Controller and scope
The data controller is İrem Taşkın, an individual providing nail services by appointment under the Azra Nails Beauty name. Contact: [email protected]. Sultaniye, Esenyurt, İstanbul is the service location, not an address designated for formal requests or legal notices.
This notice explains the data, collection methods, purposes and processing conditions concerned, and your rights under Türkiye’s Personal Data Protection Law No. 6698 (KVKK). You are not asked to accept this notice; reading it does not constitute explicit consent.
Data and collection methods
When the site is served through Cloudflare Pages, your browser’s automatic network request sends IP address, request and connection information to that hosting service. Names, contact details, service requests and appointment times you provide directly through WhatsApp, Instagram, email or telephone are received electronically or verbally. Electronic communications involve partly automated processing; no separate customer database is maintained.
Photographs may be obtained by taking them or receiving them from you; images of identifiable people may be personal data. Rights requests supply the request and necessary identity/contact information directly. The site has no forms, accounts or analytics measurement. Do not send unnecessary health information or identity documents.
Purposes and processing conditions
Appointment communications: necessary name, contact, service and time details are handled to discuss the service you request and arrange and manage your appointment. The condition of entering into or performing a contract under KVKK Article 5/2(c) applies only to data directly related to, and necessary for, that contract; it is not a general basis for advertising, tracking or an indefinite customer archive.
Technical operation and security: technical data such as IP address, request and connection information may be processed to deliver pages and prevent abuse. The legitimate-interest condition in KVKK Article 5/2(f) applies only where processing is necessary and proportionate and does not harm your fundamental rights and freedoms. This explanation does not mean that every technical record or retention period satisfies those conditions.
Photograph publication: publishing particular photographs in which a person is identifiable for promotional purposes requires separate, freely given, specific and informed explicit consent under KVKK Article 5/1. Consent must cover which photograph is used, for what purpose and through which channel. An appointment or service is not conditional on photograph consent, and you may withdraw consent you have given.
KVKK requests: the request, identity and contact information necessary to verify, assess and answer your request is handled under KVKK Article 5/2(ç), limited to the obligations arising from Article 13 and the Communiqué on the Procedures and Principles for Requests to the Data Controller. Information requested for identity verification must be necessary and proportionate. Where records are necessary to establish, exercise or protect a specific right, Article 5/2(e) may apply; it does not justify keeping all correspondence indefinitely for every possible dispute.
Recipients and international transfers
When the site is served through Cloudflare Pages, that provider receives technical data for page delivery and security. When you use a WhatsApp or Instagram link, Meta services may process connection, device and, where applicable, account data; when you communicate, they may process the messages and contact details you share. The WhatsApp link conveys the public service number and prepared service message to the provider but does not automatically send a chat message. The telephone provider is involved when you call. When you email the stated address, Gmail (Google) processes the sender and recipient addresses, message, attachments and technical transmission data; merely opening the site does not send a request to Gmail.
Google Maps and reviews are used only when you open the external link; the site contains no embedded maps or social content. Publishing an identifiable photograph on the web makes it available to site visitors; publishing it on social media requires consent that also covers that channel.
Data in these providers’ services may be processed outside Türkiye depending on the provider’s location and contract. This notice does not authorise an international transfer or state that a particular transfer mechanism is used or that the legal requirements have been met.
Retention and deletion limits
WhatsApp disappearing messages are set to 24 hours, and iCloud chat backup is disabled. This does not mean that all device, media, recipient, older-backup and provider records are erased within 24 hours. Having no separate customer database does not mean communication channels contain no data.
This notice does not specify fixed retention periods for appointment correspondence, Gmail requests, photographs, permission records or technical logs. Retention must be limited to the period required by law or necessary for the relevant processing purpose; when the processing conditions no longer apply, data must be erased, destroyed or anonymised in accordance with the legal requirements. This is not a guarantee that all copies will be erased simultaneously.
Rights and the request procedure
Under KVKK Article 11, you may learn whether data is processed and obtain information about it, its use for the stated purposes and domestic/overseas recipients; request correction, erasure/destruction where legal conditions apply, and notification of those actions to recipients. You may also object to adverse outcomes based solely on automated analysis and seek compensation for unlawful processing.
Contact [email protected] with privacy questions, photograph-removal requests or questions about request methods. Sending an ordinary email to this contact address does not, by itself, satisfy all formal request requirements in Article 5 of the Communiqué. Alongside written requests, the rules provide for registered electronic mail (KEP), secure electronic signatures, mobile signatures and electronic methods meeting the required conditions; this does not mean that all these methods are configured for Azra Nails Beauty.
For a formal request by ordinary email, the sender’s email address must have been previously notified to the controller and registered in the controller’s system; making contact does not automatically establish those conditions. This notice does not designate a postal or KEP address. Do not send unnecessary identity documents or sensitive data before obtaining information about the request method.
Article 5 of the Communiqué requires a request to include your name and surname; signature if the request is in writing; Turkish identity number for Turkish citizens, or nationality and passport number or any identity number for foreign nationals; residential or workplace address for notifications; any email address, telephone and fax number for replies; and the subject of the request. Relevant information and documents are attached to the request. This list does not mean that an identity-document photocopy must routinely be sent with every request.
Under KVKK Article 13, requests submitted through a valid procedure must be answered in writing or electronically as soon as their nature permits and within 30 days. Only necessary and proportionate information may be requested to verify an application.