e-berber

Data Protection Notice

Last updated: 5 August 2026

This notice is prepared by Osteam Software("eBerber"), acting as data controller under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), regarding the processing of personal data of people who use the eBerber platform (website and mobile app). For users based in the EU, this data processing is additionally governed by the GDPR — see our Privacy Policy for the GDPR-specific details.

1. Personal data we process

  • Identity and contact: full name, email address, phone number.
  • Booking data: selected business, service, staff member, appointment date/time, booking history and cancellations.
  • Payment data: deposit amount and payment status. Card details are never stored by eBerber; they are processed by a licensed payment provider.
  • Business data (for business owners): business name, address, location, service and staff details, subscription status.
  • Technical data: session logs, push notification device token, approximate location (only with permission, to show nearby businesses).

2. Purposes and legal bases

  • Creating, managing and communicating about bookings — performance of a contract.
  • Processing deposit and subscription payments — performance of a contract and legal obligation.
  • Account security and fraud prevention — legitimate interest.
  • Booking reminders (push/SMS) — performance of a contract; marketing messages are only sent with your explicit consent.

3. Sharing your data

Your booking details (name, phone, selected service and time) are shared only with the business you booked with. Data is shared, only to the extent required, with processors we rely on for hosting (Supabase), notification delivery (Expo) and payments (a licensed payment provider), all bound by data protection agreements. Servers are hosted within the European Union; any transfer outside the EU is carried out in line with KVKK Art. 9 and, where applicable, GDPR Chapter V.

4. Retention period

Account data is kept for as long as you have an account; booking and payment records are kept for the statutory retention periods under applicable law (e.g. up to 10 years under Turkish commercial and tax law). Data is deleted or anonymised once these periods expire.

5. Your rights (KVKK Art. 11)

You have the right to learn whether your personal data is processed, request correction or deletion, request that processing be restricted, and claim compensation if you suffer damage. To exercise these rights, contact: destek@e-berber.com. Requests are resolved free of charge within 30 days at the latest.

6. EU users

For users based in the EU, data processing is additionally subject to the General Data Protection Regulation (GDPR); see our Privacy Policy for details.