Privacy Policy and Personal Data Protection (KVKK) Notice
Data Controller: Kurtuluş Nazar Pasta Sanayi (Nazar Profiterol)
Address: Istanbul, Türkiye
Contact: [email protected]
Last updated: 14 October 2026
1. Purposes of Processing Personal Data
At Nazar Profiterol, we process your personal data under Personal Data Protection Law No. 6698 (KVKK) for the following purposes:
• Providing our products and services, and managing order and delivery processes
• Evaluating corporate catering and bulk order requests
• Customer relationship management and communication activities
• Carrying out marketing, campaign and promotional activities
• Fulfilling legal obligations
2. Personal Data Collected
The following personal data may be collected through our website, contact forms, social media channels and mobile app:
• Identity information: First name, last name, title
• Contact information: Phone number, e-mail address, address
• Company information: Company name, department, position
• Order information: Order details, delivery preferences
3. Transfer of Personal Data
Your personal data may be transferred, for the purposes stated above and within the conditions set out in Articles 8 and 9 of the KVKK, to our business partners, suppliers, cargo and logistics companies and, where legally required, to authorised public institutions and organisations.
4. Cookies
Our website uses cookies to improve the user experience. You can manage your cookie preferences through your browser settings.
5. Data Security
The necessary technical and administrative measures are taken to ensure the security of your personal data. Your data is protected against unauthorised access, loss and misuse.
6. Your Rights
Under Article 11 of the KVKK, you have the right to:
• Learn whether your personal data is processed
• Request information about it if it has been processed
• Learn the purpose of processing and whether it is used in line with that purpose
• Know the third parties in Türkiye or abroad to whom it is transferred
• Request correction if it is incomplete or incorrectly processed
• Request deletion within the conditions set out in Article 7 of the KVKK
• Object to a result against you arising from the analysis of processed data exclusively by automated systems
7. Contact
You can send your requests regarding your personal data to [email protected] or in writing to our head office.
8. Mobile App
This section concerns personal data processed through the Nazar Profiterol mobile app. If you use the app, this section also applies to you.
8.1 Data processed in the app
Account and identity: Phone number (required for login and verification), first and last name, e-mail address, company name and invoice type.
Address: The delivery addresses you save.
Orders and payment: Order contents, amount, delivery preference and order status. The card details you enter at payment are sent to the payment institution solely to complete that transaction; they are stored neither in the app nor on our servers, and no saved-card feature is offered. Payment is completed through the payment institution with 3D Secure verification.
Wallet and Regulars (Müdavim): Your wallet balance, your regular-customer earnings and tier, and the related transactions. If you use QR payment at a branch, these transactions are also linked to your account.
Notifications: If you allow notifications, your device's notification ID (token). This ID is used only to send you notifications and is not used once you turn notifications off in your device settings.
Usage data: General in-app usage events (for example, adding a product to the basket or viewing the payment step) are recorded for measurement purposes. These records do not contain identity information such as your name or phone number.
Crash and error logs: If the app closes unexpectedly, technical information is recorded and sent to us so that the error can be fixed: where the error occurred, device model and operating system version. Your name, phone number or account information is not added to these logs; they are not linked to your identity and are used only to fix the app.
The app does not collect location data. It does not use the advertising identifier (IDFA) and does not carry out third-party ad tracking.
8.2 Parties to whom data is transferred
• Google (Firebase): Infrastructure for measurement, sending notifications and crash logs. Data in this scope may be processed on servers abroad.
• Sales and point-of-sale system (Syrve): To match wallet and regular-customer balances with branch transactions.
• Payment institution: To complete the payment transaction.
• Cargo and logistics companies: For delivery.
8.3 Deleting your account
You can delete your account in the app: Profile > Delete My Account. Your deletion request is processed immediately; no further step is needed apart from confirmation.
When deleted, your account, saved addresses, communication permissions, wallet and regular-customer records and notification record are deleted. Any balance remaining in your wallet is not refunded and does not return if you sign up again with the same number.
Order records subject to invoicing are kept for the period required by tax legislation and are not used for marketing. In the sales and point-of-sale system, your phone number may remain as a record key in past transaction records; your name and account information are deleted.
8.4 Your rights
The rights listed in section 6 also apply to data processed through the app. You can send your requests to the same contact address.
This policy is reviewed regularly by Nazar Profiterol and may be updated.
This is a translation provided for information. In case of any discrepancy, the Turkish version prevails.