GDPR Information

1. Data Controller

Within the scope of the General Data Protection Regulation (GDPR), your personal data is processed by QResto as the data controller.

2. Personal Data Processed

Personal data in the following categories is processed:

• Identity Information: Name, surname
• Contact Information: Email address, phone number
• Transaction Security Information: IP address, cookie information
• Financial Information: Billing address, payment history

3. Purposes of Processing Personal Data

• Providing and managing our services
• Fulfilling contractual obligations
• Customer relationship management
• Fulfilling legal obligations
• Conducting communication activities

4. Transfer of Personal Data

Your personal data may be transferred to:

• Authorized public institutions and organizations within the framework of legal obligations
• Payment service providers for payment transactions
• Our service providers (hosting, email, etc.)

5. Method and Legal Basis of Personal Data Collection

Your personal data is collected electronically through our website and mobile application. Legal bases:

• Establishment and performance of contract
• Fulfilling legal obligations
• Our legitimate interests
• Your explicit consent (when necessary)

6. Your Rights Under GDPR

You have the following rights:

• Right to know whether your personal data is being processed
• Right to request information about processing
• Right to know the purpose of processing and whether it is used in accordance with its purpose
• Right to know third parties to whom data is transferred
• Right to request correction if data is incomplete or incorrectly processed
• Right to request deletion or destruction
• Right to object to results arising from analysis of processed data exclusively through automated systems
• Right to claim compensation for damages caused by unlawful processing

7. Application Method

To exercise the rights mentioned above, you can apply in writing to info@qresto.store.