KVKK Privacy
Notice

QrMenum® is a QR menu management platform operated under the trade name Goreel Works. As data controller under Law No. 6698 on the Protection of Personal Data ("KVKK"), we process the personal data described in this notice.

• Trade name: Goreel Works
• Brand: QrMenum (registered trademark)
• Tax office / no.: Yomra VD · 8400355878
• Address: Sancak Mah. 1609 Nolu Sk. 11/H, Yomra / Trabzon
• Phone: +90 505 900 91 82
• Corporate email: info@goreel.com.tr — legal notices, invoices, corporate correspondence
• Customer contact: info@qrmenum.app — support, sales, general questions
• WhatsApp: +90 505 900 91 82
• Web: qrmenum.app

In the course of the service we provide, we process personal data in the following categories:

• Identity and contact data: first name, surname, phone number, email address.
• Business data: business trade name, address, tax details (for invoicing).
• Account security data: password hash, session token, IP address, user agent.
• Payment data: payments are taken via Iyzico; card details are not stored on our systems, and only the transaction reference is kept.
• Menu content: the products, images and text you upload (presumed not to contain personal data; if they do, control rests with you).
• Usage data: scan count, session length, device type and language, collected anonymously from menu visitors — this is not personally identifiable data.
• Takeaway order data (only if the business has switched on the Takeaway module): the name, phone number, delivery address, order note and order contents the guest types into the order form. This data is processed to pass the order to the business and to show it in the order list of the business panel. The business receiving the order is the data controller; QrMenum acts as a data processor on its behalf. Order payment is made on delivery or at pickup, directly to the business; QrMenum takes no card details from guests.
• Aura AI Menu Assistant messages (only if the business has switched on this add-on): the messages a guest writes to get menu recommendations. No identity or contact details are requested.

Your personal data is processed for the following purposes, on the basis of the legal grounds set out in Article 5(2) of the KVKK:

Your data is collected electronically through the contact form on our website, the purchase steps, use of the panel, WhatsApp/email correspondence and our server logs. No data is collected by physical means.

Your data is shared only with the following business partners, which are essential to providing the service:

• Iyzico (payment service provider) — card and invoicing data, to collect payments.
• Our hosting provider — the servers are located in Türkiye.
• Our AI image service provider (AI Visual Assistant — only if you use this add-on) — the image you upload is processed; the provider does not retain the data for training purposes.
• Our AI content service provider (AI Assistant Add-on and Aura AI Menu Assistant — only if you use these add-ons) — the content request or guest message is processed; the provider does not use the data for model training.
• The business receiving the order — takeaway order data, to prepare and deliver the order (only if the Takeaway module is on).
• WhatsApp infrastructure — if you use the WhatsApp Menu Assistant or WhatsApp order notifications, messages are delivered through WhatsApp.
• Public authorities — where required by law.

We do not share personal data with third parties engaged in marketing, with advertising networks or with third parties that sell data.

Your personal data is kept for the duration of the service relationship and for the retention periods required by the relevant legislation (e.g. 10 years for invoice and accounting records under tax legislation). Following the termination of your account, data other than records that must be kept under statutory retention obligations is securely deleted or anonymised.

Under Article 11 of the KVKK, you have the following rights:

1. To learn whether your personal data is processed;
2. If it has been processed, to request information about it;
3. To learn the purpose of the processing and whether the data is used in line with that purpose;
4. To know the recipients of the data in Türkiye or abroad;
5. To request rectification if the data is incomplete or inaccurately processed;
6. To request its erasure or destruction under the conditions set out in the KVKK;
7. To request that third parties to whom the data has been transferred be notified of the rectification/erasure;
8. To object to an outcome to your detriment arising from automated processing;
9. To claim compensation for damage suffered as a result of unlawful processing.

You may submit your applications under the KVKK, preferably through the following channels:

• Corporate email (recommended): info@goreel.com.tr
• Customer contact: info@qrmenum.app
• WhatsApp: +90 505 900 91 82
• Contact form: qrmenum.app/en/contact

Applications are answered within 30 days at the latest in accordance with Article 13 of the KVKK. The verification steps necessary to establish the applicant’s identity are carried out; this is done in a way that confirms you are the account holder.