Personal Data Protection Notice

Controller and collection methods

The controller is Cen Medya Limited Şirketi, whose address and contact information appear below. Data is collected electronically through account, registration, business / dress, enquiry, booking and contact forms, session cookies and server security logs. We do not request special-category data; avoid unnecessary personal or third-party information in messages.

Data, purposes and legal grounds

Identity / contact details, password hashes, account type, verification and acceptance records are processed to establish and perform the membership contract under Article 5(2)(c) of Law 6698. Following / dress lists, messages, selected business / dress, optional phone and event date and booking records support requested features on the same basis. Business representation, listings, plan and billing data support contract performance, statutory accounting and legal claims under Article 5(2)(c), (ç) and (e). IP, session, timing and security records support legitimate security interests without overriding fundamental rights under Article 5(2)(f), and legal obligations or claims where applicable. Marketing consent is not bundled with membership.

Disclosures and recipients

Enquiry and booking details are shared with authorised managers of the business you select to provide requested services. Published business / dress content is public; personal lists are not. Infrastructure includes Zoho CPaaS / ZeptoMail transactional email, Cloudflare R2 / CDN media storage and delivery, and hosting / security providers. Competent authorities receive data only under legal obligations. If payment is enabled, its provider is identified for that transaction; this site does not store card details. Infrastructure involving overseas access / transfers requires the applicable safeguards under Article 9 of Law 6698; this notice alone is not a transfer safeguard or consent.

Retention, security and rights

Data is retained as necessary for its purpose and contract, applicable statutory periods and legal claims, then deleted, destroyed or anonymised. Access is limited by role. Under Article 11 you may learn whether data is processed, request information, learn purposes and appropriate use and recipients, seek correction, deletion / destruction where conditions apply and notification to recipients, object to adverse outcomes based solely on automated analysis, and seek compensation for unlawful processing. Submit requests with sufficient identity-verification information to our postal address or a lawful electronic channel. [email protected] can explain available methods. Requests are answered within 30 days, generally without charge subject to statutory exceptions.