LPPD Clarification Text (Law No. 6698)

1. Purpose

This clarification text has been prepared to inform you about the purposes and legal grounds for processing your personal data within the scope of the Randevu+ mobile application (“Application”) in accordance with the Law on the Protection of Personal Data No. 6698 (“LPPD”).

2. Categories of Personal Data Processed

Data that may be processed depending on Application use includes:

Identity / Contact: Name, surname, email address, phone number (if applicable).
Identity (Addl.): Gender, date of birth (if applicable).
Visual: Profile photo (if applicable).
Customer Transaction: Appointment information (date/time, service, salon/branch, staff, status, notes, location text, etc.).
Transaction Security / Technical: Device/push notification identifiers (e.g., FCM token), session and authentication information, log and error records (system requirement).
Location: Location data processed solely within the scope of the permission you provide for map/salon discovery or navigation within the Application.

3. Purposes of Processing Personal Data

Your personal data is primarily processed for:

Account creation, identity verification, and secure session management.
Creating, managing, canceling/changing appointments and operational communication with relevant parties (salon, branch, staff).
Service quality, responding to support requests, and improving user experience.
Fulfillment of legal obligations, resolution of disputes, and protection of legitimate interests (security, fraud prevention, record keeping).
Marketing communications based on your explicit consent (if any; requires separate approval).
Push notifications (appointment reminders, status updates, etc.; depending on your permission and preferences).

4. Legal Grounds

Processing activities may be based on the legal grounds of the establishment or performance of a contract, fulfillment of the data controller’s legal obligation, legitimate interest, and, where necessary, explicit consent under LPPD Art. 5/2.

5. Transfer of Personal Data

Your data may be shared, to the extent necessary for the provision of the service, with:

Cloud/hosting and database providers (e.g., Supabase and related infrastructure).
Analytics, notification, and storage services (e.g., Firebase / Google infrastructure).
Map/location service providers (to the extent you permit).

If transfer abroad is involved, necessary measures are taken in accordance with Articles 8 and 9 of the LPPD. Due to the nature of the operation, your identity, contact, and appointment information may need to be transferred to the relevant business (salon, branch, or staff) for the fulfillment of the appointment.

6. Collection Method

Data is collected through information entered directly by you via the Application, automatically generated technical records, and authorized device features (notifications, location, etc.).

7. Retention Period

Personal data is stored for the period necessary for the purpose for which it is processed and limited to the statute of limitations/retention periods prescribed in relevant legislation; it is deleted, destroyed, or anonymized at the end of the period.

8. Your Rights Under LPPD

Under Article 11 of the LPPD, you have the right to:

Learn whether your personal data is processed.
Request information if it has been processed.
Learn the purpose of processing and whether it is used in accordance with its purpose.
Know the third parties to whom it is transferred domestically or abroad.
Request correction if it is incomplete or incorrectly processed.
Request deletion/destruction within the framework of the conditions stipulated in the LPPD.
Object to an outcome against you arising exclusively from analysis by automated systems.
Request compensation for damages incurred due to unlawful processing.

You can submit your applications via destek@randevuplusapp.com.