Privacy and Personal Data Notice

Section 01

Scope and responsible party

theboni.com is the public website for Boni, Boni Daily, Boni Coffee&Coctail, and Le Bonita.

The data controller for this website is EMA RESTORAN KAFETERYA GIDA TURİZM DIŞ TİCARET LİMİTED ŞİRKETİ. Its contact channel is [email protected], and its business and application address is Yeşilköy Mahallesi, Yeşilyalı Sokak No: 6/A, 34149 Bakırköy/İstanbul, Türkiye.

Section 02

Technical data created during a visit

The web server and hosting security layer may process the request time, IP address, requested page, browser or device information, and technical error records to protect and keep the service available.

This website has no account, membership, payment system, advertising profile, or visitor analytics. Technical records are not used to build marketing profiles.

Section 03

The franchise form stays on your device

Fields on the franchise page are not submitted to a Boni server or stored in a database. The form creates an email draft that you can review in your browser.

If you open and send that draft in your email application, its contents travel through your chosen email provider to [email protected]. Remove unnecessary or sensitive information before sending.

Section 04

Google Maps and external services

Google Maps content on venue pages does not load until you use the “Load Google map” button. After activation, Google may process or transfer your IP address, browser, and device information outside Türkiye.

Instagram, WhatsApp, reservation, directions, and other outbound links lead to independent services governed by their own privacy terms.

Section 05

Purposes, methods, and legal grounds

Technical data may be collected automatically to secure the website, resolve errors, prevent misuse, and keep the service available. Where applicable, processing relies on legal obligations and legitimate interests under Article 5(2) of Law No. 6698.

Map data reaches a third party only after your explicit loading action. Draft contents leave your device only if you send them through your selected email service.

Section 06

Transfers and retention boundaries

Hosting and security providers may process technical records, and records may be disclosed to competent authorities where the law requires it. Google Maps and email providers are engaged only when you use those features.

Provider agreements and the technical retention schedule may require different periods, so this notice does not state one fixed retention term. Data is kept only as long as needed for the relevant purpose and legal obligation.

Section 07

Your rights under Article 11

For personal data concerning you, Law No. 6698 gives you the right to:

• Learn whether your personal data is processed and request information if it is.
• Learn the purpose of processing and whether data is used accordingly.
• Learn the third parties receiving data in Türkiye or abroad.
• Request correction of incomplete or inaccurate personal data.
• Request erasure or destruction when the statutory conditions are met.
• Request notification of correction, erasure, or destruction to recipients.
• Object to an adverse result produced solely by automated analysis.
• Claim compensation for damage caused by unlawful processing.

Section 08

Requests and official sources

Send privacy requests to [email protected] with only the information needed to understand and verify your request. Do not email identity numbers or payment details.