LEGAL · TR
KVKK — Personal Data Protection Notice
Last updated: April 2025
This notice is provided in accordance with Turkey's Personal Data Protection Law (Law No. 6698, "KVKK"). It applies to all users and complements our Privacy Policy.
1. Data Controller
The data controller within the meaning of KVKK is the operator of syncmenu.app. Contact: info@syncmenu.app
2. Personal Data Processed
- Identity data: name, surname.
- Contact data: e-mail address, phone number (if provided).
- Business data: restaurant name, address.
- Transaction data: subscription history, billing records.
- Technical data: IP address, device and browser information, log records.
- Platform credential data: OAuth tokens for third-party delivery platforms (stored encrypted).
3. Purposes and Legal Bases for Processing
| Purpose | Legal Basis (KVKK Art. 5) |
|---|---|
| Account creation and management | Performance of contract (Art. 5/2-c) |
| Menu synchronisation with platforms | Performance of contract (Art. 5/2-c) |
| Billing and invoicing | Legal obligation (Art. 5/2-ç) |
| Security and fraud prevention | Legitimate interest of the data controller (Art. 5/2-f) |
| Transactional communications (verification, alerts) | Performance of contract (Art. 5/2-c) |
| Service improvement (anonymised analytics) | Legitimate interest (Art. 5/2-f) — data anonymised before use |
4. Transfer of Personal Data
Your personal data may be transferred to sub-processors (cloud infrastructure, payment processor, e-mail provider) located in Turkey or abroad. For cross-border transfers, we rely on the adequacy decisions of the Personal Data Protection Authority (KVKK Board) or, where none exists, on explicit consent or other lawful transfer mechanisms.
Menu data is transmitted to the third-party delivery platforms you choose to connect, on your instruction.
5. Retention Period
Personal data is retained for as long as your account is active, plus any statutory retention period (e.g., 5 years for financial records under Turkish Commercial Code Art. 82). After the applicable retention period, data is permanently deleted or anonymised.
6. Your Rights Under KVKK (Art. 11)
As a data subject you have the right to:
- Learn whether your personal data is being processed.
- Request information about the processing of your personal data.
- Learn the purpose of processing and whether it is used in accordance with that purpose.
- Know the third parties to whom your data is transferred domestically or abroad.
- Request correction of incomplete or inaccurate data.
- Request deletion or destruction of your data under the conditions specified in KVKK Art. 7.
- Request notification of corrections or deletions to third parties to whom data was transferred.
- Object to automated decisions that produce adverse effects on you.
- Claim compensation for damages arising from unlawful processing.
7. How to Exercise Your Rights
Submit your request in writing to info@syncmenu.app. We will respond within 30 days. Requests are free of charge; however, if the response requires a separate cost, we may charge a fee in accordance with the tariff set by the KVKK Board.
If you believe your rights have been violated, you may also lodge a complaint with the Personal Data Protection Authority (KVKK) at www.kvkk.gov.tr.