Privacy Notice

01Data controller

The data controller is BEWS Coffee. Our address and contact details are below.

02Personal data we process and why

• Visiting the site: your IP address, browser and device information, the requested page and request time are processed by our hosting infrastructure to deliver and secure the site.
• Your preferences: your cookie and media choices are stored only in your own browser and are not sent to us.
• Usage statistics (with consent): page views, clicks on menu, directions, contact and Instagram links, and device, browser and approximate location information are measured with Google Analytics to understand and improve how the site is used.
• Instagram media (with consent): when post images and videos load from Meta’s servers, your IP address and browser information are sent to Meta.
• Contacting us: when you reach us by phone, WhatsApp or email, your name, contact details and message are processed to respond to your request. WhatsApp messages are also processed on WhatsApp’s infrastructure.
• Requests: to resolve a request under KVKK, the identity and contact details in your request are processed.

03Collection method and legal grounds

Your personal data is collected electronically through the site, browser storage, cookies and our contact channels, and processed on the following legal grounds:

• Usage statistics and Instagram media: your explicit consent (KVKK art. 5/1). You can withdraw it at any time from cookie preferences.
• Delivering and securing the site and remembering your preferences: our legitimate interest, provided it does not harm your fundamental rights and freedoms (art. 5/2-f).
• Contact requests: our legitimate interest (art. 5/2-f), or art. 5/2-c where your request is directly related to entering into or performing a contract.
• Requests under KVKK: compliance with our legal obligation (art. 5/2-ç).

04Transfers of personal data

Your personal data is transferred only for the following purposes and to the extent necessary for them:

• Cloudflare, Inc.: hosting, delivering and securing the site.
• Google: measuring usage statistics when you consent (Google Analytics).
• Meta: loading Instagram media when you consent; providing the messaging service when you write to us on WhatsApp.
• Competent public authorities: when requested under our legal obligations.

These providers may operate servers outside Türkiye, so your personal data may be transferred abroad.

05Retention

• Preference record: in your own browser until you delete it or change your choice.
• Google Analytics cookies: up to 2 years in your browser; measurement data for the retention period configured in our Google Analytics property.
• Correspondence and requests: for as long as needed to resolve the request and for the limitation periods set by applicable law.

When the period ends, your personal data is deleted, destroyed or anonymised.

06Your rights under KVKK

Under article 11 of KVKK, you have the right to:

• learn whether your personal data is processed,
• request information about the processing,
• learn the purpose of processing and whether data is used accordingly,
• know the third parties in Türkiye or abroad to whom it is transferred,
• request correction of incomplete or inaccurate data,
• request deletion or destruction under the conditions in article 7 of KVKK,
• request that correction, deletion and destruction be notified to the third parties it was transferred to,
• object to an outcome against you arising exclusively from automated analysis,
• claim compensation for damage caused by unlawful processing.

07Making a request

You can send your request in writing to the address in the Data controller section, or by the other methods set out in the Communiqué on the Procedures and Principles of Application to the Data Controller, for example by email to our email address from an email address you have previously given us and that is registered in our records. Your request should include:

• your name, surname and, for written requests, your signature,
• your Turkish ID number if you are a Turkish citizen; otherwise your nationality and passport or ID number,
• your residential or business address for notifications,
• your email address, phone or fax number for notifications, if any,
• the subject of your request.

We resolve requests free of charge as soon as possible and within thirty days at the latest, depending on their nature. If the action requires an additional cost, the fee set by the Personal Data Protection Board may be charged. If your request is rejected, you find our answer insufficient or we do not answer in time, you may complain to the Board within thirty days of learning our answer, and in any case within sixty days of your request.