Last updated: January 1, 2026

1. Data Controller

MTY Teknoloji ("Restoreks") processes your personal data as data controller under Personal Data Protection Law No. 6698 ("KVKK").

2. Processed Personal Data

Data Category	Example Data
Identity Information	Name, surname, national ID no. (for invoicing only)
Contact Information	Email, phone, address
Transaction Security	IP address, log records, session information
Financial Information	Invoice details, subscription history
Business Data	Orders, menu, inventory, staff information

3. Data Processing Purposes

Provision and operation of SaaS services
Fulfillment of contractual obligations
Compliance with legal obligations (tax, accounting)
Customer support and communication
Service quality improvement (anonymized statistics)
Information security processes

4. Legal Basis for Data Processing

Your personal data is processed based on the following legal grounds under KVKK Art. 5/2:

Establishment or performance of contract (subscription agreement)
Explicitly stipulated by law (tax legislation)
Legitimate interest of data controller (security, service improvement)
Your explicit consent (for marketing communications)

5. Data Transfers

Your personal data is transferred to third parties only in the following limited circumstances:

Payment institutions (PCI DSS compliant)
Cloud infrastructure providers (under confidentiality agreement)
Authorized public institutions when legally required

6. Data Retention Period

Your personal data is retained for the duration required by the processing purpose and the minimum periods stipulated by relevant legislation. After account closure, data is deleted or anonymized within 30 days (subject to legal retention obligations).

7. Data Subject Rights (KVKK Art. 11)

Under Article 11 of KVKK, you have the following rights:

Learning whether your personal data is processed
Requesting information about processing if processed
Learning the purpose of processing and whether data is used in accordance with that purpose
Knowing the third parties to whom data is transferred domestically or abroad
Requesting correction if data is incomplete or incorrectly processed
Requesting deletion or destruction under KVKK Art. 7
Requesting notification of correction/deletion to third parties to whom data has been transferred
Objecting to a result arising against you through analysis exclusively by automated systems
Claiming compensation for damages arising from unlawful processing

8. Application Method

To exercise your rights above, you may apply to kvkk@restoreks.com with documents verifying your identity. Applications are answered free of charge within 30 days at the latest.

Data Protection Notice