Personal Data Notice (KVKK)

1. Data controller

Your personal data is processed by Eva Soft Bilişim A.Ş. (the "Company") as data controller. Address: Work10 İş Hanı, Hacı İlbey Mah. Ali Hikmet Paşa Cad. No:27/C, 10100 Altıeylül / Balıkesir. Email: info@evabilisim.com.tr. Phone: +90 850 308 23 82.

When you send a quote request to a studio, message a studio or view photos a studio has shared with you, that studio is a separate data controller for its business relationship with you. For the customer records studios keep in the StudioAsist software, the Company acts as a data processor on the studio's behalf.

2. Personal data we process

Studio profile visit statistics are kept as totals only. To count unique visitors, a one-way digest is created from the IP address and browser information with a key that changes daily; the digest is deleted the next day and is not used to identify you.

• Identity: full name.
• Contact: phone number, email address.
• Customer transactions: your quote requests (studio, service category, event date, message), messages with studios, ratings and reviews, photo selections.
• Transaction security: IP address, session and device/browser information, sign-in and SMS verification records, system logs.
• Location: if you use "Use my location", the approximate location shared by your browser; used only to sort nearby studios in that search and not stored.
• Visual: photos a studio shares with you (the studio is the data controller for these).
• Analytics: only if you consent, site usage data collected via Google Analytics (online identifiers, pages viewed).

3. Purposes of processing

• Creating your customer account, verifying your identity (one-time SMS code) and managing your session,
• Forwarding your quote requests to the studio you choose and enabling communication with studios,
• Publishing and moderating your ratings and reviews,
• Running photo selection and approval processes,
• Sending you SMS, email and, if you allow, push notifications,
• Ensuring information security and preventing abuse and fraud,
• Responding to your requests and complaints,
• Complying with legal obligations and providing information to competent authorities,
• If you consent, measuring and improving how the Platform is used.

4. Legal bases

• KVKK Art. 5/2(c): necessary for the establishment or performance of a contract — account, quote forwarding, messaging, reviews and photo selection.
• KVKK Art. 5/2(ç): compliance with a legal obligation — records under Law No. 5651 and related legislation, requests from competent authorities.
• KVKK Art. 5/2(e): establishment, exercise or protection of a right.
• KVKK Art. 5/2(f): our legitimate interests, provided your fundamental rights and freedoms are not harmed — information security, abuse prevention, service quality.
• KVKK Art. 5/1: your explicit consent — analytics cookies and the related transfer abroad.

5. Transfers of personal data

Reviews you publish are shown publicly together with the name you use in the review.

• To studios you send quote requests to, message or review, in order to fulfil your request,
• To our service providers (hosting and infrastructure, SMS delivery, email delivery), only as needed to provide the service,
• To competent public authorities and courts where required by law,
• Abroad: if you consent, to Google LLC under Google Analytics; if you allow push notifications, on the website to your browser's push service provider and in the mobile app to Google LLC (Firebase Cloud Messaging) and, on iOS devices, Apple Inc. (Apple Push Notification Service). These transfers are made in accordance with KVKK Art. 9.

6. Method of collection

Your personal data is collected electronically, directly from you through the account, quote, message and review forms on the Platform, and automatically through cookies and system logs.

7. Retention

Personal data is kept for as long as the purpose requires and for the periods required by law, and is then deleted, destroyed or anonymised. When you delete your customer account, your account information is deleted; records that must be kept by law are retained for the required period.

8. Your rights

Under KVKK Art. 11, by applying to the data controller you have the right to:

• Learn whether your personal data is processed,
• Request information if it has been processed,
• Learn the purpose of processing and whether data is used accordingly,
• Know the third parties in Türkiye or abroad to whom data is transferred,
• Request correction if data is incomplete or inaccurate,
• Request deletion or destruction under the conditions of KVKK Art. 7,
• Request that third parties to whom data was transferred be notified of corrections, deletions or destructions,
• Object to a result against you arising exclusively from automated analysis,
• Claim compensation for damage caused by unlawful processing.

9. How to apply

You can submit your request, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller, in a written application containing information identifying you and your request, in person or through a notary to Work10 İş Hanı, Hacı İlbey Mah. Ali Hikmet Paşa Cad. No:27/C, 10100 Altıeylül / Balıkesir, or from the email address registered on the Platform to info@evabilisim.com.tr.

Applications are concluded free of charge within thirty days at the latest. If the process requires an additional cost, the fee set by the Personal Data Protection Board may be charged. For data relating to your business relationship with a studio, you may also apply to that studio.

Privacy PolicyCookie Policy