What personal data we collect on this site, and why.

Your personal data is processed by KRUvasan Istanbul as data controller. Our address: Mim Kemal Öke Caddesi No:11, Nişantaşı, Şişli / İstanbul. You can reach us about anything on this page at the email address at the bottom of the page, or in writing at this address.

We collect personal data only electronically: directly from you when you fill in a form, and from the technical information your browser sends when you visit the site. Nothing else on the site collects data; there are no analytics tools or ad trackers.

• Catering form: your name, email, and optionally your phone, event date and guest count, the request you write, the fact that you ticked the consent box, and when the request was sent.
• Workshop announcement list: if you signed up, only your email address, the page you signed up on, the consent record and the sign-up time.
• Technical information: the IP address, browser and device details, requested page and time your browser sends with every request. These are recorded by our hosting provider; when you submit a form, your IP address is also held briefly in server memory to prevent abuse.

We process your data only for the purposes below, on the legal bases in Article 5 of the KVKK. None of it is used for advertising or profiling, and none of it is sold.

• Replying to your catering request, preparing a quote, and planning and delivering the order: necessary for entering into and performing a contract (KVKK Art. 5(2)(c)).
• Sending the workshop and event announcements you signed up for: your explicit consent (KVKK Art. 5(1)). You can withdraw it at any time.
• Keeping the site secure and preventing automated, bulk form submissions: our legitimate interest, provided it does not harm your fundamental rights and freedoms (KVKK Art. 5(2)(f)).
• Meeting our legal obligations and protecting our rights in a dispute: legal obligation, and the establishment, exercise or protection of a right (KVKK Art. 5(2)(ç) and 5(2)(e)).

We do not sell your data or share it with anyone for marketing. Within Turkey it may be disclosed only to public authorities legally entitled to request it, and only as far as the law requires. The site runs on the infrastructure of the service providers below; because their servers are outside Turkey, your data is transferred abroad to them and processed only for the service named.

• Vercel Inc. (USA): hosting. Pages and forms run on servers in the USA; technical information and form contents pass through them.
• Neon: the database service where catering requests and the announcement list are stored.
• Resend: the email delivery service that forwards a copy of your catering request to our business mailbox.
• Google: the map on the visit page. It does not load until you press "Show map"; when you do, your browser connects directly to Google, and Google processes your IP address under its own privacy policy.

We keep data no longer than its purpose requires, and delete it once that purpose has ended.

• Catering requests: for as long as it takes to reply and, if there is an order, to complete it, in the panel and in our business mailbox. Invoices and accounting records for completed orders are kept for the period the law requires.
• Announcement list: until you ask to be removed. When you leave, your address is deleted.
• Technical information: the IP address from a form submission is held only briefly in the server's temporary memory and is never written to the database. The hosting provider's logs are subject to the provider's own retention period.

Under Article 11 of the KVKK, you can apply to us to:

• find out whether your personal data is processed,
• request information about it if it is,
• learn the purpose of the processing and whether the data is used for that purpose,
• know the third parties in Turkey or abroad to whom it is transferred,
• ask for it to be corrected if it is incomplete or inaccurate,
• ask for it to be deleted or destroyed under the conditions in Article 7 of the KVKK,
• ask for a correction or deletion to be passed on to the third parties the data was transferred to,
• object to an outcome against you that results solely from automated analysis of your data,
• claim compensation if you suffer damage from unlawful processing.

You can send your application by writing to the address at the bottom of the page from the email address you previously gave us, or in writing to Mim Kemal Öke Caddesi No:11, Nişantaşı, Şişli / İstanbul; the same email works for leaving the announcement list. We resolve applications free of charge within thirty days at the latest. If you find our reply inadequate, or receive none in time, you can complain to the Turkish Personal Data Protection Board (KVKK Board).

This site writes no cookies to a visitor's browser; there are no analytics, measurement or advertising cookies. The site opens in Turkish for everyone, so there is no language-preference cookie either. The only cookie is the session cookie for staff signing in to the panel; visitors never receive it. The map on the visit page is Google's content and does not load until you open it; when you do, Google may set its own cookies, which fall under Google's privacy policy.