KVKK Privacy Notice

This privacy notice has been prepared under Turkish Personal Data Protection Law No. 6698 (“KVKK”) to inform you, in our capacity as data controller, about the personal data processed through the Vaktimce online booking platform (the “Platform”).

1. Data controller

When you book an appointment with a business through the Platform, the business concerned is the data controller for your appointment data; Vaktimce processes this data on the business's behalf as a data processor. When you sign up to the Platform as a business, Vaktimce is the data controller for your account data.

2. Personal data processed

• Identity: first name, last name
• Contact: phone number, email address
• Customer transactions: appointment date and time, selected service and staff member, appointment note, appointment history
• Transaction security: IP address, session and activity logs
• Marketing: campaign and communication preferences, only if you have given explicit consent

By default, the Platform does not request special categories of personal data such as health data.

3. Purposes of processing

• Creating, confirming, reminding about, cancelling and rescheduling appointments
• Sending appointment confirmation and reminder emails
• Enabling the business to manage its customer relationships and appointment history
• Ensuring information security and preventing misuse
• Fulfilling legal obligations

4. Legal grounds

Your personal data is processed on the legal grounds set out in KVKK Art. 5/2 (c) “establishment or performance of a contract”, (ç) “compliance with a legal obligation” and (f) “legitimate interest”. Marketing communications are based solely on your explicit consent, which you can withdraw at any time.

5. Transfers

Your data is shared only with the business you booked with and with the hosting and email infrastructure providers essential to providing the service, limited to that purpose.

For businesses purchasing a paid subscription: For the purposes of collecting the subscription payment, taxation, invoicing, refunds and fraud prevention, your first and last name, email, country/address, billing details and transaction details are transferred to our authorized reseller (Merchant of Record) Paddle.com Market Limited (United Kingdom). Card details are entered directly on Paddle's checkout and are not sent to Vaktimce. As it is necessary for the performance of the contract, this transfer is a transfer abroad within the scope of KVKK Art. 9 and is carried out after you are informed at checkout during purchase. Paddle processes this data under its own privacy policy.

6. Retention period

Appointment data is kept for as long as the business's account is active and for the periods required by applicable law; at the end of that period it is deleted or anonymized.

7. Your rights

Under KVKK Art. 11, you have the right to learn whether your data is processed, to request information, to request correction or deletion, to know the third parties to whom it is transferred, and to object. You can reach us via our contact page for your requests. For requests about your appointment data, you can also contact the business you booked with directly.