Loading…
Loading…
As Yemap Teknoloji ve Gıda Sanayi ve Dış Ticaret A.Ş. (PRIVON), we are committed to protecting your personal data in accordance with Law No. 6698 on the Protection of Personal Data ("KVKK"). This Privacy Notice explains how we collect, process, and safeguard your personal information when you use the PRIVON platform or interact with our services.
Data Controller: Yemap Teknoloji ve Gıda Sanayi ve Dış Ticaret A.Ş. (PRIVON)
Address: ATAKÖY 7-8-9-10. KISIM MAH. ÇOBANÇEŞME E-5 YAN YOL CAD. A NO: 22 /1 İÇ KAPI NO: 30 BAKIRKÖY/ İSTANBUL
Email: [email protected]
Data Protection Contact: For all questions, requests, and applications regarding your personal data, you may use the contact information above. PRIVON will appoint a data protection contact person when deemed necessary under KVKK, and this person's contact information will be published on the Platform.
Under Law No. 6698 on the Protection of Personal Data (KVKK), PRIVON is obligated to inform all data subjects about the data collected about them.
Your personal data is processed by PRIVON in accordance with Articles 5 and 6 of Law No. 6698 on the Protection of Personal Data for the following purposes: establishment or performance of contracts including making reservations at selected partner restaurants, benefiting from membership advantages, restaurant discovery, review and comment processes, expense tracking and reporting, providing personalized recommendations, and membership registration, activation and user verification processes; fulfillment of legal obligations including meeting requests from authorized institutions and ensuring compliance with legislation; establishment, exercise or protection of a right including protection of rights in potential disputes and conducting legal processes; our legitimate interests including managing suggestions, requests and complaints, ensuring customer satisfaction and improving services; and with your explicit consent, conducting campaigns and communications in line with your communication preferences, personalizing your experience and conducting marketing analyses; you have the right to withdraw your explicit consent at any time.
Within the scope of the purposes and processes mentioned above, we process your identity, contact, customer transaction information (for example, requests you submit to us, your appointment information), marketing information, transaction security information, legal transaction information, and financial information during payment transactions. Your personal data is processed in accordance with Law No. 6698 on the Protection of Personal Data based on legal grounds including explicit provision in laws, necessity for the establishment or performance of a contract, fulfillment of the data controller's legal obligations, and necessity for the data controller's legitimate interests without harming the fundamental rights and freedoms of the relevant person, or based on your explicit consent when necessary. Additionally, data processing activities are carried out in a manner that does not harm the fundamental rights and freedoms of the relevant persons and by observing the principle of data minimization.
Based on the provisions of Law No. 6698 on the Protection of Personal Data (KVKK), we share your data in accordance with law and rules of honesty, ensuring it is accurate and up-to-date, limited to specific, clear and legitimate purposes, with public institutions and organizations authorized to request this data for potential legal disputes, investigations, judicial or administrative audits, to achieve the stated purposes or due to a legal obligation. We also share for the purpose of responding to other official or legal information and document requests. All data transfers mentioned above are carried out in accordance with the provisions regarding the transfer of personal data regulated in Articles 8 and 9 of KVKK, with data security measures in place.
When you visit our websites and perform transactions on the sites, we collect your personal data through our sites using automatic and partially automatic methods. We collect your personal data based on legal grounds specified in Articles 5 and 6 of the Law on the Protection of Personal Data, including necessity for the establishment or performance of a contract, fulfillment of our legal obligations, necessity for establishing, exercising or protecting a right, and necessity for our legitimate interests without harming the fundamental rights and freedoms of the relevant person. You can find details of the purposes for which we conduct data processing activities based on these legal grounds in the first article of this privacy notice.
Protection of personal data is an important matter for our company. Our company takes necessary technical and administrative measures to protect against unauthorized access to personal data or loss, misuse, disclosure, alteration or destruction of this information. Our company commits to keeping your personal data confidential, taking all necessary technical and administrative measures and exercising due diligence to ensure confidentiality and security. In this framework, technical measures such as access control mechanisms, authorization systems, data encryption methods, keeping log records, penetration tests, network and system security measures, and regular audits and risk analyses are implemented; additionally, administrative measures such as confidentiality obligations for employees, data security training, establishment and implementation of internal policies and procedures are also implemented.
Despite our company taking necessary information security measures, in case personal data is damaged or falls into the hands of third parties as a result of attacks on the website and system, our Company will immediately notify you and the Personal Data Protection Board.
Our company will also conduct necessary investigations and audits to prevent recurrence of data breaches, review existing security systems and make necessary improvements, and continue its work to continuously improve the level of data security.
Your personal data processed for the purposes specified in this notice will be deleted, destroyed or anonymized and used in accordance with our Company's Personal Data Retention and Destruction Policy automatically or upon your request when the purpose requiring processing ceases and if any, the periods specified in the Laws expire. Your personal data processed for the purposes specified in this Privacy Notice will be deleted, destroyed or anonymized in accordance with our Company's Personal Data Retention and Destruction Policy automatically or upon your request when the relevant data processing purpose ceases, the legal reason requiring processing ends and/or the retention periods specified in relevant legislation, primarily Law No. 6698 on the Protection of Personal Data ("KVKK"), expire.
In this context, when determining periods for retaining your personal data, minimum retention periods specified in relevant legislation, our Company's legal obligations, the necessity to constitute evidence in possible disputes, and periods required by the data processing purpose are taken into account, and data destruction processes are initiated following the expiration of these periods.
Deletion, destruction or anonymization of personal data is carried out within the framework of periodic destruction processes determined by our Company in accordance with Article 7 of KVKK and the Regulation on Deletion, Destruction or Anonymization of Personal Data. In this process, destruction of data in a way that cannot be recovered and reused is ensured, and anonymized data can be used for statistical and similar purposes after being made unable to be associated with an identifiable or identified natural person.
Additionally, within the framework of your rights under Article 11 of KVKK, if you request deletion or destruction of your personal data, your request will be evaluated by our Company in accordance with legislation and your request will be fulfilled if legal conditions are met. However, if there is a legal obligation or legitimate reason requiring continued processing of the relevant data, such data may continue to be retained only within this scope.
Our company conducts personal data retention and destruction processes in accordance with KVKK and related secondary legislation, and ensures that these processes are carried out in a transparent, auditable manner that ensures data security.