Privacy notice (KVKK)

Data controller

Under the Turkish Personal Data Protection Law No. 6698 ("KVKK"), your personal data is processed by On Air Kitchen as data controller (sample name; the company's full trade name, MERSIS number and address will be added), within the scope described in this notice.

Personal data we process

When you order or contact us, we may process the following personal data:

• Identity: first and last name.
• Contact: phone number, e-mail address.
• Order and delivery: delivery address, order contents and notes, order date and time.
• Transaction security: IP address, browser and device information, site access logs.

Purposes

We process your personal data for these purposes:

• Taking, preparing and delivering orders.
• Contacting you about your order.
• Answering corporate order requests.
• Handling payment and invoicing.
• Running information security processes.
• Meeting legal obligations and informing authorised bodies.

Legal grounds (KVKK Art. 5)

We process your personal data on these legal grounds under Article 5 of the KVKK:

• It is directly necessary to set up or perform a contract (Art. 5/2-c).
• It is necessary for the data controller to meet a legal obligation (Art. 5/2-ç).
• It is necessary to establish, exercise or protect a right (Art. 5/2-e).
• It is necessary for the data controller's legitimate interest, provided it does not harm your fundamental rights and freedoms (Art. 5/2-f).
• Your explicit consent, for processing outside these grounds (Art. 5/1).

Transfers

We may transfer your personal data only for the purposes above and in line with Articles 8 and 9 of the KVKK, to these recipients:

• Cargo and courier service providers (for delivery).
• Payment service providers and banks (for payment).
• E-commerce platform and hosting providers.
• Public bodies and courts authorised by law.

How we collect data

We collect your personal data through the website, the online order page, phone, e-mail and WhatsApp, by automated and non-automated means.

Your rights (KVKK Art. 11)

Under Article 11 of the KVKK, you have the right to:

• Learn whether your personal data is processed.
• Request information about the processing.
• Learn the purpose of the processing and whether the data is used for that purpose.
• Know the third parties in Türkiye or abroad to whom the data is transferred.
• Ask for incomplete or incorrect data to be corrected.
• Ask for the data to be deleted or destroyed under the conditions of Article 7 of the KVKK.
• Ask for corrections, deletions or destructions to be notified to the third parties who received the data.
• Object to a result against you that comes only from analysis by automated systems.
• Claim compensation for damage caused by unlawful processing.

How to apply

Send your requests about these rights in writing to the e-mail address below, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller.

We answer your request free of charge within 30 days at the latest. If the request causes an extra cost, the fee set by the Personal Data Protection Board may be charged.