Data Protection Notice

Your personal data is processed by Davet Cepte as data controller, within the scope described below.

People requesting a quote

Name, phone number, e-mail address, event type, event date, estimated guest count, design preference and the free-text note you write in the form.

Customers

Contact and invoicing details, order content, payment record information, the date, time and venue of the event, and the images and texts you send for use in the invitation.

Invitation guests

Name (as declared by the guest), attendance status, party size, the note left by the guest and any photo or video content uploaded.

Site visitors

Technical preferences such as language and theme, together with server logs kept for security purposes by the hosting infrastructure (IP address, date and time, request details).

• Assessing quote requests and contacting you
• Concluding the contract, preparing the invitation design and performing the service
• Publishing the invitation, providing RSVP tracking and collecting memory content
• Invoicing, accounting and meeting obligations under tax legislation
• Managing requests, complaints and formal applications
• Ensuring the security of the service and preventing misuse and unlawful content
• Using records as evidence in legal disputes and meeting statutory retention obligations

Your personal data is processed on the following legal grounds set out in Article 5 of the Law:

Your personal data is collected by wholly or partly automated means through the enquiry form on the site, messages you send by e-mail, phone, messaging apps and our social media accounts, and through the RSVP form and memory upload area on the invitation page.

Your personal data is never sold, rented or shared with third parties for marketing purposes. Transfers are made only to deliver the service and meet legal obligations, in accordance with Articles 8 and 9 of the Law:

• Hosting and infrastructure providers on which the site and invitation pages are published
• E-mail, messaging and file storage providers
• Accounting and financial advisory providers
• Authorised public institutions and judicial authorities, on request
• Legal advisers — only in the event of a dispute

The servers of the infrastructure services used may be located abroad. In such cases, transfers abroad are carried out in accordance with the conditions set out in Article 9 of the Law (adequacy decision, standard contract or other appropriate safeguards).

Data whose retention period has expired is deleted, destroyed or anonymised in accordance with the Regulation on the Deletion, Destruction or Anonymisation of Personal Data.

• The site and invitation pages are served over an encrypted connection (HTTPS).
• Access to data is limited to the people needed to deliver the service.
• Agreements containing confidentiality and security undertakings are made with our providers acting as data processors.
• In the event of a data breach, notification is made to the data subjects and to the Turkish Personal Data Protection Board as soon as possible, in accordance with Article 12 of the Law.

If you responded to an invitation as a guest or uploaded a memory, the data controller for that data is the person or organisation who commissioned the invitation. Davet Cepte is only a data processor, processing that data on the invitation owner's instructions.

If you want your data deleted, you can apply directly to the invitation owner; you may also send your request to us. We will then forward your request to the relevant invitation owner and carry out the technically required deletion without delay.

Under Article 11 of the Law you have the following rights:

• To learn whether your personal data is being processed
• To request information if it has been processed
• To learn the purpose of processing and whether the data is used in line with that purpose
• To know the third parties to whom the data is transferred, in Türkiye or abroad
• To request correction of incomplete or inaccurate data
• To request deletion or destruction under the conditions in Article 7 of the Law
• To request that correction, deletion and destruction be notified to third parties to whom the data was transferred
• To object to an adverse outcome arising from analysis carried out exclusively by automated systems
• To claim compensation for damage suffered due to unlawful processing

This notice may be updated in line with changes in legislation or in the scope of the service. The current text applies from the moment it is published on this page and the date at the top of the page changes accordingly.