Privacy Policy

Last updated: 16.07.2026

At FindAntalya we take your privacy seriously. This policy explains which personal data we collect through the FindAntalya website, mobile application and connected digital services, for which purposes and on which legal grounds we process those data, with whom we may share them, and what rights you have. The policy applies to everyone who interacts with us through the platform: visitors to the site, people who complete the contact form, business owners and applicants, reviewers, and anyone else who engages with us.

1. Data controller

Under the Turkish Personal Data Protection Law No. 6698 ("KVKK"), your personal data is processed by the following person acting as data controller.

Data controller: Serkan Dinç
Brand: FindAntalya
Website: findantalya.com
Data controller e-mail (KVKK requests): serkan@serkandinc.com
General contact: hello@findantalya.com
Address: [Full address — shared on request via serkan@serkandinc.com]

2. What does this policy cover?

This policy covers all digital services offered by FindAntalya: the Antalya business directory, search and category pages, map and location features, public transport and mobility information, blog and guide content, the review and rating system, business applications and profile claiming, the business owner panel, favourites, the contact form and the mobile application.

Which data is processed depends on the feature you use. If you simply browse the site, you are not asked for any identifying information.

3. Personal data we collect

We may process both the information you provide to us directly and the data generated automatically while you use the service. The list below sets out which data may be processed in which situation.

Identity and contact details: first name, surname, e-mail address, telephone number, message content (when you write to us through the contact form or by e-mail).
Business application and listing details: business name, category, address, telephone, e-mail, website and social media links, promotional text, photographs and logo, location, opening hours, campaign information.
Account and membership details: e-mail address, session information, profile information, business owner authorisation (only if you create an account).
Review and rating content: review text, rating, display name, review date and any photograph uploaded with the review.
Usage and technical data: IP address, browser and operating system information, device type, date and time of visit, pages viewed, referring page, error and performance logs.
Location data: processed only if you use a location-based feature such as the map, nearby businesses or transport, and grant permission on your device.
Support and correspondence records: the content of your request or complaint and the history of the correspondence.
Favourites: the businesses you save are kept in your device's local storage (findantalya_favorites); this data is not sent to our servers.

4. How do we collect personal data?

Website and mobile application forms (contact, business application, review)
Account creation and sign-in processes
Cookies and similar technologies (see the Cookie Policy for details)
Map and location services (where you have given permission)
E-mail correspondence
Server and application records (technical logs)

5. For which purposes do we process your personal data?

To provide and operate FindAntalya services and publish the directory
To assess business applications and verify profile claiming requests
To publish and moderate reviews and ratings
To enable account creation, sessions and business panel operations
To respond to contact form submissions and support requests
To operate map, location and transport features
To ensure the security of the platform and prevent fake registrations, misuse and automated traffic
To detect and resolve errors and performance issues
To improve the user experience and enhance our services
To measure advertising and campaign performance where you have given explicit consent
To fulfil obligations arising from legislation and to conduct legal proceedings

6. Legal grounds for processing

Your personal data is processed on the basis of the processing conditions listed in Article 5 of the KVKK.

Processing is directly related to the conclusion or performance of a contract (business panel, purchase of premium placement)
Processing is necessary for the data controller to fulfil a legal obligation
Processing is mandatory for the establishment, exercise or protection of a right
Processing is necessary for the legitimate interests of the data controller, provided that it does not harm your fundamental rights and freedoms (security, error detection, prevention of misuse)
Your explicit consent (non-essential cookies, processing for advertising and analytics purposes)

7. Sharing of personal data

We do not sell, rent out or commercially transfer your personal data. Your data may be shared with the following service providers only to the extent necessary to deliver the service. These are the services actually used by FindAntalya:

Vercel — hosting of the website and server infrastructure
Supabase — database, authentication and file storage
Cloudflare Turnstile — form security and bot protection
Google (Google Analytics) — measurement of site usage and performance (only with your explicit consent)
Google (Google Ads) — advertising and conversion measurement (only with your explicit consent)
Meta (Meta Pixel) — advertising and conversion measurement (only with your explicit consent)
OpenAI — AI-powered search and content features
iyzico — payment infrastructure (only for premium placement purchases)
OpenStreetMap, CARTO and Esri — map imagery
Unsplash — illustrative images
E-mail (SMTP) service provider — notification and correspondence e-mails
Competent public authorities and judicial bodies, where legally required

8. Transfer of data abroad

Some of the service providers listed above are established outside Türkiye. Your personal data may therefore be transferred abroad to the extent necessary for the relevant service to function.

Such transfers are carried out in accordance with the provisions of Law No. 6698 on the transfer of data abroad and with the necessary security measures in place. Transfers for advertising and analytics purposes take place only where your explicit consent exists; if you do not give permission, the relevant code is never executed and no data is sent to those providers.

9. Retention periods

Your personal data is retained for as long as the purpose of processing requires, taking the applicable statutory retention periods into account. In determining the period we consider the time needed to deliver the service, the status of your account, legal obligations, potential disputes and platform security.

In the FindAntalya mobile app, you can delete your account from the Profile screen by choosing "Delete account". This deletes your account session and account-linked profile, favourite and user records; records that must be retained for legal obligations, security, abuse prevention or dispute resolution may be kept only for the required period. If you want to request deletion of specific data without deleting your account, contact serkan@serkandinc.com.

Once the period expires, the data is deleted, destroyed or anonymised. Cookie retention periods are set out separately in the table in the Cookie Policy.

10. Cookies and similar technologies

FindAntalya uses cookies and similar technologies to operate the site, remember your preferences, ensure security and — where you have given permission — measure how the site is used (Google Analytics) and measure advertising (Google Ads, Meta).

No non-essential cookie or third-party code is executed unless you give explicit permission. Analytics and advertising are subject to separate consent: you may permit only one of them. The cookies used, their providers and their retention periods are listed in a table in the Cookie Policy.

11. Data security

We take appropriate technical and administrative measures to safeguard personal data.

All traffic is carried over an encrypted connection (HTTPS)
Row-level access control and authorisation at database level
Logging of administrative operations (audit trail)
Bot and abuse protection on forms and sign-in operations
Restricted access rights and secret keys kept on the server side
Software and dependencies kept up to date, with security advisories monitored
Data minimisation: no data is collected beyond what the purpose requires

12. Third-party links and services

FindAntalya may contain links to business websites, social media accounts, map services and other third-party services. FindAntalya is not responsible for the privacy practices of the services you reach through these links; we recommend that you review the policies of the relevant platforms.

13. Children's privacy

FindAntalya is a platform intended for a general audience; it has no purpose of collecting data specifically from children. If you become aware that a child's personal data has been processed without appropriate permission, please notify us at serkan@serkandinc.com and the necessary action will be taken.

14. Your rights as a data subject

Under Article 11 of the KVKK you may apply to the data controller to exercise the following rights:

Learn whether your personal data is being processed
Request information about the processing if your personal data has been processed
Learn the purpose of processing and whether the data is used in accordance with that purpose
Know the third parties, in Türkiye or abroad, to whom the data is transferred
Request rectification if the data has been processed incompletely or inaccurately
Request erasure or destruction of the data under the conditions set out in Article 7 of the Law
Request that rectification, erasure or destruction be notified to the third parties to whom the data has been transferred
Object to an outcome to your detriment arising from the analysis of the processed data solely by automated systems
Claim compensation for damage suffered as a result of unlawful processing

15. How can you exercise your rights?

You may send your requests to serkan@serkandinc.com. Your application should include your first name and surname, your contact details, the subject of your request and, where applicable, the relevant page, transaction or service.

Your application will be concluded as soon as possible and within thirty days at the latest, depending on the nature of the request. Additional information may be requested in order to verify your identity.

16. Changes to this policy

This policy may be updated in the event of changes in legislation, the launch of new services or changes to the technologies we use. The current version is always published on this page; for significant changes, separate notice may also be given through appropriate channels.

17. Contact

You can reach us with any questions about privacy and your personal data.