ELARIS
← Back to Home

Legal

Personal Data Protection Notice

1. Data Controller

Under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data may be processed as described below by Fethiye Karseri, as data controller (operating under the "ELARIS" brand, via elarisdanismanlik.com).

  • Address: [TO BE COMPLETED]
  • Email: [TO BE COMPLETED]
  • Phone / WhatsApp: +90 554 014 05 09
  • Tax No. / National ID No.: [TO BE COMPLETED]

2. Personal Data Processed

In the course of your booking requests and your use of ELARIS sessions, the following personal data may be processed:

  • Full name
  • Phone / WhatsApp number
  • Booking date and time
  • Selected session
  • Records relating to transaction and payment status (once payment integration is active)
  • Other contact information you provide through relevant forms or communication channels
  • Technical records necessary for the secure and proper functioning of the website (e.g. cookie preference, device/browser information)

3. Method of Collection

Your personal data is collected electronically, directly from you, when you complete the booking form on the ELARIS website, when you contact us via WhatsApp or Instagram, and as you use the website.

4. Purposes of Processing

  • Receiving, planning, and following up on booking requests
  • Delivering the session you have selected and managing the booking process
  • Once payment integration is active, processing and recording your payment
  • Providing information about our sessions, upon your request
  • Managing requests and complaints
  • Ensuring the security and proper functioning of the website
  • Complying with legal obligations

5. Legal Basis

Your personal data is processed on the basis that it is directly related to the establishment or performance of a contract (the booking/service relationship), the fulfilment of a legal obligation, the data controller's legitimate interest (provided this does not harm your fundamental rights and freedoms), and, where applicable, your explicit consent.

6. Transfer of Personal Data

Except where legally required, your personal data is not shared with third parties without your explicit consent. Accordingly:

  • Once online payment integration is active, information necessary to process payment will be processed by the payment service provider handling the transaction.
  • Technical service providers used to host and operate the website: [TO BE COMPLETED].
  • Authorised public institutions and organisations, where legally required.

Other than as listed above, no data is currently transferred to third-party services that are not actively in use.

7. Retention Period

Your personal data is retained for as long as required by the purpose of processing and the statutory limitation periods set out in applicable law; it is deleted, destroyed, or anonymised at the end of these periods.

8. Your Rights Under KVKK

Under Article 11 of the KVKK, you have the right to: learn whether your personal data is being processed; request information if it has been processed; learn the purpose of processing and whether it is used in accordance with that purpose; know the third parties to whom it is transferred, domestically or abroad; request correction if it is incomplete or incorrectly processed; request its deletion or destruction within the framework set out by applicable law; request that these operations be notified to third parties to whom the data has been transferred; object to a result that is to your detriment arising solely from automated analysis; and claim compensation for damages arising from unlawful processing.

9. How to Apply

To exercise the rights listed above, you may submit a written request to [TO BE COMPLETED] or via WhatsApp (+90 554 014 05 09).

This notice is provided solely to inform you about how your personal data is processed; it does not itself constitute a declaration of explicit consent. Where a data processing activity requires explicit consent, this is presented as a separate and independent consent step.

This page is a draft; fields marked [TO BE COMPLETED], relating to company/data controller information and service terms, should not be published before they are filled in and their compliance with applicable law is confirmed by legal counsel.