This text is under legal review; marked fields will be filled with the company details. This is a translation; the Turkish version prevails.
This notice explains, under Article 10 of Turkey's Personal Data Protection Law No. 6698 (“KVKK”), how your personal data is processed when you use Rabs (rabs.com.tr, the Rabs mobile and web app and the Rabs business panel).
1. Who are we?
Rabs is operated by ŞİRKET UNVANI. Address: ADRES. Email: ekip@rabs.com.tr.
If the operator of Rabs changes (for example, a transfer to a company set up to run Rabs), your data passes to the new operator for the same purposes and with the safeguards in this notice. We announce such a change on this page and in the app in advance.
Rabs is an intermediary service that keeps the booking calendar of barbers, hair salons and beauty businesses and lets customers book with them. The business provides the service and is paid at the business; Rabs takes no money.
Who is responsible for what?
- A business's customer records (its bookings, notes and payment records): that business is the data controller. Rabs processes this data on the business's behalf and on its instructions (data processor).
- Rabs's own records: Rabs is the data controller. These are the discovery listings, site and app visits, security logs and “Rabs'a yaz” messages.
2. Which data do we process, and why?
Customers who book
| Data | Why | Legal basis (KVKK Art. 5) |
|---|---|---|
| Name and phone number | To create the booking and let the business reach you | Formation and performance of a contract (Art. 5/2-c) |
| Booking details: business, service, stylist, date, time, price, where the booking was made | To carry out the booking and prevent clashes in the calendar | Performance of a contract (Art. 5/2-c) |
| Booking status: attended, no-show, cancelled | For the business to manage its calendar and customer history | Legitimate interest of the business (Art. 5/2-f) |
| IP address and a short device label during an action (e.g. “iPhone · Safari”) | To prevent misuse and to prove who carried out an action and from where | Legal obligation and legitimate interest (Art. 5/2-ç, f) |
The “no-show” status and any note the business keeps about you stay with that business only; they are not shared with other businesses and are not used as a “blacklist”.
Your booking is remembered on this device without an account: the booking number and cancellation key are stored only on your phone or in your browser. The key itself is not kept on the server, only a verifiable digest of it.
Everyone who uses the app and the site
- Location: used on your device only if you choose “use my location”, to sort nearby businesses. It is not sent to our server.
- Preferences: display, favourites and your chosen area are stored on your device.
- “Rabs'a yaz” messages: the message you write, the topic you pick and a short device label. Only the Rabs team reads them, to improve the product (legitimate interest, Art. 5/2-f).
- Customer messages do not ask for your name or number.
- If you write personal information into the message, we process that too.
- We do not use advertising, analytics or tracking tools.
Business owners and staff
- Name, sign-in phone, your role (owner or staff), the actions you take in the panel, sign-in records, IP address and device label. Why: the security of your account, performance of the contract, evidence in a dispute.
- Business details: name, address, services, prices, opening hours. Shown to everyone on the business page.
- Booking and revenue figures: seen by the Rabs team under the business agreement, to run the service and for billing.
3. Who do we share it with?
- The business you book with: your name, number and booking details. This is needed for the booking to happen.
- Our hosting provider SUNUCU FİRMASI: data is kept in a data centre in Turkey, over encrypted connections and with encrypted backups.
- Authorities: only where the law requires it.
We don't sell your data, use it for advertising or give it to other businesses.
Abroad: we do not transfer your personal data abroad. If you open the map, map images load directly to your device from OpenStreetMap's servers; your IP address reaches those servers in the process.
4. How long do we keep it?
| Record | Period |
|---|---|
| Name and phone on a booking | Anonymised 2 years after the booking date; numbers and statistics remain |
| Security and activity logs (IP, device, action) | 2 years |
| “Rabs'a yaz” messages | 2 years |
| Business account | At the latest 30 days after a closure request; records with a legal retention duty are anonymised |
5. What are my rights?
Under KVKK Article 11 you have the right to:
- Learn whether we process your data and request information about it.
- Learn the purpose of processing and whether it is used accordingly.
- Know who it has been transferred to.
- Ask for it to be corrected if it is incomplete or wrong.
- Ask for it to be deleted or anonymised when the conditions are met, and for those to whom it was transferred to be notified.
- Object to an outcome against you arising from automated analysis.
- Claim compensation if you suffer damage.
How to apply:
- Write to ekip@rabs.com.tr.
- Write to “Rabs'a yaz” in Profile in the app. Add the phone number you booked with so we can identify you.
- If you are a business user, use Settings → “Hesabımı sil” (delete my account) in the panel.
We answer your request free of charge within 30 days at the latest. Requests concerning a business's customer records are also passed on to that business.
Last updated: TARİH