Order and Reservation Privacy Notice
Last updated: 8 November 2026 · Version: 1.2
This notice informs persons who order from a restaurant using the Aidisyon platform via the QR menu, the online ordering page, telephone or WhatsApp, persons who join a bill at the table via QR, and persons who make a table reservation at the restaurant, pursuant to Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK").
1. Data controller#
The data controller of the personal data in your order and reservation is the restaurant you order from or book with (the "Restaurant"). The Restaurant's name appears on the page where you order, on the order tracking page and on the reservation status page. You can ask the Restaurant for its trade name and contact details, or obtain them from us by writing to kvkk@aidisyon.com.
The Restaurant uses Aidisyon as its ordering platform: MEACH TEKNOLOJİ VE DANIŞMANLIK LİMİTED ŞİRKETİ, Çınarlı Mah. 1572 Sokak No:33, 35170 Konak / İzmir, kvkk@aidisyon.com. Aidisyon processes your order and reservation data on behalf of the Restaurant and on its instructions (data processor).
If you have opened an Aidisyon customer account, Aidisyon is the data controller for the information you yourself save to your account. The Customer Account Privacy Notice applies to that information.
2. Data processed by channel#
| Channel | Data |
|---|---|
| Joining a bill at the table via QR | the name or nickname shown on the bill; a one-way encrypted token to recognise your device; the items and notes you add to the table (notes are visible to everyone at the table) |
| QR / online order | your name and telephone number; for delivery orders, your address (floor, flat, directions, note to the courier, map point); order contents and your note; payment method (cash, card or meal card on delivery, change required) |
| Telephone order (AI assistant) | your telephone number, name, address, order contents. The call is recorded after the announcement at the start of the call; your voice is converted to text and a written transcript of the conversation is kept. |
| WhatsApp order (AI assistant) | your WhatsApp profile name and number, your messages (including photos, voice messages and stickers you send), the location you share, your name, address, order contents |
| Table reservation (via WhatsApp, the telephone assistant or a member of the Restaurant's staff) | your name and telephone number; the day, time, number of guests and preferred seating area of the reservation; your reservation note (including any allergy or accessibility need, if you state it yourself); the status of the reservation (confirmation, change, cancellation, no-show) and whether you confirmed that you are coming; whether you agreed to receive the messages on WhatsApp. In reservations made by telephone or on WhatsApp, the call and the conversation are processed as described in the telephone and WhatsApp rows above. |
| All | the status and times of the order; your requests to change or cancel the order; your allergy information, if you state it yourself in the order |
3. Purposes and legal grounds#
| Purpose | Legal ground |
|---|---|
| Taking, preparing and delivering your order or preparing it for pick-up, collecting payment on delivery | establishment and performance of a contract (Article 5(2)(c)) |
| Informing you of the order status by SMS or WhatsApp and sending you a tracking link; verifying your number with a code when you open the tracking page | performance of a contract (Article 5(2)(c)) |
| Taking your order by telephone and on WhatsApp with an AI-assisted assistant | establishment and performance of a contract (Article 5(2)(c)) |
| Recording the telephone call: checking that the order or reservation was taken correctly and the quality of service, using it as evidence in a dispute about the order or reservation | legitimate interest (Article 5(2)(f)); establishment, exercise or protection of a right (Article 5(2)(e)) |
| Assessing your change and cancellation requests, resolving problems with the order | performance of a contract (Article 5(2)(c)); protection of a right (Article 5(2)(e)) |
| Keeping commercial records | legal obligation (Article 5(2)(ç)) |
| Showing who was at the table and who had what on the bill in the Restaurant's records, also after the bill is closed (e.g. for an objection, a refund or a question about the bill) | legitimate interest (Article 5(2)(f)) |
| Preventing fake orders and misuse, information security | legitimate interest (Article 5(2)(f)) |
| Taking your reservation, reserving your table, changing or cancelling the reservation | establishment and performance of a contract (Article 5(2)(c)) |
| Sending the reservation confirmation, the reminder the day before and information about changes or cancellation by SMS or WhatsApp; enabling you to confirm that you are coming or to cancel on the status page | performance of a contract (Article 5(2)(c)) |
| Showing reservations that were not attended in the Restaurant's own records | legitimate interest (Article 5(2)(f)) |
| Passing an allergy or accessibility need that you state of your own accord in the reservation note to the Restaurant so that your reservation is prepared accordingly | special category personal data (health data); in accordance with Article 6 of the KVKK, for this purpose only |
| Passing an allergy that you state of your own accord in the order to the kitchen so that your order is prepared accordingly | special category personal data (health data); in accordance with Article 6 of the KVKK, for this purpose only |
The Restaurant may use your previous orders at that restaurant to suggest "the same as last time?". Information that you did not attend a reservation is visible only in the records of the restaurant you booked with; it is not combined with other branches of the same business and is not shared with other restaurants. Campaign and promotional messages are not covered by this notice; they are sent only with a separate consent from you.
4. Method of collection#
Your data is collected electronically and directly from you through:
- the forms on the QR menu and the online ordering page;
- the telephone call and the WhatsApp conversation;
- the information entered in the panel by the Restaurant's staff when you make the reservation by calling the Restaurant or at the Restaurant;
- automatic system logs.
5. Transfer#
The Restaurant's staff and courier: to prepare and deliver the order.
The recording of the telephone call: may be listened to by the Restaurant's authorised staff and, for support, by the Aidisyon team; every listening is logged.
Photos, voice messages and stickers you send on WhatsApp: may be viewed in the panel by the Restaurant's authorised staff; every viewing is logged.
Aidisyon and its service providers (data processors):
- hosting (OVH, Italy);
- network and security (Cloudflare, based in the USA);
- SMS (Verimor, Türkiye);
- maps (Google, USA). In telephone and WhatsApp orders, the address you say or share is sent to Google to find the location; your name and number are not sent. When you use the map on the QR / online page, your browser connects to Google.
- error monitoring (Sentry, EU).
- In telephone orders: services that convert speech to text and text to speech, and a language model (USA). If the main model does not work, a backup language model (DeepSeek, China).
- In WhatsApp orders: Meta (USA / Ireland) and a language model (USA).
Detailed list: Aidisyon Privacy Policy §6.
Authorised public institutions and organisations: where required by law.
As some of these service providers are located abroad, your data is transferred abroad. The transfer is limited to the purposes above.
6. Retention period#
| Data | Period |
|---|---|
| Your name, telephone number and address in the order | anonymised after 2 years |
| Order amount and items | 10 years (commercial record) |
| Your participation in a bill at the table (name; device token 30 days) | your name is anonymised 2 years after the bill is closed; during this period it is visible in the Restaurant's panel together with the bill history. The device token is deleted 30 days after the bill is closed. You can request earlier deletion through the channels in §7 |
| Your words in a change or cancellation request | 90 days |
| Audio recording of the telephone call | deleted after 90 days |
| Written transcript of the telephone call | cleared of personal information after 90 days |
| WhatsApp message texts | deleted after 90 days |
| Photos, voice messages and stickers you send on WhatsApp | deleted after 90 days |
| The number and text of SMS messages sent to you | masked and deleted after 90 days |
| Your reservation note | deleted 30 days after the date of the visit, cancellation, refusal or expiry |
| Your name and number in the reservation and the reservation record (including no-shows) | anonymised 2 years after the date of the visit |
| Link to the reservation status page | stops working 24 hours after the reservation time |
| Allergy information you state in the order | kept encrypted; on the telephone and on WhatsApp it is recorded only if you confirm it. If the order is not completed, it is deleted within 30 days at the latest; if it is completed, it is deleted together with the order's personal information |
7. Your rights#
To exercise your rights under Article 11 of the KVKK (to request information, rectification, erasure, to object, to claim compensation, etc.):
- you can apply directly to the Restaurant;
- or you can write to kvkk@aidisyon.com. We will forward your application to the Restaurant and help the Restaurant to conclude it.
Applications are concluded within 30 days at the latest.
The Turkish text is authoritative.
Versions
- Version 1.2 — 8 November 2026 (current)
- Version 1.1 — 13 October 2026
- Version 1.0 — 12 October 2026