Skip to content
Aidisyon

Order and Reservation Privacy Notice

Last updated: 8 November 2026 · Version: 1.2

This notice informs persons who order from a restaurant using the Aidisyon platform via the QR menu, the online ordering page, telephone or WhatsApp, persons who join a bill at the table via QR, and persons who make a table reservation at the restaurant, pursuant to Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK").

1. Data controller#

The data controller of the personal data in your order and reservation is the restaurant you order from or book with (the "Restaurant"). The Restaurant's name appears on the page where you order, on the order tracking page and on the reservation status page. You can ask the Restaurant for its trade name and contact details, or obtain them from us by writing to kvkk@aidisyon.com.

The Restaurant uses Aidisyon as its ordering platform: MEACH TEKNOLOJİ VE DANIŞMANLIK LİMİTED ŞİRKETİ, Çınarlı Mah. 1572 Sokak No:33, 35170 Konak / İzmir, kvkk@aidisyon.com. Aidisyon processes your order and reservation data on behalf of the Restaurant and on its instructions (data processor).

If you have opened an Aidisyon customer account, Aidisyon is the data controller for the information you yourself save to your account. The Customer Account Privacy Notice applies to that information.

2. Data processed by channel#

Channel Data
Joining a bill at the table via QR the name or nickname shown on the bill; a one-way encrypted token to recognise your device; the items and notes you add to the table (notes are visible to everyone at the table)
QR / online order your name and telephone number; for delivery orders, your address (floor, flat, directions, note to the courier, map point); order contents and your note; payment method (cash, card or meal card on delivery, change required)
Telephone order (AI assistant) your telephone number, name, address, order contents. The call is recorded after the announcement at the start of the call; your voice is converted to text and a written transcript of the conversation is kept.
WhatsApp order (AI assistant) your WhatsApp profile name and number, your messages (including photos, voice messages and stickers you send), the location you share, your name, address, order contents
Table reservation (via WhatsApp, the telephone assistant or a member of the Restaurant's staff) your name and telephone number; the day, time, number of guests and preferred seating area of the reservation; your reservation note (including any allergy or accessibility need, if you state it yourself); the status of the reservation (confirmation, change, cancellation, no-show) and whether you confirmed that you are coming; whether you agreed to receive the messages on WhatsApp. In reservations made by telephone or on WhatsApp, the call and the conversation are processed as described in the telephone and WhatsApp rows above.
All the status and times of the order; your requests to change or cancel the order; your allergy information, if you state it yourself in the order

3. Purposes and legal grounds#

Purpose Legal ground
Taking, preparing and delivering your order or preparing it for pick-up, collecting payment on delivery establishment and performance of a contract (Article 5(2)(c))
Informing you of the order status by SMS or WhatsApp and sending you a tracking link; verifying your number with a code when you open the tracking page performance of a contract (Article 5(2)(c))
Taking your order by telephone and on WhatsApp with an AI-assisted assistant establishment and performance of a contract (Article 5(2)(c))
Recording the telephone call: checking that the order or reservation was taken correctly and the quality of service, using it as evidence in a dispute about the order or reservation legitimate interest (Article 5(2)(f)); establishment, exercise or protection of a right (Article 5(2)(e))
Assessing your change and cancellation requests, resolving problems with the order performance of a contract (Article 5(2)(c)); protection of a right (Article 5(2)(e))
Keeping commercial records legal obligation (Article 5(2)(ç))
Showing who was at the table and who had what on the bill in the Restaurant's records, also after the bill is closed (e.g. for an objection, a refund or a question about the bill) legitimate interest (Article 5(2)(f))
Preventing fake orders and misuse, information security legitimate interest (Article 5(2)(f))
Taking your reservation, reserving your table, changing or cancelling the reservation establishment and performance of a contract (Article 5(2)(c))
Sending the reservation confirmation, the reminder the day before and information about changes or cancellation by SMS or WhatsApp; enabling you to confirm that you are coming or to cancel on the status page performance of a contract (Article 5(2)(c))
Showing reservations that were not attended in the Restaurant's own records legitimate interest (Article 5(2)(f))
Passing an allergy or accessibility need that you state of your own accord in the reservation note to the Restaurant so that your reservation is prepared accordingly special category personal data (health data); in accordance with Article 6 of the KVKK, for this purpose only
Passing an allergy that you state of your own accord in the order to the kitchen so that your order is prepared accordingly special category personal data (health data); in accordance with Article 6 of the KVKK, for this purpose only

The Restaurant may use your previous orders at that restaurant to suggest "the same as last time?". Information that you did not attend a reservation is visible only in the records of the restaurant you booked with; it is not combined with other branches of the same business and is not shared with other restaurants. Campaign and promotional messages are not covered by this notice; they are sent only with a separate consent from you.

4. Method of collection#

Your data is collected electronically and directly from you through:

5. Transfer#

As some of these service providers are located abroad, your data is transferred abroad. The transfer is limited to the purposes above.

6. Retention period#

Data Period
Your name, telephone number and address in the order anonymised after 2 years
Order amount and items 10 years (commercial record)
Your participation in a bill at the table (name; device token 30 days) your name is anonymised 2 years after the bill is closed; during this period it is visible in the Restaurant's panel together with the bill history. The device token is deleted 30 days after the bill is closed. You can request earlier deletion through the channels in §7
Your words in a change or cancellation request 90 days
Audio recording of the telephone call deleted after 90 days
Written transcript of the telephone call cleared of personal information after 90 days
WhatsApp message texts deleted after 90 days
Photos, voice messages and stickers you send on WhatsApp deleted after 90 days
The number and text of SMS messages sent to you masked and deleted after 90 days
Your reservation note deleted 30 days after the date of the visit, cancellation, refusal or expiry
Your name and number in the reservation and the reservation record (including no-shows) anonymised 2 years after the date of the visit
Link to the reservation status page stops working 24 hours after the reservation time
Allergy information you state in the order kept encrypted; on the telephone and on WhatsApp it is recorded only if you confirm it. If the order is not completed, it is deleted within 30 days at the latest; if it is completed, it is deleted together with the order's personal information

7. Your rights#

To exercise your rights under Article 11 of the KVKK (to request information, rectification, erasure, to object, to claim compensation, etc.):

Applications are concluded within 30 days at the latest.

The Turkish text is authoritative.

Versions