KVKK Disclosure Notice

Provider / seller details

Legal name: [eklenecek]
MERSIS no.: [eklenecek]
Tax office: [eklenecek]
Tax no.: [eklenecek]
Address: [eklenecek]
Phone: [eklenecek]
Email: [eklenecek]
KEP (registered email): [eklenecek]

Controller and processor

Under Turkish Law No. 6698 (KVKK) the data controller is the business that issued the card; Dokun acts as data processor. The controller is responsible for VERBIS registration where required.

Data and purposes

Name, email and stamp/transaction records are processed to run the loyalty program, to communicate, and, with your explicit consent, to send promotional notifications. The optional visit rating and comment you give are processed so the business can improve its service (legitimate interest) and are visible only to the business's authorized staff; a review you write on Google is subject to Google's own terms.

Transfers

Data is stored on servers in Europe (Ireland). Any transfer abroad follows KVKK Art. 9 conditions and, where required, your explicit consent.

Your rights under Art. 11

You may learn whether your data is processed, request information, correction or deletion, learn who received it, and object. Send requests to the issuing business or to us.

Delivery address (businesses)

When you order prints on a paid plan, the delivery name, phone number and address you enter are processed only for printing and shipping and are shared with the courier for delivery. Dokun is the data controller for this data; it is kept for the legally required period after the order is completed.

Verification at the counter

Stamps and rewards are only booked with the card holder's knowledge and consent: by default, the QR code on your card is scanned at the counter. If that isn't possible, staff enter a single-use 6-digit code that only appears on your card page and is valid for 5 minutes. For every transaction we record the staff member, time and verification method (QR / code); you can see your history on your card page. Customer search at the counter shows masked details only (initials, a***@g***.com).

Data for which Dokun is the controller

Dokun is the data controller for business accounts (owners and staff), billing details, print delivery details and security logs (IP address, device/browser details, time of action; kept for 12 months). Their scope, purposes and retention are explained in the Privacy Policy. Send requests in writing to the email or KEP address on this page; they are resolved free of charge within 30 days.