1. Identity of the data controller
We inform you under Article 10 of Law No. 6698 on the Protection of Personal Data ("KVKK") and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform: the data controller for personal data processed through this website (avdena.com) is AVDENA BİLİŞİM (Cevizlidere Mahallesi, Mevlana Bulvarı 221/109-3, 06520 Çankaya / Ankara; email: [email protected], [email protected]).
For the guest and staff data of businesses that use our products (Avdena Guest, Avdena Menu, Avdena Ops AI), AVDENA BİLİŞİM acts as the data processor. This is explained separately in section 9.
2. Which personal data do we process?
- Identity and contact data: full name, email address, and your phone number if you write on WhatsApp.
- Business data: company or business name (optional), the solution you are interested in.
- Request content: the message you write to us and any information you share in it.
- Transaction security data: security logs generated on Cloudflare infrastructure when the site is accessed (technical data such as IP address, request time, browser and device information).
No purchases, memberships or payments are made on our site. We do not ask for credit card details, identity numbers or special categories of personal data; please do not include such data in your message.
3. How do we collect data?
Data is collected electronically, partly by automated means:
- Quote form: The form does not send data to our server. The "Get a quote" button opens a message prepared from what you typed in your own email app, addressed to [email protected]; it reaches us when you send it.
- Email and WhatsApp: when you write to us directly.
- Server logs: technical records generated automatically on the infrastructure of Cloudflare, our hosting and content delivery provider, when you view the site.
4. Purposes and legal grounds
| Purpose | Legal ground |
|---|---|
| Replying to your quote and information request and communicating with you | KVKK Art. 5/2-c: processing is directly related to the establishment of a contract (pre-contract discussions); and Art. 5/2-f: our legitimate interest |
| Planning a demonstration and setup process | KVKK Art. 5/2-c and Art. 5/2-f |
| Keeping the site and infrastructure secure and preventing abuse (security logs) | KVKK Art. 5/2-f: our legitimate interest, provided your fundamental rights and freedoms are not harmed |
| Fulfilling legal obligations, responding to legal requests, establishing, exercising or protecting a right | KVKK Art. 5/2-ç (legal obligation) and Art. 5/2-e (establishment, exercise or protection of a right) |
We do not rely on explicit consent for these activities. The checkbox on the form states that you have read this notice; it is not an explicit consent statement. We do not process special categories of personal data (KVKK Art. 6). Before sending commercial electronic messages for marketing, we obtain your separate consent.
5. To whom and for what purpose do we transfer data?
- Hosting and content delivery (Cloudflare): Our site is served through Cloudflare. Cloudflare processes the technical and security data generated when the site is accessed, in order to deliver and secure the site. Cloudflare is a US company, so this data may be transferred abroad (section 6).
- Email infrastructure: Emails you send us are stored on the infrastructure that provides our email service. The purpose is to carry out the communication.
- WhatsApp: When you write on WhatsApp, the communication is subject to WhatsApp's own terms and privacy policy; you start this channel yourself.
- Authorized public bodies: only where legislation requires it and to the extent required.
Your data is not transferred to third parties for marketing purposes and is not sold.
6. Transfer abroad (KVKK Art. 9)
Cloudflare, Inc. is headquartered in the United States and its infrastructure is located in many countries. Technical data about your visit may therefore be transferred abroad. Under Article 9 of KVKK (as amended by Law No. 7499), transfers abroad are made only in one of these ways: an adequacy decision of the Personal Data Protection Board for the country, sector or international organization concerned; where there is no adequacy decision, one of the appropriate safeguards listed in Article 9, in particular the standard contract announced by the Authority (notified to the Authority within five business days of signing) or binding corporate rules. We do not transfer data without one of these safeguards in place. You can write to us to learn which safeguard is relied on.
The content of your request (your name, email and message) is not sent to a server through the site; it reaches us through your own email app.
7. Retention
Your quote and contact requests are kept until the request is concluded and for a reasonable follow-up period. If a contract is concluded, the related records are subject to the retention periods in the contract and legislation. Security logs are kept within Cloudflare's own retention periods. When the period ends or the purpose no longer exists, the data is deleted, destroyed or anonymized. You can ask for deletion at any time.
8. Your rights under KVKK Art. 11 and how to apply
As a data subject, you have the right to:
- Learn whether your personal data is processed,
- Request information if it has been processed,
- Learn the purpose of processing and whether it is used in line with that purpose,
- Know the third parties to whom your data is transferred at home or abroad,
- Request correction if it is incomplete or inaccurate,
- Request deletion or destruction under KVKK Art. 7,
- Request that correction, deletion and destruction be notified to the third parties to whom your data was transferred,
- Object to a result against you arising from the analysis of your data exclusively by automated systems,
- Claim compensation if you suffer damage because of unlawful processing.
How to apply. Under the Communiqué on the Procedures and Principles of Applications to the Data Controller, you can submit your application in writing, with documents proving your identity and a wet signature, in person or through a notary to the address above. You can also send an application signed with a secure electronic signature or mobile signature to [email protected], or send it to that address from an email address you have previously notified to us and that is registered in our system. For applications by registered electronic mail (KEP), our KEP address will be published on this page once it is set up. In your application, state clearly your first name, surname, signature, address or email address for notification, and your request.
We conclude your application as soon as possible according to the nature of the request and at the latest within thirty days, and send our answer in writing or electronically. If the process requires a separate cost, the fee in the tariff set by the Board may be charged. If your application is rejected, the answer is insufficient or no answer is given in time, you can file a complaint with the Personal Data Protection Board within thirty days of learning of the answer and in any case within sixty days of the application date.
9. Guest and staff data processed in our products
Data belonging to the guests and staff of businesses that use the Avdena Guest, Avdena Menu and Avdena Ops AI products is processed on behalf of and on the instructions of those businesses. For this data, the relevant business is the data controller; AVDENA BİLİŞİM acts as the data processor and does not use the data outside the purpose of its contract with the business. The terms of data processing are set out in the customer contract with the business.
Guest pages include a cookie notice and the business's own privacy notice. Access is logged in line with Law No. 5651. You need to send your requests about this data to the relevant business. Requests that reach us are forwarded to the relevant business.
10. Changes
We may update this notice to reflect changes in legislation or in our practice. The current text is on this page. The Turkish text prevails.