Privacy Notice

At Eyüp Aydın Hair Studio, we care about the security of your personal data. This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) to inform you about the personal data processed during online booking, services and payments.

1. Data controller

Your personal data is processed by Eyüp Aydın Hair Studio as the data controller.

2. Personal data we process

• Identity and contact: name, surname, mobile phone number.
• Appointments and services: date and time, selected service and staff member, notes, past appointments.
• Payments: bill amount, payment method, package and remaining balance where applicable.
• Reviews: your review and rating, if you write one.
• Security: verification code records and technical records such as IP address and session cookie.

If you share health information such as allergies or skin sensitivity so that the service can be provided safely, this is special category personal data and is processed only with your explicit consent and for that purpose.

3. Purposes

• Creating, confirming, reminding, changing and cancelling your appointments,
• Verifying your phone number and keeping booking transactions secure,
• Providing the service and handling bills and payments,
• Responding to your requests, suggestions and complaints,
• Fulfilling legal obligations such as invoicing, accounting and record keeping.

4. Legal grounds

Your data is processed under Article 5(2) of the KVKK: where it is directly necessary for the establishment or performance of a contract (c), for compliance with a legal obligation (ç), and for the legitimate interests of the data controller provided that your fundamental rights are not harmed (f). Processing that requires explicit consent, such as health information or promotional messages, is carried out only with your consent, which you may withdraw at any time.

5. How we collect data

Through the online booking form on our website, by phone and messages, or in person at our business, by fully or partly automated electronic means.

6. Transfers

Only for the purposes above and to the extent necessary, your data may be shared with the providers of our booking software and hosting as data processors, with the WhatsApp messaging service so that confirmation and reminder messages can be delivered, and with authorised public authorities upon request.

7. Retention

Your data is kept for as long as the purpose requires and for the retention periods set by law, and is then deleted, destroyed or anonymised.

8. Your rights

Under Article 11 of the KVKK, you have the right to learn whether your data is processed and request information about it; to learn the purpose and whether it is used accordingly; to know the third parties it is transferred to in Turkey or abroad; to request correction of incomplete or inaccurate data; to request deletion or destruction under Article 7; to request that these actions be notified to third parties; to object to a result against you arising solely from automated analysis; and to claim compensation for damage caused by unlawful processing.

9. Applications

You can send your requests through our contact details above or in writing to our business. Requests are concluded as soon as possible and within 30 days at the latest, free of charge as a rule. If your request is rejected, the answer is insufficient or no answer is given in time, you may file a complaint with the Personal Data Protection Board.