Personal Data Notice

Controller and scope
The MyBon operator identified below is the controller for its enquiries, business-user relationship, offers, subscriptions, support and its own security processing. The venue is the controller where it determines the purposes of menu membership, customer relations and campaigns. MyBon provides technical processing under the venue’s instructions for those activities. Roles depend on actual decisions and purposes, not just labels.

Data, collection and purposes
Information is collected electronically through forms, account screens, support messages, business-entered records and browser/server communications. Identity and contact details support enquiries and authorized accounts; subscriptions, offers and transactions support service delivery; access and security records prevent unauthorized use and help resolve problems. The venue must separately explain its member, favorite, recommendation, campaign and activity processing.

Legal grounds under Turkish Law No. 6698
Necessary contract-party information is assessed under Article 5(2)(c); mandatory legal records under 5(2)(ç); records needed to establish, exercise or protect rights under 5(2)(e). Proportionate security processing may rely on legitimate interests under 5(2)(f), subject to balancing individual rights. Optional processing without another valid basis requires separate consent where applicable. Reading a notice, accepting membership terms and permitting marketing are different actions.

Recipients and transfers
Necessary data may go to hosting and technical support providers for service operation, email providers for account messages, AI providers for the selected feature and competent authorities for legal requirements. Articles 8 and 9 apply to relevant transfers. Provider identity, data categories, destination countries and applicable safeguards must be determined for the actual service arrangement; broad references to partners do not authorize unrestricted sharing.

Rights and requests
Article 11 provides rights to learn whether data is processed, request information, learn its purpose and whether use matches that purpose, identify recipients, seek correction, and request deletion or destruction when the conditions apply. You may request notification of corrections or deletion to recipients, object to adverse results based exclusively on automated analysis, and seek compensation for unlawful processing.

Submit your identity and request to the controller’s address below or through legally accepted electronic channels. Conditions for registered email, secure electronic signatures and other application methods remain applicable. Requests must be resolved as soon as possible and within thirty days. Where an additional cost arises, only charges allowed by the Board’s applicable tariff may apply. Requests concerning venue customers require that venue’s participation; MyBon’s technical assistance does not remove the venue’s obligations.