Last updated: 20 October 2026

Privacy Notice (KVKK)

This notice explains how we process your personal data in connection with the Digidodo Menu service, in accordance with Article 10 of the Turkish Personal Data Protection Law No. 6698 (the “Law”, also known as KVKK).

This is an English translation provided for convenience. If there is any difference between the English and Turkish versions, the Turkish version prevails.

1. Data controller

Your personal data is processed by Digidodo Prodüksiyon ve Reklam Hizmetleri Anonim Şirketi (“Digidodo”) as the data controller.

Legal name: Digidodo Prodüksiyon ve Reklam Hizmetleri Anonim Şirketi
Address: Rasimpaşa Mah. Başakçı Sok. Barış Apt. No: 10 Blok No: 12, 34716 Kadıköy, Istanbul, Türkiye
Trade registry no.: 1064439
Tax no.: 2951311606
Email: dodo@digidodo.net
Phone: +90 850 302 45 78

2. What personal data do we process?

The data we process depends on your relationship with Digidodo:

Who	Data
Business representatives and panel users	Name, email address, phone, business and billing details, an irreversible hash of your password (the password itself is not stored), session and login attempt records, a log of actions taken in the panel (e.g. a price change, who made it and when).
People who contact us and prospective customers	Name, contact details and message content you send us by WhatsApp, phone or email; quote and meeting notes.
Businesses we approach	Business name, address, phone and website that businesses publish openly on the internet and on maps.
Menu visitors (customers of the businesses)	No account is needed to open a menu; no name, phone or email is requested. When a waiter call or bill request is made, only the table number and the time of the request are recorded. View statistics are kept as daily totals without being linked to any person. Our infrastructure provider processes technical connection records such as IP addresses for security and service continuity.

3. Why do we process personal data?

To set up and perform the contract: opening accounts, panel access, publishing menus, and providing setup, translation, content update and photo shoot services.
Invoicing, payment tracking and plan renewal reminders.
Information security: authentication, preventing unauthorised access and brute-force attacks, keeping activity logs.
Responding to requests and complaints and providing support.
Introducing our services to businesses and making offers.
Meeting legal obligations and responding to information requests from authorised bodies.

4. Collection method and legal grounds

We collect data from you, from your colleagues (e.g. the business representative who invites you to the panel) and from public sources, through the panel, our website, WhatsApp, phone and email, partly by automated means. We rely on the following legal grounds in Article 5(2) of the Law:

(c) Setting up or performing a contract: account, panel, menu and team services.
(ç) Legal obligation: invoice, tax and commercial book records.
(d) Data made public: contact details that businesses themselves have published openly.
(e) Establishing, exercising or protecting a right: activity logs as evidence in disputes.
(f) Legitimate interest: information security, improving the service and introducing our services to businesses. You can opt out of such promotional communications at any time.

If we ever need to process data based on your explicit consent, we will ask for it separately and in advance.

5. Who do we share personal data with?

Our service providers: hosting and content delivery (Cloudflare), email (Google Workspace), messaging (WhatsApp). These providers’ servers may be located abroad; transfers are made in line with the procedures and safeguards in Article 9 of the Law.
Our accountant and banks: to the extent needed for invoicing and payments.
Authorised public bodies and courts: where required by law.

We do not sell your personal data and do not share it with third parties for advertising.

6. Retention periods

Account and menu data: for the duration of the contract; 90 days after the plan ends (for renewal and data export), then deleted or anonymised.
Invoices and accounting records: for the period required by law (up to 10 years under the Turkish Commercial Code and Tax Procedure Law).
Session records: up to 30 days; login attempt records: the short period needed for security checks.
Waiter call records and view counts: as long as needed to report on the service.
Prospective customer and promotion records: deleted immediately if you object, otherwise kept for up to 2 years.

7. Your rights

Under Article 11 of the Law, you have the right to: learn whether your personal data is processed; request information if it is; learn the purpose of processing and whether it is used for that purpose; know the third parties in Türkiye or abroad to whom it is transferred; request correction if it is incomplete or inaccurate; request deletion or destruction under the conditions in Article 7 of the Law; request that these actions be notified to third parties to whom the data was transferred; object to a result against you arising solely from automated analysis; and claim compensation if you suffer damage due to unlawful processing.

8. How to apply

You can send your application, with information that lets us verify your identity, to dodo@digidodo.net from your registered email address, or in writing to Rasimpaşa Mah. Başakçı Sok. Barış Apt. No: 10 Blok No: 12, 34716 Kadıköy, Istanbul, Türkiye. We will respond as soon as possible depending on the nature of the request, and within 30 days at the latest, free of charge; if the action involves an additional cost, the fee set by the Turkish Personal Data Protection Board may apply.

9. Cookies and browser storage

We do not use advertising, marketing or third-party tracking cookies on our website or menus. We only use what is needed for the service to work:

Session cookie (business panel): to keep a signed-in panel user’s session secure. Kept for up to 30 days; deleted when you sign out.
Language preference (business panel): to remember your choice if you use the panel in English. Kept for up to 1 year.
Preferences (menu): your language and light/dark display choice, kept only in your own browser and never sent to us.

Because these are strictly necessary to provide the service you request, they do not rely on explicit consent. You can delete them in your browser settings; you will then need to sign in to the panel again.

Items, prices, ingredients, allergen and calorie information and photos in menus are entered or approved by the business concerned. Businesses are responsible for their own obligations towards their customers.

11. Changes

We may update this notice in line with changes in legislation or our services. The current version is always published on this page; we notify business representatives separately of significant changes.