Data Protection Notice
Under Turkish Personal Data Protection Law No. 6698, this notice explains which of your data we process on the Public Art website, why, and what your rights are.
Last updated:
Data controller
Your personal data is processed by PUBLİC CAFE TURİZM VE TİCARET LİMİTED ŞİRKETİ ("Public Art"), acting as data controller, within the scope described below.
- Registered name: PUBLİC CAFE TURİZM VE TİCARET LİMİTED ŞİRKETİ
- Address: Türkmen Mah. Atatürk Blv. No: 48/A Kuşadası / AYDIN
- Tax office and number: Kuşadası — 7331361329
- Email: info@publicartcoffee.com
- Phone: +90 539 334 94 75
What data we process
We only process data you enter yourself. Unless you fill in a form, no data identifying you is collected.
| Where | What data | Why |
|---|---|---|
| Account (sign-up and sign-in) | Full name, email address, password | To create your account and sign you in |
| Newsletter | Email address | To send you news and offers |
| Franchise application | Full name, email, phone, city, your message | To assess your application and contact you |
| Contact form | Full name, email, your message | To answer your question |
We never see your password; it is stored irreversibly hashed by the account infrastructure.
Legal basis
- Account and sign-in: necessary for entering into and performing a contract (Art. 5/2-c).
- Franchise application and contact form: establishment of a right and legitimate interest (Art. 5/2-e and 5/2-f).
- Newsletter and marketing email: YOUR EXPLICIT CONSENT (Art. 5/1). You may withdraw it at any time.
- Statutory retention duties: compliance with a legal obligation (Art. 5/2-ç).
Marketing consent is separate from membership. The sign-up form keeps these as two separate checkboxes; you can create an account without consenting to marketing.
Who we share it with
Your data is not sold and is not transferred to third parties for their own marketing. It is processed only by the following service providers, on our behalf and under our instructions:
- Vercel Inc. — Website hosting
- Supabase Inc. — Database and account infrastructure
- Resend (Plus Five Five, Inc.) — Sending notification emails
International transfer: the providers above operate servers outside Türkiye, so your data is transferred abroad within the meaning of Art. 9 of the Law. The consent you give at sign-up covers this transfer.
How long we keep it
- Account data: as long as your account exists. Deleted when you delete your account.
- Newsletter: as long as you stay subscribed. Removed when you unsubscribe.
- Franchise applications: at most 2 years after the process closes.
- Records with a statutory retention period: for as long as the relevant legislation requires.
Cookies
We only use cookies strictly necessary for the site to work: one that remembers your language and, if you are signed in, a session cookie. We do not use advertising or tracking cookies.
Videos are shown through YouTube. The player is not loaded until you press play, so no request is made to YouTube and no cookie is set unless you choose to watch.
If analytics (e.g. Google Analytics) is added later, this notice will be updated and cookie consent will be requested.
Your rights
Under Art. 11 of the Law you may ask us to:
- Learn whether your data is processed and, if so, request information about it
- Learn the purpose of processing and whether it is used accordingly
- Know the third parties to whom data is transferred, in Türkiye or abroad
- Have incomplete or inaccurate data corrected
- Request erasure or destruction
- Have corrections and erasures notified to the third parties the data was transferred to
- Object to a result against you produced solely by automated analysis
- Claim compensation if you suffer damage due to unlawful processing
Send your request to info@publicartcoffee.com or in writing to Türkmen Mah. Atatürk Blv. No: 48/A Kuşadası / AYDIN. We respond within 30 days at the latest.