Last updated Nov 14, 2026
Personal Data Notice (KVKK)
This notice is given under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) and the Communiqué on the Procedures and Principles of the Duty to Inform. It covers the data Nucleic Table processes for itself. It is information only: it is not a consent text and asks you to tick nothing. The guests of a restaurant receive that restaurant’s own notice, because the restaurant is their data controller.
1. Data controller
- Legal name: Not yet published
- Registered address: Not yet published
- Tax office: Not yet published
- Tax number: Not yet published
- MERSIS number: Not yet published
- Data controller contact: Not yet published
2. Personal data we process
| Group | What data | Where it comes from |
|---|---|---|
| Account | E-mail address and a salted hash of your password. We never store the password itself. | Sign-up form |
| Restaurant | Company name, the restaurant’s address on the platform, preset, trial and billing state, onboarding progress. | Sign-up form and the owner area |
| Billing | Customer, subscription and order numbers at Polar. Your card details never reach us. | Payment notices from Polar |
| Acceptance records | Which documents you accepted, their version, the time, your e-mail, IP address and browser details. | Sign-up step |
| Session and security records | IP address, browser and device details, session start and last activity, rate-limit counters. | Automatic, when you sign in |
| Audit records | The kind and time of an action, the account that did it and a short summary. Support sessions record the reason. | Automatic |
| Correspondence | Your messages to us and your e-mail address. |
3. Purposes and legal bases
| Purpose | Legal basis (KVKK Art. 5/2) |
|---|---|
| Creating the account, running the restaurant, support | Necessary for the conclusion or performance of a contract (c) |
| Invoices, tax and accounting records | Necessary to comply with a legal obligation (ç) |
| Acceptance, dispute and audit records | Necessary for the establishment, exercise or protection of a right (e) |
| Security, abuse prevention, fixing faults | Legitimate interest, provided your fundamental rights are not harmed (f) |
We do not process this data on the basis of explicit consent, so no consent is asked and the service never depends on one.
4. Who receives it
- Polar, which sells and invoices the plans as Merchant of Record
- Infrastructure providers that host the platform, on our instructions
- Courts and public authorities, only where the law requires it
The platform’s servers and database run in: Not yet published. Transfers abroad, for example to Polar, rely on Article 9 of the Law.
5. How the data is collected
By electronic means: the forms you fill in, the settings you choose and automatic records made when you use the service.
6. Your rights (KVKK Art. 11)
You may apply to us to:
- learn whether your personal data is processed
- ask for information about it if it has been processed
- learn the purpose of the processing and whether it is used for that purpose
- know the third parties it is transferred to, at home or abroad
- ask for correction if it is incomplete or wrong, and have that told to recipients
- ask for deletion or destruction when the reasons for processing are gone, and have that told to recipients
- object to a result against you that comes only from automated analysis
- ask for compensation if you suffer loss from unlawful processing
7. How to apply
Send a signed written application with your name, ID details, address for answers and a description of your request, or write from the e-mail address you registered with. We answer free of charge within 30 days; the Authority’s tariff may apply if the answer needs more than ten pages. If you are not satisfied you may complain to the Personal Data Protection Board.
- Data controller contact: Not yet published
- Registered e-mail (KEP): Not yet published
- Postal address: Not yet published