Privacy Policy

1. Data Controller

The data controller for personal data processing activities covered by this policy is Beşkaza.
Contact: destek@beskazada.com

2. Personal Data We Collect

Member Accounts

• Identity data: First name, last name, username
• Contact data: Email address, phone number
• Location data: Real-time location only when explicit permission is granted and only during use of the relevant feature (on-duty pharmacy, taxi stand, weather); not stored persistently
• Usage data: Viewed content, session duration, screen transitions, favourites list
• Device information: Device type, operating system, anonymous device ID, app version
• Notification data: Push notification device token and notification preferences

Business Accounts

• Business identity data: Trade name, category, address, phone number, website, social media links
• Representative data: Name and email address of the business contact
• Content data: Uploaded logo, photographs, descriptions and campaign information
• Interaction statistics: Profile view counts, phone/WhatsApp/directions clicks, favourites count

3. Purposes of Processing

• Creating, managing and authenticating member accounts
• Delivering and personalising application services
• Providing location-based services (pharmacy, taxi, weather)
• Sending push notifications and informational communications
• Managing business profiles and providing interaction statistics
• Analysing and improving content and service quality
• Security and fraud prevention
• Fulfilling legal obligations

4. Legal Basis for Processing

• Performance of a contract: Establishing and managing membership and business account relationships
• Explicit consent: Location access and marketing notifications
• Legitimate interest: Service security and analytics improvements
• Legal obligation: Records required by applicable law

5. Third-Party Services and Data Sharing

Your personal data is not sold to third parties and is not shared beyond the following cases:

• Technical infrastructure providers: Minimum necessary data for server and hosting services
• Push notification services: Apple APNs and Google FCM — only device token is transmitted
• Analytics services: Only anonymised and aggregated data
• Authorised public authorities: When required by law and only to the extent requested

6. Retention Periods

• Member identity and contact data: For the duration the account is active; 2 years after account closure
• Location data: Used in real time only; not stored persistently
• Usage and analytics data: 2 years
• Data subject to legal obligations: For the period required by applicable regulations

7. Data Security

Your personal data is protected through SSL/TLS encryption, access control mechanisms and regular security reviews. In the event of a data breach, we will comply with applicable legal notification obligations.

8. Your Rights

Under applicable data protection law, you have the right to access, correct, delete, restrict processing of, and object to processing of your personal data. To exercise your rights, contact us at destek@beskazada.com. For users in Turkey, a full list of rights under KVKK Article 11 is provided in the KVKK Disclosure Notice. Requests will be responded to within 30 days.

9. Updates to This Policy

This policy may be updated with prior notice. Significant changes will be announced via in-app notification. Continued use of the application after the notice period constitutes acceptance of the updated policy.

10. Contact

For questions about this policy: destek@beskazada.com