Data Protection Notice (KVKK)

Data controller

Your personal data is processed by Heves Bilbil (Milagros Aksesuar) as data controller. Address: Kızılarık Mah. 2754 Sk. No: 1 İç Kapı No: 320, Muratpaşa / Antalya. Contact: destek@rezervasyonbizde.com. Tax office: Düden, tax ID: 1700400573.

Personal data processed

• Identity: first and last name
• Contact: email address; for a business representative, also a phone number
• Transaction security: password digest, session records, browser self-description (User-Agent), sign-in attempt counters
• Customer transactions: reservations, party size and the women/men split of the group, ratings, favourites
• Location: device location kept in memory for the session only; if you turned on "Nearby deals" notifications, your area coordinate rounded to about one kilometre and its area name (deleted when you turn the switch off); and for business records, the venue address coordinate
• For business registration: tax number or national ID number, and documents such as the tax certificate and signature circular

Purposes of processing

• Creating the membership record and maintaining the session
• Listing businesses by location and providing the reservation service
• Assessing and verifying business applications
• Ensuring service security and preventing abuse
• Meeting legal obligations and providing evidence in disputes

Legal grounds

Data is processed on the grounds that it is necessary for the conclusion and performance of a contract (art. 5/2-c), for compliance with a legal obligation (art. 5/2-ç), for the establishment and protection of a right (art. 5/2-e), and legitimate interest (art. 5/2-f).

Device location is processed on the basis of the EXPLICIT CONSENT you give through the browser. You may withhold that consent or withdraw it in your browser settings; listings will then be shown by the province you choose rather than by distance.

Method of collection

Data is collected electronically through registration and reservation forms, the business verification form and document uploads, the browser location permission and the session cookie.

Transfers, including abroad

Your reservation details are transferred to the relevant business for the performance of the service: your name, time, party size and the women/men split of the group. Your email address is not transferred to the business.

To show the name of where you are, coordinates rounded to roughly 110 metres are sent to the OpenStreet Map Foundation's Nominatim service, located outside Türkiye. This constitutes a transfer abroad under art. 9 of the KVKK and rests on your explicit consent; if you do not grant location permission, the transfer never takes place.

Our servers are currently hosted in the data centre of AltunHOST LTD in Frankfurt, Germany, which means your account and reservation records are stored outside Türkiye; under Article 9 of the Turkish data protection law this constitutes a transfer abroad. The hosting provider accesses the data only to provide the service and does not use it for its own purposes. We plan to move hosting to Türkiye; when we do, this section will be updated and the transfer will end.

To send you email (password resets, address verification and notifications) we use a delivery service called Resend. Your email address, your name and the content of the message are transferred to that service's servers in Ireland; under Article 9 of the Turkish data protection law this too constitutes a transfer abroad. The provider processes this data only to carry the message and does not use it for its own purposes.

Businesses can upload their menu cards, and to turn the contents into text the file is sent to Anthropic's servers abroad. That file is the business's own commercial content and contains no customer data. The transfer happens once, only when a business uploads a menu — the resulting text is then kept in our own database and is not sent again each time someone reads it.

Retention period

Personal data is kept for as long as the purpose of processing requires and for the limitation and retention periods set out in the relevant legislation. Session records expire after 30 days.

Your rights under art. 11 of the KVKK

• To learn whether your personal data is processed and, if so, to request information about it
• To learn the purpose of processing and whether it is used in line with that purpose
• To know the third parties to whom it is transferred, in Türkiye or abroad
• To request correction if it is incomplete or incorrect
• To request erasure or destruction where the conditions are met
• To request that correction, erasure and destruction be notified to third parties it was transferred to
• To object to a result against you produced solely by automated analysis
• To claim compensation if you suffer loss because of unlawful processing

How to apply

To exercise your rights you can send your requests to destek@rezervasyonbizde.com or in writing to Kızılarık Mah. 2754 Sk. No: 1 İç Kapı No: 320, Muratpaşa / Antalya. Your application will be concluded within thirty days at the latest.