Data Protection Notice
Under Turkish Personal Data Protection Law No. 6698, this notice explains which of your data we process on the Public Art website, why, and what your rights are.
Last updated:
Data controller
Your personal data is processed by PUBLİC CAFE TURİZM VE TİCARET LİMİTED ŞİRKETİ ("Public Art"), acting as data controller, within the scope described below.
- Registered name: PUBLİC CAFE TURİZM VE TİCARET LİMİTED ŞİRKETİ
- Address: Türkmen Mah. Atatürk Blv. No: 48/A Kuşadası / AYDIN
- Tax office and number: Kuşadası — 7331361329
- Email: info@publicartcoffee.com
- Phone: +90 539 334 94 75
What data we process
We only process data you enter yourself. Unless you fill in a form, no data identifying you is collected.
| Where | What data | Why |
|---|---|---|
| Account (sign-up and sign-in) | Full name, email address, password | To create your account and sign you in |
| Newsletter | Email address | To send you news and offers |
| Franchise application | Full name, email, phone, city, your message | To assess your application and contact you |
| Contact form | Full name, email, your message | To answer your question |
We never see your password; it is stored irreversibly hashed by the account infrastructure.
Legal basis
- Account and sign-in: necessary for entering into and performing a contract (Art. 5/2-c).
- Franchise application and contact form: establishment of a right and legitimate interest (Art. 5/2-e and 5/2-f).
- Newsletter and marketing email: YOUR EXPLICIT CONSENT (Art. 5/1). You may withdraw it at any time.
- Statutory retention duties: compliance with a legal obligation (Art. 5/2-ç).
Marketing consent is separate from membership. The sign-up form keeps these as two separate checkboxes; you can create an account without consenting to marketing.
Who we share it with
Your data is not sold and is not transferred to third parties for their own marketing. It is processed only by the following service providers, on our behalf and under our instructions:
- Vercel Inc. — Website hosting
- Supabase Inc. — Database and account infrastructure
- Resend (Plus Five Five, Inc.) — Sending notification emails
- Google Ireland Ltd. — Ad measurement (Google Ads) — only if you accept cookies
- Metricool Software, S.L. — Cookie-free visit statistics (page visited, screen size, IP)
International transfer: the providers above operate servers outside Türkiye, so your data is transferred abroad within the meaning of Art. 9 of the Law. The consent you give at sign-up covers this transfer; for Google Ads the basis is the consent you give on the cookie banner.
How long we keep it
- Account data: as long as your account exists. Deleted when you delete your account.
- Newsletter: as long as you stay subscribed. Removed when you unsubscribe.
- Franchise applications: at most 2 years after the process closes.
- Records with a statutory retention period: for as long as the relevant legislation requires.
Cookies
Strictly necessary cookies: one that remembers your language and, if you are signed in, a session cookie. The site cannot work without them, so no consent is asked.
Ad measurement cookie (Google Ads): used to measure whether our franchise ads lead to applications, calls or WhatsApp messages. It is loaded ONLY if you press "Accept" on the banner shown on your first visit; if you decline it is never loaded and the site works the same. This cookie sends data to Google's servers outside Türkiye; the consent you give on the banner covers this transfer under Art. 9 of the Law. You can change your choice at any time from the "Cookie preferences" link at the bottom of every page.
Visit statistics: we use a Metricool counter to see which pages are visited. It uses no cookies and stores nothing in your browser; it only sends the page visited, screen size and the referring site.
Videos are shown through YouTube. The player is not loaded until you press play, so no request is made to YouTube and no cookie is set unless you choose to watch.
Your rights
Under Art. 11 of the Law you may ask us to:
- Learn whether your data is processed and, if so, request information about it
- Learn the purpose of processing and whether it is used accordingly
- Know the third parties to whom data is transferred, in Türkiye or abroad
- Have incomplete or inaccurate data corrected
- Request erasure or destruction
- Have corrections and erasures notified to the third parties the data was transferred to
- Object to a result against you produced solely by automated analysis
- Claim compensation if you suffer damage due to unlawful processing
Send your request to info@publicartcoffee.com or in writing to Türkmen Mah. Atatürk Blv. No: 48/A Kuşadası / AYDIN. We respond within 30 days at the latest.