KVKK privacy notice and privacy policy

1. Data controller

Under Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data is processed by Kayalyz Yazılım (Konya, Turkey), acting as data controller, within the scope described below.

2. Personal data processed

• Identity and contact information: full name, company name, title, email, phone, address.
• Account information: username, password (encrypted), account status, card quota.
• Card and menu content: information you enter to be published on a digital business card or menu (social media accounts, IBAN, billing details, images, products and prices).
• Transaction security and usage data: IP address, browser information, view and QR scan logs, transaction dates.
• Customer transaction information: purchased products, sales records, contact form messages.

3. Processing purposes

• Creating a membership, account approval and identity verification.
• Providing and publishing digital business card, stand and QR menu services.
• Carrying out order, sales and invoicing processes.
• Reporting view and scan statistics to you.
• Responding to requests and complaints, and providing support service.
• Sending campaign and informational emails with your explicit consent.
• Fulfilling legal obligations and ensuring information security.

4. Card and menu pages being publicly accessible

Digital business card and QR menu pages can be viewed by anyone with the link or QR code. You decide, from the panel, which information is shown on these pages. We recommend only enabling sensitive fields such as IBAN and billing details when necessary.

5. Transfer of personal data

Your personal data may be transferred, under the conditions set out in Articles 8 and 9 of KVKK, to hosting and email infrastructure providers for the provision of the service, to authorized public institutions and organizations where legally required, and to relevant business partners for payment and shipping processes. Your data is not sold to third parties for advertising purposes.

6. Collection method and legal basis

Your data is collected electronically through the website, registration and contact forms, the admin panel and QR/NFC scan logs. Processing is based on the legal grounds of establishing and performing a contract, fulfilling a legal obligation, legitimate interest, and, where necessary, your explicit consent.

7. Retention period

Your data is retained for as long as required by the purpose of processing and for the statute-of-limitations periods set out in the relevant legislation. When you close your account, card and menu content is unpublished; records subject to a legal retention obligation are deleted or anonymized at the end of that period.

8. Cookies

Our site uses essential cookies to maintain your session and ensure security. No third-party tracking cookies are used other than to remember your preferences.

9. Your rights under KVKK

Under Article 11 of KVKK, you have the right to: learn whether your personal data is being processed; request information if it has been processed; learn the purpose of processing and whether it is used in line with that purpose; know the third parties to whom it is transferred; request correction if it has been processed incompletely or incorrectly; request its deletion or destruction; request that these actions be notified to the third parties to whom your data has been transferred; object to a result that is to your detriment arising from analysis by automated systems; and request compensation for damage suffered due to unlawful processing.

You may submit your requests in writing to destek@kayaware.com or to the postal address above. Requests are answered within 30 days at the latest.