Personal Data Notice (KVKK)
Son güncelleme: 21.09.2026. Bu metin, sipariş ve iletişim süreçlerinde paylaştığınız kişisel verilerin hangi amaçlarla işlendiğini açıklamak için hazırlanmıştır.
1. Data controller
Your personal data is processed by Rabia Sofrası (Küçükçekmece, Istanbul), acting as data controller, within the scope described below.
2. Personal data processed
- Identity and contact data: name, surname, phone number and email address, if provided.
- Order data: the requested product, quantity, delivery area and date.
- Delivery data: the address you provide for local delivery or shipping.
- Transaction security data: technical records created when submitting a form on the site.
The site has no membership system, basket or online payment, so no credit card, banking or financial information is collected.
3. Purposes of processing
- Receiving, preparing and delivering your order
- Providing prices and availability at your request
- Contacting you about the order process
- Meeting legal obligations
4. Legal basis
Your data is processed on the grounds of establishing and performing a contract (KVKK Article 5/2-c), the controller’s legal obligations (Article 5/2-ç) and legitimate interests (Article 5/2-f). Processing outside these grounds requires your explicit consent.
5. Transfers
Personal data may be shared with shipping or logistics providers only as necessary for delivery, and with legally authorised public bodies. Otherwise it is not transferred to third parties, sold or used for marketing.
6. Retention period
Data is retained for the period required by its purpose and applicable statutory limitation periods, then deleted or anonymised.
7. Your rights
Under KVKK Article 11, you may ask whether your data is processed and request information about it; learn the purpose of processing and whether it is used accordingly; identify third parties receiving it in Türkiye or abroad; request correction of incomplete or inaccurate data, deletion or destruction, and notification of those actions to recipients; object to an adverse result from analysis solely by automated systems; and seek compensation for harm.
8. Requests
You can send requests about your rights through our business contact channels. Requests are resolved within 30 days at the latest.