Privacy Notice
Version: 1 October 2026
This notice is provided under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”) to people who visit the Şirince.com website (şirince.com), become members, manage a business page or contact us.
1. Data controller
Company: —
Address: —
MERSIS no.: —
Email: —
Registered e-mail (KEP): —
2. What we process, why, and on what legal basis
Visitors
- A keyed, truncated hash of your IP address, browser information and request logs: site security and prevention of abuse and spam (rate limiting). Raw IP addresses are not stored. Legal basis: legitimate interest (KVKK Art. 5/2-f). Security logs are deleted after 30 days.
- View and button-click counts on venue pages are kept only as daily totals, without cookies, and are not linked to you.
- If you are not a member, your saved places, theme and language preferences are stored only in your own browser (local storage) and never sent to our server.
Members
- Name, email address, optional phone number, an irreversible password hash (Argon2id), language, account type, the date and version of the accepted terms, optional news consent, session data and saved places: to create and perform the membership contract (Art. 5/2-c) and to keep your account secure (Art. 5/2-f).
- Your phone number is never published; it is only used to contact you.
Business representatives and claimants
- Contact name and phone, relation to the business, chosen verification method, domain email address, verification code and any uploaded document (tax plate, business or tourism licence): to verify ownership of a business (Art. 5/2-c and 5/2-f). Uploaded documents are deleted 30 days after the decision.
- Information you enter on a business page (name, address, business phone, website, Instagram, opening hours, photos, descriptions) is published.
Subscriptions and orders
- Billing details (name or company name, address, tax office and number, invoice email), orders, amounts and bank transfer records: to perform the contract (Art. 5/2-c) and to meet tax law obligations (Art. 5/2-ç). Paid orders and invoice records are kept for the period required by law. Card details are never requested or processed.
Contact form and error reports
- Name, email, subject and message: to answer your request (Art. 5/2-f). Contact messages are deleted after one year. Giving an email address with an error report is optional.
Business records from open data
- Many directory records come from the OpenStreetMap and Overture Maps Foundation open datasets and consist of publicly available business information (name, address, business phone, website). They are shown as “Unclaimed record” with their source. You can ask for a record to be corrected or removed through the “Report” link or the contact form.
3. Transfers
Data is shared, only as far as necessary, with our hosting provider, our email delivery provider, our accountant for invoicing and, where the law requires, the competent public authorities. We never sell data or share it with third parties for advertising or marketing.
Transfers abroad: where our providers’ servers are located outside Türkiye, transfers are handled under KVKK Article 9. [This section will be completed after counsel confirms the server and email locations and the transfer mechanism.]
4. How we collect data
Through forms on the site, strictly necessary cookies and automatic server logs. We do not use analytics or advertising cookies; see the Cookie Policy.
5. Your rights (KVKK Art. 11)
- to learn whether your data is processed and to request information about it,
- to learn the purpose of processing and whether it is used accordingly,
- to know the third parties it is transferred to in Türkiye or abroad,
- to request correction, and erasure or destruction under Article 7, and notification of these to recipients,
- to object to a result against you arising exclusively from automated analysis,
- to claim compensation for damage caused by unlawful processing.
You can delete your account from your panel at any time; deletion anonymises the account and removes saved places and pending requests. Paid order records that tax law requires us to keep are retained.
6. How to apply
Send your request in writing to the address above, to our registered e-mail (KEP) address, or by email from the address registered with us, as set out in the Communiqué on the Procedures for Applications to the Data Controller. We answer free of charge within 30 days.