This English text is provided for visitors of the English site. If there is any discrepancy, the Turkish text, which is the binding version, prevails.
Controller and scope
Rezervem Teknoloji Hizmetleri Anonim Şirketi is the controller for the processing described here in relation to corporate website visitors and users of meeting request, contact, data subject request and account deletion request forms. This notice is not a universal privacy policy for all Rezervem products.
Data and collection methods
- Meeting request and enquiry forms: name, email, phone, business name, product interest and optional message.
- Contact form: name, contact details, subject and message.
- Data subject and deletion requests: identity, contact and request information needed to assess and verify the request.
- Site/form security: IP, device and connection information, security verification, preference records and, only if separately permitted, analytics or marketing identifiers.
Purposes and legal bases
- Meeting requests, quotations and pre-contract contact: Article 5(2)(c) (contract-related necessity) or 5(2)(f) (legitimate interests), depending on the request.
- Handling messages and complaints: Article 5(2)(f) or 5(2)(e) (establishment, exercise or protection of a right).
- Privacy and deletion requests: Article 5(2)(ç) (legal obligation) or 5(2)(e), as applicable.
- Site/form security: Article 5(2)(f) and, where necessary, 5(2)(ç).
- Marketing communications and optional tracking require separate channel-specific permission or cookie choices. Reading this notice is not consent.
Retention
- Meeting request and contact records: one year, subject to additional retention where a contract, legal obligation or dispute requires it.
- Data subject and deletion request records: three years.
- Commercial message consent/refusal evidence: at least three years.
- Verification code records: 24 hours. These are corporate website periods, not all product retention periods.
Recipients and international transfers
Data is hosted in Türkiye. Brevo (France) provides email delivery and Cloudflare (US-based) provides site security and verification. Form contents, email addresses, IP and connection information may be processed as required by each service; information may also be provided to competent authorities where required.
Rezervem carries out transfers to overseas service providers under their standard contractual and data processing terms. Article 9 of Law No. 6698 also requires assessment of the contract type, parties, scope of transfer and any applicable notification obligations. Google Analytics 4 and Meta Pixel are loaded only with the relevant cookie permission, and transfers to these providers remain subject to Article 9. See the cookie notice.
Roles in hospitality products
For reservation and guest management processes controlled by restaurants or hotels, the venue may be the controller and Rezervem may act as processor on its instructions. Independent guest app memberships, payments or other processing purposes determined by Rezervem may involve different roles. The allocation depends on the actual processing activity.
Your rights
For rights under Article 11 of Law No. 6698, see the data subject request page. You can also contact info@rezervem.com.tr from an email address previously notified to us and held on record, or apply in writing to Merkez Mh. Hasat Sk. No: 52/1, Şişli – İstanbul, Türkiye. Requests are handled within 30 days at the latest.