Privacy Policy and KVKK Disclosure Text

Your personal data is processed within the scope described below by MD Creative (the "Data Controller"), which operates the MutfakOS platform. Contact: info@mutfakos.com

• Identity & Contact: full name, e-mail, phone, business/title.
• Account & Usage: user role, session/device information, activity logs.
• Transaction Security: IP address, browser (User-Agent) information, access timestamps.
• Supply/Invoice: supplier contact details, tax identification number (VKN), tax office, official title (only for supplier accounts, for invoice matching purposes).

• Creating membership, authentication and provision of the service,
• Evaluating supply requests and communication between parties,
• Ensuring platform security and preventing misuse,
• Fulfilling legal obligations (tax, retention of commercial documents),
• Product/campaign notifications, provided that your explicit consent exists.

Your data is processed on the legal grounds of the establishment/performance of the contract (Art. 5/2-c), legal obligation (Art. 5/2-ç), legitimate interest (Art. 5/2-f — security and prevention of fraud) and, where necessary, your explicit consent (Art. 5/1 — marketing/commercial electronic messages).

Your data may be shared, to the extent required by the service, with our suppliers such as infrastructure/hosting and e-mail providers and with legally authorized authorities. Your supply requests are shared with the relevant supplier to whom you sent the request.

Transfer abroad (KVKK Art. 9): Only if your business explicitly enables this feature (disabled by default), the text in invoice/dispatch note images may be transferred to the OpenAI (USA) service for AI-assisted reading. While the feature is off, none of your data is sent abroad; the relevant consent can be withdrawn at any time from account settings.

• Account data: for the duration of membership and, after its termination, for the legal limitation period,
• Web (account-free) request data: 6 months from the conclusion of the request,
• Transaction security logs (IP/UA): at most the period prescribed by the relevant legislation,
• Tax/invoice data: in accordance with the relevant tax legislation.

You have the right to learn whether your personal data is being processed, to request information, to request its correction or deletion, to object to its processing and to request compensation for damages.

You may submit your requests to info@mutfakos.com or in writing/via registered e-mail (KEP). Your request will be concluded within at most 30 days in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller.

The platform uses mandatory cookies (HttpOnly session cookie) to maintain the session; no separate consent is required for these. A Microsoft Clarity cookie is used for analytics purposes; this cookie is loaded only after your explicit consent on your first visit and you may withdraw your consent at any time.