Guest privacy notice and explicit consent

This notice is for guests who order from a QR menu, join a loyalty programme, book a table, pay with a payment link or use a kiosk at a business that uses PergePOS.

Businesses publish their own privacy and consent texts from the PergePOS panel; the text shown on the loyalty and booking page is the text of the business you are visiting. This page explains the general framework and sample text PergePOS provides to businesses.

• Data controller: the business you are visiting. Its name and contact details appear on the QR menu and on the loyalty and booking pages. The business decides why and for how long your data is processed.
• Data processor: Ahmet Aksungur (Aksungur Yazılım), which provides the PergePOS service. It processes guest data only on the business's instructions and to provide the service; it doesn't use it for its own purposes, sell it or use it for ad targeting.

The relationship between the business and PergePOS is governed by the data processing agreement.

• QR menu: table and order details, waiter calls, order notes. You don't need an account or to give personal details to use the QR menu.
• Loyalty programme: your phone number (verified with a one-time code), your name and birthday if given, point, campaign and gift card activity, and consent records (time, channel, text version, IP address).
• Reservations: name, phone, e-mail if given, party size, date and time, booking note.
• Payment links: the amount paid and the result. Card details are entered on the business's payment institution page and never reach PergePOS.
• Kiosk: the order and, if given, your name for the call.
• Technical records: IP address, browser details and time of action, for security and abuse prevention.

• Formation and performance of a contract (KVKK Art. 5/2-c): preparing and serving orders, making and reminding you of bookings, running the loyalty membership, recording payments on the check.
• Legal obligation (Art. 5/2-ç): invoices and tax records, requests from authorities.
• Legitimate interest (Art. 5/2-f): security of the service, preventing abuse and erroneous transactions.
• Explicit consent (Art. 5/1): sending the business's campaigns and announcements by SMS, e-mail or notification. Giving consent is optional; not giving it doesn't prevent loyalty membership.

Data may be shared, limited to the purpose, with:

• PergePOS as data processor, and PergePOS's hosting, database, backup and e-mail delivery providers.
• Providers chosen by the business: SMS provider, payment institution, e-document integrator, online ordering platform.
• Apple or Google, if you add the loyalty card to your phone's wallet.
• Public authorities legally entitled to request it.

Some of these providers may have servers abroad; transfers abroad follow the conditions of KVKK Art. 9.

Data is kept for the period the business sets and while the purpose continues. If you end your loyalty membership or ask for deletion, your records are anonymised; sales records that tax and commercial law require to be kept are retained for that period in a form that doesn't identify you.

Under KVKK Art. 11 you have the right to learn whether your data is processed, request information, ask for correction, deletion or destruction, object and claim compensation for damages.

Send your request to the business you visited first. You can view your data and ask for deletion from your loyalty account. Requests that reach PergePOS are forwarded to the business without delay: info@pergepos.com.

Businesses may use the sample text below under their own name for marketing consent, or publish their own:

• Consent is given and withdrawn separately for each channel.
• Confirming you have read the privacy notice and giving marketing consent are separate boxes; you can join without giving marketing consent.
• Registering commercial electronic message consents in the Message Management System (İYS) is the business's obligation.

You can withdraw marketing consent at any time: through the unsubscribe link in a message, in your loyalty account's consent settings, or by contacting the business. Withdrawal stops future messages; it doesn't affect the lawfulness of earlier processing.

This notice is updated when needed; the current version is published on this page and the date at the top applies. When a business changes its own text, the new version is presented again for your approval on the loyalty page.