Aidisyon Customer Account — Privacy Notice on the Protection of Personal Data

Last updated: 11 October 2026 · Version: 1.1

This notice informs persons who open an Aidisyon customer account while ordering from restaurants via the QR menu or the online ordering page, pursuant to Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK").

1. Data controller and two separate roles#

MEACH TEKNOLOJİ VE DANIŞMANLIK LİMİTED ŞİRKETİ ("Aidisyon") — Çınarlı Mah. 1572 Sokak No:33, 35170 Konak / İzmir · MERSİS: 0613213421900001 · KEP: meachteknoloji.ltd@hs01.kep.tr · E-mail: kvkk@aidisyon.com

• For your account and the information you yourself save to your account (name, telephone, your login credentials, your e-mail address, your saved addresses and, if you have consented, your allergy information), the data controller is Aidisyon.
• For every order you place, the data controller is the restaurant you order from. When you place an order, the information needed to prepare and deliver it (name, telephone, delivery address, order contents) is passed to that restaurant; the restaurant processes it in accordance with its own privacy notice. Aidisyon processes this order data on behalf of the restaurant and on its instructions.

There is a single Aidisyon account: if you also use a restaurant's management panel with the same telephone number, your password and your login methods are the same in both places.

2. Which data we process#

We list the orders you place with your account in your account (order history, reorder, cancellation request). These orders themselves are records of the restaurant you ordered from (§1).

3. Purposes and legal grounds#

Your e-mail address is optional; if you do not enter it, you can use your account and place orders in exactly the same way, and you can delete it from your profile at any time. Campaign or promotional messages (SMS, e-mail, WhatsApp) are sent to you only if you have separately given consent to commercial electronic messages; entering your e-mail address does not replace this consent. Account security notifications are not promotional messages and are sent regardless of that consent.

Your review is publicly visible on the restaurant's page; as the author, if you choose, your first name and the initial of your surname ("Ayşe K.") are shown, otherwise "anonymous" is shown. Your telephone number and order details are not shown; information such as telephone, e-mail, ID and card numbers in the review is removed automatically. The restaurant may hide or remove the review.

The addresses you save to your account are shown as options only to you at every restaurant; a restaurant cannot see your saved addresses unless you place an order with that address.

The Aidisyon customer account does not sell your data and does not use it for other parties' advertising. The address list saved to your account, your e-mail address and your allergy information are not sent to the restaurants' telephone and WhatsApp ordering assistants or to artificial intelligence models. An address you use in an order, however, is information belonging to that order: the restaurant you ordered from and the restaurant's ordering assistant may see it in your subsequent orders (e.g. for a "the address from last time?" suggestion).

4. Method of collection#

Your data is collected electronically through the account, login, profile and address forms on the QR menu and online ordering pages, telephone verification by SMS, the information Google or Apple passes to us when you sign in with these providers, the permission you give for browser notifications, the location you select on the map, and automatic system records (session cookie, server logs).

5. Transfer#

• The restaurant you order from: only the information needed to prepare and deliver that order; allergy information only if you have given explicit consent and choose to add it to that order (only that restaurant sees it). Your e-mail address is not passed to the restaurant.
• Our service providers: hosting, backup and the data download file (OVH, Italy), network and security (Cloudflare), SMS verification and account security notifications (Verimor, Türkiye), error monitoring (Sentry, EU — Germany; personal data is masked), maps (Google Maps Platform: when you search for an address or select a location on the map, your browser connects to Google).
• Google / Apple: if you choose to log in this way, the login takes place between you and Google (Google LLC, USA) or Apple (Apple Inc., USA) under their own terms; Aidisyon does not send the information in your account to these providers and only receives the result of the login.
• Your browser's notification service: if you have allowed browser notifications, the notification is delivered through the notification service of your browser's manufacturer (e.g. Google for Chrome, Apple for Safari, Mozilla for Firefox). The notification content (restaurant name, order status, order tracking link) is sent end-to-end encrypted; this service cannot read the content.
• Authorised public institutions and organisations: where required by law.

As our servers are located in the European Union (Italy) and some of our service providers are located abroad (Cloudflare, Google, Apple and Mozilla are headquartered in the USA), your data is transferred abroad; the transfer is limited solely to the purposes above.

6. Retention period#

The records of the orders you place are the responsibility of the restaurant and are subject to the periods in the Aidisyon Privacy Policy; deleting your account does not delete the restaurant's order record, but the personal information in the orders is anonymised within those periods.

7. Your rights#

Under KVKK Article 11, you have the right to learn whether your data is processed, to request information, to learn the purpose of processing, to know the persons to whom it is transferred, to request rectification, erasure or destruction, to request that these be notified to the persons to whom the data was transferred, to object to a result to your detriment arising from automated analysis, and to claim compensation for damage.

You can do the following yourself from your account; if one of these screens is not yet available, you can submit the same request by writing to kvkk@aidisyon.com:

• correct or delete your profile (name, e-mail), your addresses and your favourites;
• set or change a password, link or remove a Google / Apple login, change your number;
• view and close your active sessions; turn off browser notifications;
• download a copy of your data;
• withdraw your allergy consent;
• delete your account. Deletion cannot be undone; for security, you must have logged in within the last 10 minutes with a code sent to your phone. If you have an order in progress, deletion can be carried out after the order is completed. After deletion, your name does not appear in order records that must be retained; only the label "(deleted customer)" is shown.

Other requests: kvkk@aidisyon.com, via KEP to meachteknoloji.ltd@hs01.kep.tr, or in writing to our address above. Requests are concluded within 30 days at the latest.

The Turkish text is authoritative.