Personal Data Protection Privacy Notice (KVKK)

1. Data controller

The Yanı Başımda service is provided by Codeo Solutions Limited (a company registered in England and Wales, company number 14645731), Gallants Farm, Gallants Lane, East Farleigh, Maidstone ME15 0LF, United Kingdom ("Codeo", "we"). You can reach us at destek@yanibasimda.co.

Our data controller representative: Codeo Mühendislik ve Bilişim Teknolojileri Sanayi ve Ticaret Limited Şirketi (MERSİS: 0211100318600001), İTOB OSB İzmir Bilimpark, 10032 Sk. No: 2, 35865 Menderes / İzmir, Türkiye, KEP (registered e-mail): codeo@hs01.kep.tr.

2. Personal data we process

• Identity and contact: first name, last name, e-mail address.
• Account and membership: your role, membership and payment status, wedding date, account opening and end dates.
• Content of your plan: guest list (your guests' names), seating plan, guest groups, seating rules, seating chart and invitation designs, music list.
• Invitation responses: the names and number of guests of those who RSVP through your invitation link.
• Guest photos: if you have turned this feature on, the photos your guests send you from the guest page and the name they optionally enter.
• Payment: payment amount, date and Stripe customer record. Your card details are processed directly by Stripe and do not reach us.
• Images you upload: planner logo, seating chart images and the photo you send for reading names from a photo (this photo is not stored after it has been read).
• Transaction security: IP address, browser and device information, bot verification result, server logs.
• Visit statistics: only if you consent to cookies, the pages you visit and your device/browser type, via Google Analytics. Identifiers and parameters in the address are removed before sending.

We do not collect special categories of personal data (race, ethnic origin, religion, health, biometric data, etc.) or data relating to criminal convictions. Please do not enter such information in the guest list or in notes.

3. Purposes of processing and legal grounds

• To open your account, provide the seating plan service and enable you to share your plan — establishment and performance of the contract (KVKK Art. 5/2-c).
• To take payment and keep invoice and accounting records — performance of the contract and legal obligation (Art. 5/2-c, 5/2-ç).
• To keep the service secure and prevent misuse and fake accounts — legitimate interest (Art. 5/2-f).
• To respond to your support requests — performance of the contract (Art. 5/2-c).
• To measure visit statistics and assess the effectiveness of our advertising — your explicit consent (Art. 5/1). You can withdraw your consent at any time via the "Cookie preferences" link.

4. Your guests' data

You determine the names of the guests you add to your guest list and of those who respond to your invitation, for the purpose of the wedding you are organising with them; we process this data only to provide the service to you and on your instructions. Who you share the sharing link with is under your control. We ask you to enter your guests' names for this purpose only.

If you turn on guest photos, we process the photos your guests send only to deliver them to you (and to the planner managing your plan); other guests cannot see these photos. To prevent abuse, every photo passes an automatic content check before it is saved, and inappropriate ones are never saved; for bot protection, the sender's IP address is processed during verification. File details such as location are removed when photos are re-encoded.

5. Transfers and transfers abroad

We do not sell your personal data and do not share it with third parties for marketing purposes without your explicit consent. To provide the service, we share it with the service providers below, limited to the relevant purpose; these providers process your data only on our instructions and under a duty of confidentiality. The providers' servers are located abroad; transfers are made with the safeguards under KVKK Art. 9. Data may also be transferred at the request of public authorities legally entitled to request it.

6. Security

Your data is protected by technical security measures and authorisation rules both in transit and on the servers where it is stored. We limit access to your data to employees and service providers who need it for their work.

7. Retention period

Your account and plan data is kept for as long as your account remains open; when you ask for your account to be deleted, it is deleted within a reasonable time. Payment and accounting records are kept for the period required by the relevant legislation (up to 10 years). Photos sent for reading names from a photo are never stored. Guest photos are deleted automatically 30 days after the wedding date. Google Analytics data is kept for at most 14 months.

8. Your rights (KVKK Art. 11)

• To learn whether your personal data is processed and, if so, to request information about it,
• To learn the purpose of processing and whether it is used in line with that purpose,
• To know the third parties in Türkiye or abroad to whom it is transferred,
• To request its correction if it is incomplete or inaccurate,
• To request its deletion or destruction within the framework of KVKK Art. 7,
• To request that corrections and deletions be notified to the third parties to whom it was transferred,
• To object to an outcome against you resulting from analysis exclusively by automated systems,
• To claim compensation if you suffer damage due to unlawful processing.

You can send your requests to destek@yanibasimda.co by writing from the e-mail address registered to your account. Your request will be concluded free of charge within 30 days at the latest. If your request is rejected, the response is found insufficient or no response is given in time, you may complain to the Turkish Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).

9. Changes

We may update this notice to comply with legislation. The current text is always published on this page and can be printed.