Privacy notice

1. Data controller

saf ve dengede (sole proprietorship). Address: Cumhuriyet Mahallesi, 503 Sokak, Doktorlar Sitesi, Kat 3, İç kapı no 20, Fethiye / Muğla, Turkey. Email: [email protected].

2. Personal data we process

• Identity: your first and last name.
• Contact: your phone number; your email address if you write to us by email.
• Customer transaction: the service or workshop you chose, date and time, number of people, your optional note, the language you used, the status of the request (pending, confirmed, cancelled) and the content of the messages you send us.
• Security: your IP address. It is held only in server memory for about one hour to prevent abuse of the forms and is not stored permanently; when you submit a form it is sent to Cloudflare for a security check.

Special categories of data

We do not ask for any special category data, including health data. Please do not write health information in the note field or in your messages; if you do, it is used only to plan your appointment and deleted after the periods below.

3. Purposes

• To receive, check and plan your booking or workshop request,
• To send you confirmations, changes, reminders or cancellations via WhatsApp,
• To answer your questions and your requests under the KVKK,
• To prevent automated and malicious use of the forms and keep the site secure.

4. Collection method and legal basis

Your data is collected electronically through the booking and workshop forms and the email and WhatsApp messages you send us, provided directly by you. Legal basis: KVKK art. 5/2-c (necessary to enter into or perform a contract), art. 5/2-ç (necessary to fulfil our legal obligations, such as answering your requests) and art. 5/2-f (our legitimate interest in preventing abuse of the forms, without harming your fundamental rights and freedoms).

5. Transfers

Your data is never sold, used for advertising or marketing, or shared with third parties in Turkey, except with public authorities legally entitled to request it and only within the scope of such a request. To provide the service we rely on the following providers, so your data is processed on servers outside Turkey:

• Hetzner Online GmbH (Germany): the server hosting the site and booking records (Nuremberg) and encrypted backups (European Union).
• Cloudflare, Inc. (USA): delivery of site traffic and form security checks (Turnstile). Cloudflare processes your IP address and browser information for this purpose.
• WhatsApp (Meta Platforms): the messaging app we use to reply to you and that you use to contact us.
• Google (Gmail): if you email us, your email and our reply are kept in Google's email service.

6. Retention

• Your name, phone number and note in booking and workshop records are deleted automatically 180 days after the appointment or workshop date. Only the date, service and status remain, which cannot be linked to anyone, for statistics.
• Records are backed up every night in encrypted form. Backups are kept for at most 12 months; deleted information may remain in older backups during that time and is deleted together with them. Backups are used only to restore data after a loss.
• IP addresses held in memory are deleted after about one hour.
• Email and WhatsApp conversations are deleted once your request has been completed, unless the law requires us to keep them.

7. Visit statistics and cookies

The site uses no cookies. Visit statistics are kept anonymously by a counter running on our own server (Umami): your IP address is not stored; only the pages viewed, the referring site, the device and browser type and the country and city are recorded. The counter does not run at all if your browser sends Do Not Track or Global Privacy Control.

8. Security

Booking and workshop records are accessible only through a password-protected admin panel, protected by additional security layers that block repeated failed login attempts and filter suspicious traffic. Site traffic is encrypted (HTTPS) and backups are stored encrypted.

9. Your rights

Under KVKK art. 11 you may ask the data controller to:

• Tell you whether your data is processed and, if so, give you information about it,
• Tell you the purpose of processing and whether it is used accordingly,
• Tell you the third parties in Turkey or abroad to whom it is transferred,
• Correct incomplete or inaccurate data, delete or destroy it under the conditions of KVKK art. 7, and notify these changes to third parties it was transferred to,
• Object to an outcome against you arising solely from automated analysis,
• Compensate damage caused by unlawful processing.

10. How to apply

Send your request in writing to the address above or by email to [email protected]. So that we can verify your identity, include your full name and the phone number you used in the form. Requests are handled free of charge within 30 days at the latest, depending on their nature; if handling requires additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.

If your request is rejected, you find the answer insufficient or it is not answered in time, you may file a complaint with the Personal Data Protection Board under KVKK art. 14.