Version 2026-09-19.2 ·
Privacy Policy
We distinguish restaurant account information from anonymous visitor counters. This policy describes the implemented service, not advertising profiling.
1. Visitors and anonymous statistics
Visitor information is collected in anonymized form to understand how our pages are used and to improve the service. These statistics provide a general view of visits and interactions without identifying individual visitors or creating personal browsing profiles.
2. Business accounts
Google sign-in supplies the account identifier, name, email and optional profile image. The service processes business/branch details, contact information, content, account actions and accepted policy versions. Tax or billing information is processed only when supplied for an applicable business or billing function. Account records are not linked to public menu-view counters.
3. Preferences, security and purposes
Language and theme preferences stay in browser localStorage and are not saved as account preferences in our database. The language of a viewed page contributes only to aggregate statistics. Essential session cookies authenticate business accounts. Security and operational records are used to operate and protect the service, not to link visitors to menu activity. Applicable traffic-record obligations under Law No. 5651 must be assessed separately for the operator's actual role and hosting; anonymous analytics is not a 5651 compliance system.
4. Recipients, transfers and retention
Hosting/database providers and Google authentication process data necessary for their functions; competent authorities may receive data when lawfully required. External maps and links apply their own policies. International transfers, where applicable, require assessment and an appropriate mechanism under KVKK Article 9. Account data is retained for service delivery and applicable legal/claim periods, then deleted or anonymized. Aggregated counters contain no visitor identifiers. Production providers, locations and exact retention schedules must be confirmed before launch.
5. Rights and protection
Access is restricted according to role and reasonable technical/organizational measures are used; no system is completely risk-free. Business accounts are not intended for children. For access, correction, deletion, objections or other applicable rights, contact the controller below. The separate KVKK Notice explains the Turkish-law application process. Changes are versioned and material account-related changes may be notified by email.
Controller and contact
Gustola is operated by Mert Eren KARA.
Data Controller: Mert Eren KARA
E-mail: [email protected]