Privacy Policy
Last updated: June 15, 2026
At QRSIS, we take the protection of your personal data very seriously. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with KVKK (Turkish Data Protection Law No. 6698) and GDPR.
1. Data Controller
Your personal data is processed by the legal entity operating the QRSIS platform ("Company") as the data controller. Contact: [email protected]
2. Personal Data We Collect
When using our platform, we may collect the following personal data: • Identity information (name, surname, email address) • Contact information (phone number) • Transaction security data (IP address, login records, cookie data) • Business information (business name, address, logo) • Customer interaction data (orders, reservations, reviews)
3. Purposes of Data Processing
Your personal data is processed for the following purposes: • Providing and improving our services • Creating and managing your user account • Processing orders and reservations • Executing payment transactions • Providing customer support • Analytics and statistical evaluations • Fulfilling legal obligations
4. Legal Basis for Processing
Your personal data is processed based on the following legal grounds: • Performance of a contract • Legal obligations • Legitimate interests • Your explicit consent (where required)
5. Data Transfers
Your personal data may be shared with the following parties to provide our services: • Payment service providers (Stripe) • Infrastructure providers (Supabase, Vercel) • Authorized public institutions when legally required For international data transfers, appropriate safeguards are ensured in compliance with KVKK Article 9 and GDPR Chapter V.
6. Data Security
We implement the following technical and organizational measures to protect your personal data: • SSL/TLS encryption • Row Level Security (RLS) for data isolation • Regular security audits • Access control and authorization • Audit logs
7. Cookies
Our platform uses essential cookies (session management, language preference) and analytics cookies. You can manage your cookie preferences through the cookie notice displayed on your first visit.
8. Your Rights
Under KVKK Article 11 and GDPR, you have the following rights: • Right to know whether your personal data is being processed • Right to request information about processing • Right to know the purpose of processing and whether it is used accordingly • Right to know third parties to whom data is transferred • Right to request correction of incomplete or inaccurate data • Right to request deletion or destruction of data • Right to be notified of corrections/deletions made to third parties • Right to object to automated processing results • Right to claim compensation for damages caused by unlawful processing
Contact
To exercise your rights under data protection laws, you can reach us through: Email: [email protected] Your request will be resolved free of charge within 30 days at the latest.