Notice on the Processing of Personal Data

1. Data controller

Under Turkish Personal Data Protection Law No. 6698 (KVKK), your personal data is processed by Emre Fazla Hair Artist as the data controller, within the scope described below.

2. Personal data processed

Your full name, phone number, selected artist, service, appointment date and time, appointment note, attendance and cancellation information, as well as notice and consent records may be processed.

For the security of the online service, connection and transaction logs may be kept to the extent required by law and technical needs.

3. Purposes and legal grounds

The data is processed to create, manage, change or cancel appointments, calculate availability, send informational SMS messages about your appointment, respond to customer requests, keep the service secure and fulfil legal obligations.

This processing may rely on the legal grounds of the establishment or performance of a contract, compliance with legal obligations, the establishment, exercise or protection of a right, and legitimate interest provided that it does not harm your fundamental rights. Marketing activities are carried out only if you give separate explicit consent.

4. Recipients

To the extent required by the service, your data may be transferred to the SMS provider Netgsm, hosting, database and IT service providers, authorised persons who support the service, and public authorities legally entitled to receive it.

5. Collection method and retention

Data may be collected electronically or verbally through the appointment form, the cancellation link, phone calls and the management panel. Data is kept for as long as the processing purpose and the applicable statutory retention periods require; once the purpose ends, it is deleted, destroyed or anonymised.

6. Your rights

Under Article 11 of KVKK, you have the right to learn whether your personal data is processed, request information about it, learn whether it is used in line with its purpose, know the parties it is transferred to, request its correction, deletion or destruction and that these actions be notified to the recipients, object to a result against you produced solely by automated systems, and claim compensation for damages.