KVKK privacy notice

1. Data controller

Under the Turkish Personal Data Protection Law No. 6698 ("KVKK") the data controller is Biz4Cloud Yazılım Limited Şirketi.

Address: Çeliktepe Mah. İsmet İnönü Cad. Yıldırımlar İş Merkezi No: 11 İç Kapı No: 501, Kağıthane / İstanbul
E-mail: info@biz4cloud.com

This notice covers personal data processed through the bringmymeal.com website, the BringMyMeal guest app and the BringMyMeal Staff app.

2. Personal data processed

• Identity: name (restaurant application, contact form, staff records set up by the restaurant).
• Contact: phone, e-mail, city and district (restaurant application, contact form).
• Customer transactions: orders, order notes, waiter calls and bill requests, contents of applications and messages.
• Transaction security: IP address, session key, anonymous guest ID, device ID, sign-in attempts and system logs.
• Notifications: the device’s notification token, if permitted.

Guests are not asked for their name, phone or e-mail; no special categories of personal data are processed.

3. Purposes

• Sending orders to the restaurant and showing their status to the guest;
• Enabling restaurant staff to manage orders, tables and bills;
• Reviewing restaurant applications and contacting applicants;
• Answering requests and complaints sent through the contact form;
• Ensuring information security and preventing abuse and unauthorised access;
• Sending order status notifications (if permitted);
• Complying with legal obligations.

4. Legal grounds

Your personal data is processed on the following grounds of article 5(2) of the KVKK:

• (c) It is directly related to entering into or performing a contract: sending orders, reviewing applications, staff actions;
• (ç) It is necessary for the controller to comply with a legal obligation: keeping system logs;
• (f) It is necessary for the controller’s legitimate interests, provided your fundamental rights are not harmed: security, abuse prevention, answering requests.

The notification token is processed on the basis of your explicit consent under article 5(1) (the notification permission on your device), which you can withdraw at any time in your device settings.

5. How data is collected

Personal data is collected electronically, by automated or partly automated means, through the website forms, the BringMyMeal and BringMyMeal Staff apps and the restaurants’ management panel.

6. Transfers

• Restaurants: the restaurant a guest orders from sees the orders and requests (within Türkiye).
• Service providers: server hosting (Scaleway SAS, France — European Union), the e-mail service provider that delivers notification e-mails and, if notifications are permitted, Google LLC (Firebase Cloud Messaging, USA).
• Public authorities: where required by law.

Transfers to providers abroad follow the procedures of article 9 of the KVKK (appropriate safeguards, standard contracts or explicit consent).

7. Retention

Personal data is kept for as long as the purpose requires and for the periods set by law, and is then deleted, destroyed or anonymised. Periods for table sessions, orders, applications and technical logs are described in the privacy policy.

8. Your rights

Under article 11 of the KVKK you have the right to apply to the data controller to:

1. Learn whether your personal data is processed;
2. Request information if it is processed;
3. Learn the purpose of processing and whether it is used accordingly;
4. Know the third parties in Türkiye or abroad to whom it is transferred;
5. Request correction if it is incomplete or incorrect;
6. Request deletion or destruction under the conditions of article 7 of the KVKK;
7. Request that corrections, deletions and destructions be notified to third parties it was transferred to;
8. Object to a result against you arising exclusively from automated analysis;
9. Claim compensation for damages arising from unlawful processing.

9. Requests

You can send requests in writing, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller, to Çeliktepe Mah. İsmet İnönü Cad. Yıldırımlar İş Merkezi No: 11 İç Kapı No: 501, Kağıthane / İstanbul or to info@biz4cloud.com. Please state your name, contact details and your request clearly.