Privacy notice

Last updated: 30 October 2026

This privacy notice explains how Adıyaman Çiğköftecisi processes personal data when you use our QR menu, table ordering, online payment, reservation and loyalty card services, in accordance with the General Data Protection Regulation (GDPR) and applicable national law.

1. Controller

• Adıyaman Çiğköftecisi
• Email: iletisim@rizaturker.com

2. Data we process

• Identity and contact data: name, phone number and email address you provide when ordering, booking or joining the loyalty card; delivery address for delivery orders.
• Order data: ordered items, table or ordering point, amounts, payment method, time of order or reservation, loyalty stamps, and the optional rating you give after delivery (stars and note; seen only by us, never published).
• Technical data: IP address, browser and device information, session key, log entries.
• Location: only if you allow it in your browser or mark your address on the map: to verify that an order is placed on the premises and to save where your delivery address is on the map for the courier. For deliveries by our own couriers, the courier’s location is shown only in your order tracking while they are on the way. Map images are loaded from the map provider’s servers (OpenStreetMap Foundation by default), which receive your IP address; the address of the point you mark is looked up through our server without sharing your IP address.
• Payment data: card details are processed directly by the payment provider; we do not see or store them.

3. Purposes and legal bases

• Taking, preparing and delivering your order, processing payment, handling reservations and running the loyalty card (Art. 6(1)(b) GDPR – performance of a contract).
• Invoices, receipts and record keeping required by law (Art. 6(1)(c) GDPR).
• Security of the service, preventing abuse and fake orders, improving the service (Art. 6(1)(f) GDPR – legitimate interests).
• Non-essential processing such as location or optional external fonts: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

4. Recipients

We share personal data only as necessary with: payment service providers (the relevant payment provider when paying online); food delivery platforms you ordered through and the couriers delivering your order; hosting, email and map providers; public authorities where required by law.

Some providers may process data outside the European Economic Area. In that case transfers are based on an adequacy decision or appropriate safeguards such as the EU Standard Contractual Clauses.

5. Retention

We keep personal data only as long as needed for the purposes above and as required by statutory retention periods (tax and commercial law). Afterwards it is deleted or anonymised. You can ask us to close your loyalty card at any time.

6. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal. You also have the right to lodge a complaint with a data protection supervisory authority.

To exercise your rights, contact us at iletisim@rizaturker.com.