Datenschutzhinweis (KVKK/DSGVO)
Dieses Dokument liegt auf Türkisch und Englisch vor; die englische Fassung wird angezeigt.
In line with Article 10 of Law No. 6698 on the Protection of Personal Data ("KVKK") and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Disclosure Obligation, we inform you about the processing of your personal data as follows. For EU/EEA users this notice also serves as information under GDPR Articles 13–14.
1. Identity of the controller
For account/authentication, listing, notification delivery and security processes of the Platform, the controller is Müsaitmi:
- Operator: Müsaitmi (musaitmi.net)
- Email: [email protected]
- Phone: 0552 280 51 28
For the customer file, bookings, checkout/payment, loyalty, survey and marketing records of the business you book with, that Business is a separate controller; for those records we are a processor acting on the Business’s behalf. You can send requests about those records directly to the Business or to us; we will pass them on.
2. Personal data processed and purposes
| Category | Examples | Purposes |
|---|---|---|
| Identity | Name | Creating an account, recording the booking in your name |
| Contact | Phone number, email address | One-time-code authentication; booking confirmation/reminder/cancellation notifications; answering requests and complaints |
| Customer transaction | Booking (business, service, staff, date/time, note), review, survey answer, favourites | Providing the booking service, collecting feedback |
| Transaction security | IP address, verification-code hash, session-token hash, browser/device info, push token | Authentication, preventing abuse/fraud, information security, app notifications |
| Marketing | Marketing consent record and time | Sending campaign messages where consent exists; stopping when withdrawn |
| Legal / audit | Administrative action logs (who did what, when) | Legal obligations, protection of rights, security audit |
We do not aim to process special-category data. Please do not put health or similar information in booking notes.
3. Method of collection and legal bases
Your data is collected by automated or partly automated means through electronic channels such as the website, the mobile apps and the business panel.
Legal bases (KVKK Art. 5/2): (c) necessary for the conclusion or performance of a contract, (ç) necessary for compliance with a legal obligation, (e) necessary for the establishment, exercise or protection of a right, (f) necessary for the legitimate interests of the controller provided your fundamental rights are not harmed. For marketing messages and WhatsApp notifications we rely on your explicit consent (Art. 5/1), which you can withdraw at any time without affecting earlier processing. GDPR equivalents: Art. 6(1)(b), (c), (f) and (a).
4. Transfers of personal data
Your data may be transferred, for the purposes above and within KVKK Art. 8–9, to these recipient groups:
- the business you book with (as needed for the booking),
- our hosting/network security, email, SMS, mobile notification and (with your consent) WhatsApp providers (processors),
- competent public authorities where mandatory by law,
- our legal advisers and competent authorities in legal disputes.
Some providers may be located abroad; transfers rely on adequacy decisions, appropriate safeguards (standard contracts, etc.) or other cases provided by law under KVKK Art. 9.
5. Retention
Your data is kept for as long as the purpose requires and as the law prescribes, then deleted, destroyed or anonymised. Details are in the Data Retention and Deletion Policy.
6. Your rights under KVKK Art. 11
As a data subject you have the right to:
- learn whether your personal data is processed,
- request information if it has been processed,
- learn the purpose of processing and whether it is used accordingly,
- know the third parties to whom data is transferred in Türkiye or abroad,
- request correction of incomplete or inaccurate data,
- request erasure or destruction of your data under the conditions of Article 7 of KVKK,
- request that corrections and erasures be notified to third parties to whom the data was transferred,
- object to an outcome against you that results from analysis exclusively by automated systems,
- claim compensation if you suffer damage because of unlawful processing.
Under the GDPR (if you are in the EU/EEA) you additionally have the rights to restriction, data portability, objection to processing based on legitimate interests and to lodge a complaint with your supervisory authority.
7. How to apply
You may submit requests about the rights above in writing, or by secure electronic signature/email, with information identifying you and a description of your request, as required by the Communiqué on the Procedures and Principles of Application to the Data Controller. See the Data Subject Requests page for the details and a template.
Email: [email protected]
Requests are concluded free of charge within 30 days at the latest depending on their nature; if the action requires a separate cost, the fee in the tariff set by the Personal Data Protection Board may be charged. If you find the answer insufficient or receive none in time, you may complain to the Personal Data Protection Board under KVKK Art. 14.
Contact
For questions or requests about this document, contact us:
- Operator: Müsaitmi (musaitmi.net)
- Email: [email protected]
- Phone: 0552 280 51 28