KVKK Privacy Notice
Last updated: 2026-08-06
Under Turkish Personal Data Protection Law No. 6698 ("KVKK"), the following disclosure is provided regarding the processing of personal data of Rezask platform users.
Data controller
Rezask is currently in a pre-incorporation beta/test phase; no commercial company has been established yet. During this phase the platform is operated for testing purposes and data processing is kept to a minimum. Once incorporation is complete, the data controller's registered title, address and registry details will be added to this notice. Contact: kvkk@rezask.com
Beta period and the future of your data
Data collected during the beta is processed solely to provide the service; your booking data is shared only with the business you book with and strictly required infrastructure providers. When the beta ends, personal data collected during this period will be deleted or anonymised; continuing users will be informed again before the transition and, where required, their consent will be re-obtained.
Scope and roles
This notice covers data of business owners and staff who register with Rezask. For data of businesses' own customers (end users who book), the data controller is the relevant business and Rezask acts as data processor; a separate notice for end users is presented on behalf of the business within the booking flow.
Personal data processed
Identity data (full name), contact data (e-mail, phone), account and transaction security data (password hash, session and security logs, IP address), business details, usage records and — once paid plans launch — financial transaction records (invoice details; card data is held by iyzico).
Purposes of processing
Running membership and account processes; operating booking, reminder and cancellation flows; ensuring service security and preventing abuse; fulfilling legal obligations; handling requests and complaints; improving the service; and, where explicit consent exists, sending commercial electronic messages.
Legal bases
Data is processed under KVKK Art. 5/2-c (establishment and performance of a contract), Art. 5/2-ç (compliance with a legal obligation), Art. 5/2-f (legitimate interest — service security and improvement) and, where required, Art. 5/1 (explicit consent — international transfers and commercial messages).
Method of collection
Personal data is collected electronically via sign-up and booking forms, panel operations, support channels and automatically during platform use (logs, cookies).
Recipients
Data may be transferred to domestic and foreign infrastructure providers for hosting, database, e-mail, error monitoring and security services (Vercel, Supabase, Resend, Sentry, Upstash, Cloudflare), to competent public authorities where legally required, and to the payment institution (iyzico) once paid plans launch. International transfers rely on your explicit consent under KVKK Art. 9.
Retention
Data is retained for the duration of membership and thereafter for the limitation/retention periods prescribed by law (e.g. 10 years for financial records). At the end of the period, data is deleted, destroyed or anonymised.
Your rights under KVKK Art. 11
To learn whether your data is processed; to request information; to learn whether it is used in line with its purpose; to know the third parties to whom it is transferred domestically or abroad; to request correction, deletion or destruction; to request notification of these operations to transferees; to object to a result arising solely from automated analysis; and to claim compensation for damages caused by unlawful processing.
How to apply
You may submit requests regarding your rights to kvkk@rezask.com. Applications are concluded free of charge within 30 days at the latest. You can also export your data and delete your account from the panel.