Gizlilik Politikası
15/08/2026
Orders and customer management
We collect and process your personal data (name, email address, phone number, delivery address) solely for processing your orders and providing our services. The legal basis is Art. 6(1)(b) GDPR (contract performance).
Payment processing
For payment processing, your payment data is transmitted to our payment service provider. We do not store credit card or bank details on our servers.
Website use
When you use our website, technical data (IP address, browser type, access time) is collected automatically. This data is used for the technical provision and security of our website.
Retention period
Your order data is stored for the statutory retention periods (generally 6 years after the end of the contract). Customer data is deleted once it is no longer required for contract performance.
Data deletion
You have the right to request deletion of your personal data at any time, unless statutory retention periods apply.
Data subject rights
You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to the processing of your personal data. Please contact us to exercise your rights.
Right to complain
You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.
Product analytics (PostHog)
With your consent we use PostHog (PostHog Inc., EU Cloud) as a processor to understand how this website is used — which pages are viewed and where an order is abandoned. Processing is based on Art. 6(1)(a) GDPR (consent) and happens only after you accept analytics in the cookie banner; you can withdraw at any time via the cookie settings, which stops it immediately. We collect page views and interactions and record a reconstruction of your visit (session replay), including the page layout, clicks and scrolling. Ordinary public storefront text — such as menu names, product descriptions, prices, navigation and error messages — remains readable so we can understand usability problems. Every form-field value and every marked region that displays personal or confidential data — including names, contact and account details, delivery addresses, order identifiers, order notes and gift-card balances — is masked before the recording leaves your device; address suggestion lists are omitted entirely. Text and DOM attribute values in automatically captured click events also remain masked. If you are signed in, PostHog receives an internal customer reference so visits can be linked — not your name, e-mail address or telephone number. Payment card details are entered in a separate frame belonging to our payment provider and never reach us or PostHog.
Veri koruma ile ilgili sorularınız varsa veya haklarınızı kullanmak isterseniz bize her zaman ulaşabilirsiniz.