Personal data protection notice (KVKK)

This notice has been prepared by Diette as data controller under Law No. 6698 on the Protection of Personal Data ("KVKK") of the Republic of Türkiye, which applies to our processing of personal data in connection with the Diette platform.

1. Data controller

The data controller that processes your personal data in connection with the Diette platform is Diette Software Technologies. You can find contact details at the bottom of this page.

2. Categories of personal data

Dietitian users

• •Name, surname, and professional title
• •Email address and phone number
• •Dietetics license or certification information
• •Billing and payment information
• •Platform usage and activity data

Client (end user) data

• •Name, surname, and contact details
• •Date of birth and gender
• •Health and nutrition data (entered by the dietitian)
• •Body measurements and weight tracking information
• •Photo uploads (optional)

3. Purposes of processing

• •Providing the service and account administration
• •Billing and payment processing
• •Customer support and technical assistance
• •Compliance with legal obligations
• •Improving service quality (using anonymized analytics where applicable)
• •Security and fraud prevention

4. Legal basis for processing

Under Article 5 of the KVKK, your personal data is processed on the following legal bases:

• •Processing is necessary for the performance or conclusion of a contract
• •Compliance with a legal obligation
• •Our legitimate interests (with attention to data minimization)
• •Your explicit consent for special categories of data where required

5. Transfers of data

Your personal data may be transferred to cloud infrastructure providers (hosting), email and notification service providers, and payment processors as necessary to provide the service. Such transfers are carried out in accordance with Articles 8 and 9 of the KVKK.

6. Retention periods

We retain your personal data for the duration of the service relationship and thereafter as required by law. If you cancel your subscription, data is generally deleted within 90 days, except where records must be kept longer under applicable law.

7. Data security

We protect your data using technical and organizational measures such as SSL/TLS encryption, secure data centers, and access controls. In the event of a personal data breach, notifications will be made as required by Article 12 of the KVKK to the Turkish Personal Data Protection Authority and to affected individuals where applicable.

8. Your rights under the KVKK

Under Article 11 of the KVKK, you have the following rights:

• •To learn whether your personal data is being processed
• •To request information if it has been processed
• •To learn the third parties to whom data has been transferred domestically or abroad
• •To request correction if data is incomplete or inaccurate
• •To request erasure or destruction of data if processing conditions no longer apply
• •To object and to request compensation for damages

You may exercise these rights through the contact channels below. We will respond to your request within 30 days as required under the KVKK.

9. Cookies

The platform uses cookies for session management, security, and anonymized usage analysis. You can manage cookie preferences in your browser settings. You can also read more about cookies in our Privacy Policy.