PRIVACY & DATA PROTECTION POLICY (GDPR, BDSG, TDDDG & KVKK)

Last Updated: 26.09.2026

Protecting your personal data is a top priority for Hayat Grup Reklam A.Ş.. This Policy sets out how personal data is processed across the Linke platform ("Platform") in compliance with the EU General Data Protection Regulation (GDPR - Regulation (EU) 2016/679), the German Federal Data Protection Act (BDSG), the German Telecommunications-Telemedia Data Protection Act (TDDDG - § 25), and Turkish Data Protection Law No. 6698 (KVKK).

1. DATA CONTROLLER

The Data Controller responsible for data processing on this platform is:

• Company: Hayat Grup Reklam A.Ş.
• Address: Gülbahar Mah. Otello Kamil Sk. No:3/1 34394 Şişli / İstanbul, Türkiye
• Authorised representative: Engin Kara
• Commercial register: 314943-5
• MERSIS no: 0858092035900001
• Tax office / Tax / VAT number: Zincirlikuyu - 8580920359
• Phone: +90 532 220 86 62
• E-mail: info@hayatgrup.com.tr
• Registered e-mail (KEP): hayatgrup@hs01.kep.tr
• Website: hayatgrup.com.tr

2. CATEGORIES OF DATA & PURPOSES OF PROCESSING

• Identity & Contact Data: Full name, email address, phone number, company title, billing address.
• Account & Subscription Data: User credentials, plan details, payment logs and invoices.
• QR & Visitor Data: Configured QR profiles, menus, check-in logs, and visitor counts.
• Technical & Log Data: IP address, device details, browser type, timestamps and scan logs.

3. LEGAL BASES FOR PROCESSING

• Contract Performance (Art. 6(1)(b) GDPR / Art. 5 KVKK): To deliver services, maintain user accounts, and execute orders.
• Consent (Art. 6(1)(a) GDPR / Art. 5-6 KVKK / § 25(1) TDDDG): For optional features, marketing communications, and non-essential cookies.
• Legal Obligations (Art. 6(1)(c) GDPR / § 26 BDSG): To satisfy legal, accounting and tax requirements.
• Legitimate Interests (Art. 6(1)(f) GDPR): To ensure system stability, prevent fraud and secure infrastructure.

4. TERMINAL EQUIPMENT & COOKIES (§ 25 TDDDG)

Under § 25 TDDDG, accessing or storing information on your terminal equipment requires your informed consent, except where strictly necessary to provide the service.

5. DATA SUBJECT RIGHTS

Under GDPR (Art. 15-22), BDSG (§§ 34-37) and KVKK (Art. 11), you have the right to access, rectify, delete, restrict processing, receive a portable copy of your data, object to processing, withdraw consent at any time, and lodge a complaint with a supervisory authority.