Your personal data
Data controller
SMMM Emine Acar, Saray Mah. Yunus Emre Cad. Yeni Acun Apt. No: 12/6 (Alanya/Antalya).
The business named above is responsible for the information you leave on this site through forms, bookings and reservations (the data controller): it decides what that information is used for, and it is the one to contact with any request. The site runs on Vitrin’s platform. Vitrin only stores and passes on this information on the business’s behalf (the processor); it doesn’t use it for its own purposes, doesn’t sell it and doesn’t share it with anyone for advertising.
Information collected on this site
- The site itself sets no cookies. Visits and taps on the “Call”, WhatsApp and directions buttons are counted as daily totals; this counter doesn’t record your IP address, your device or who you are.
- Depending on which features the site has, your browser’s local storage is used only to remember something you started: items you picked from the menu (cleared when the tab closes), the catalogue basket, your loyalty card link if you chose “Remember on this device”, an announcement bar you closed and when a campaign pop-up was last shown. None of this reaches the server unless you send it; you can remove it by clearing this site’s data in your browser.
- If you fill in the booking or waiting-list form: your name, phone number, optional email, the service and time you chose, and any note you write. This information is processed to manage your appointment; if you gave an email address, to send you a confirmation and (if the business has turned it on) a reminder some time before the appointment; so that you can cancel through your personal link or, if the business allows it, move it to another time; and to tell you about a time that opens up if you are on the waiting list. An opened-up time is announced by email or through a link the business sends you on WhatsApp. Appointment and waiting-list records are deleted automatically 12 months after the appointment date.
- If you reserve a table: your name, phone number, optional email, party size, date and time, and your note if you wrote one. If you gave an email address, you receive confirmation and cancellation emails and a reminder about 24 hours beforehand; you can cancel the reservation through your personal link. Reservations are deleted automatically 12 months after their date.
- If you fill in a contact or application form on the site: the fields you completed, whether you accepted the privacy notice, and the form’s language. If the business has turned on notifications, your submission is also emailed to it; if you gave your email address, the business can reply to you directly. Submissions are deleted automatically after 24 months.
- If you sign up for the newsletter: your email address, your name if you gave it, the consent text shown when you signed up, the sign-up language and a short hash derived from your IP address (as proof of consent; the IP address itself is not stored). Your sign-up is complete once you click the confirmation link in the email you receive, which is valid for 7 days; if you don’t confirm, you are not added to the list and the entry is deleted after 30 days. Vitrin does not send the newsletter: the business exports the confirmed list, with a personal unsubscribe link for each address, to its own mailing tool. You can unsubscribe at any time with that link; you are then marked “unsubscribed” and the address is kept until the business deletes it.
- If you apply for a job: your name, your email or phone number, your message, a CV or profile link if you gave one (no files are uploaded), your acceptance of the privacy notice and the application’s language. The business can record the status of your application and its own internal notes, which are not shown to you. If the business has turned on notifications, your application is also emailed to it. Applications are deleted automatically after 12 months.
- Forms are protected against automated submissions by Cloudflare Turnstile; to do this, Turnstile sends technical signals from your browser to Cloudflare. To limit abuse, your IP address is used in a short-lived counter and then deleted automatically.
Storage and transfer
Records are deleted automatically once the periods above run out; the business can delete them sooner. Data is hosted on Cloudflare, Inc. infrastructure, which also sends the emails; since servers are also located outside Turkey, this is a cross-border transfer limited to hosting and sending. Vitrin doesn’t share this information with anyone else; places the business itself moves data to (for example a mailing tool or calendar app) are the business’s responsibility.
Your rights
Under Article 11 of the Turkish data protection law (KVKK), you can ask to access, correct or delete your data. You can send your request directly to the business. Contact the business: 05363923715 · emineacar-82@hotmail.com
You can also write to bilgi@vitrin.club and we’ll pass your request on to the business.