KVKK Disclosure Notice

Categories of Personal Data Processed and How They Are Collected

When you submit an appointment request on this website, the following personal data is collected directly from you, electronically, through the booking form, so that we can plan and carry out the visit:

• Identity and contact data: full name, phone number, and (if provided) email address.
• Location data: the service area and any address or contact details you provide for the appointment.
• Appointment data: the service, date and time selected, the price quoted, and any notes you add.
• Pet-related information: your pet's name, species, breed, size and care notes. On its own, this does not identify a natural person and is not "personal data" under KVKK, but it is listed here for transparency.

Visitors who do not submit an appointment request are not asked for any personal data beyond a language-preference cookie — see the Cookie Policy.

Purposes of Processing

Your personal data is processed to evaluate, plan and confirm your appointment request, to carry out your grooming appointment, to contact you about it, to prevent duplicate bookings and abuse of the booking system (for example, an unusually high number of requests from the same phone number in a short period), and to meet applicable legal record-keeping obligations.

Your data is not processed for marketing, advertising or profiling purposes. Because no such processing takes place, no separate marketing consent is requested through the booking form. If Patim Pet Kuaför begins sending campaign, discount or promotional messages in the future, this will rely solely on a separate, optional, never pre-checked, explicitly given consent — never required to submit an appointment request, and withdrawable at any time.

Legal Basis for Processing

Your personal data is processed on the following legal bases under Article 5(2) of KVKK:

• processing is directly related to the establishment or performance of a contract (planning and carrying out the grooming appointment you requested);
• processing is necessary for Patim Pet Kuaför to comply with its legal obligations (for example, record-keeping obligations under applicable legislation);
• processing is necessary for Patim Pet Kuaför's legitimate interests, provided this does not harm your fundamental rights and freedoms (preventing duplicate bookings and abuse of the booking system).

Because these legal bases are sufficient on their own, the booking form does not separately request your explicit consent (açık rıza).

Transfer of Personal Data

Your personal data is shared only to the extent necessary to provide the service, with the following recipients:

• Service providers that operate the website's technical infrastructure (database, authentication and file storage), currently Supabase, acting as data processor; the specific hosting/infrastructure provider is noted under "Infrastructure" in the Privacy Policy.
• WhatsApp, only if and when you choose to send your appointment details through the pre-filled WhatsApp link on the confirmation screen — that message is then handled by WhatsApp under its own terms, outside Patim Pet Kuaför's control.
• Public authorities, only where a legal request or obligation requires it.

Your personal data is never shared with third parties for marketing purposes and is never sold.

Retention

Your personal data is retained for as long as necessary for the purposes described above, and for any longer minimum period required by applicable legislation; it is then deleted, destroyed or anonymized. A specific retention schedule has not yet been finalized by the business; this section will be updated once it is. [TODO: retention period to be confirmed by the business]

Your Rights Under Article 11 of KVKK

As a data subject, you have the right to:

• learn whether your personal data is being processed;
• request information about it if it has been processed;
• learn the purpose of processing and whether your data is used in accordance with that purpose;
• know the third parties, in Turkey or abroad, to whom your data is transferred;
• request correction of incomplete or inaccurate data;
• request deletion or destruction of your data within the conditions set out in Article 7 of KVKK;
• request that any correction, deletion or destruction be notified to the third parties to whom your data was transferred;
• object to a result that is to your detriment arising solely from automated analysis of your data;
• claim compensation for damage arising from unlawful processing of your data.

How to Exercise These Rights

You may submit a request to exercise the rights above, together with information that verifies your identity, using the methods set out in the Communiqué on the Procedures and Principles of Application to the Data Controller. The current application contact is shown under "Data Controller" above. Your request will be concluded free of charge, as soon as possible and within thirty days at the latest, depending on its nature.