Subject Application Form available on the Istanbul Modern website. Depending on the nature of your request, your application will be concluded free of charge as soon as possible and no later than thirty days.
If processing the request incurs an additional cost, a fee may be charged in accordance with the tariff to be determined by the Turkish Personal Data Protection Board.
Last updated: July 27, 2026