Why do we
have your data?

Service provider

Yılmaz Cüneyt Karamollaoğlu (Nightlifeinkaş) provides this service. Address: Andifli Mahallesi, 13/1 Sokak No:14/4, Kaş / Antalya. Contact: lifeatkas@gmail.com. Tax ID (VKN): 5180335059.

Data controller

Yılmaz Cüneyt Karamollaoğlu (Nightlifeinkaş) · Andifli Mahallesi, 13/1 Sokak No:14/4, Kaş / Antalya · lifeatkas@gmail.com · VKN 5180335059

Data we process

Name, email, Instagram username (required, for a pre-acceptance safety check, based on public profiles), optional phone number, birth year (required, for 18+ verification), optional birth day/month (only for a just-for-fun zodiac display, never used in matching), gender (optional; to build a balanced and safe table), your relationship to Kaş, language preference, what you're looking for (goals), social energy level, interests, conversation style and topic preferences, an optional short intro note, smoking preference, and event/participation records are processed.

If you file an incident report, its content is processed; if you give feedback, your rating, willingness to reconnect, and Kaş&Go interaction answers are also processed. Gender information is used only for operations and is never shared with other participants.

In the optional post-event evaluation, you can leave a "would you sit with this person again" signal and an optional short note about people at your table. This may also include data entered about you by another participant. This information is never shown to the person it's about; it's used only for future table-forming and safety decisions.

Special category data (diet/allergy and accessibility needs): if you select "I have a food allergy" or "Wheelchair access", and, for allergies, describe what it is, this information may fall under KVKK's definition of special category data (health/disability-related). We process it only with your separate, explicit consent, solely to organize a safe meetup with the venue; it is never shared with other participants, is seen only by the operations team, and is deleted 30 days after the event ends. You can leave these fields blank or keep what you share to a minimum (e.g. just "shellfish" is enough, no diagnosis detail is needed).

Purpose and legal grounds

Data is processed to take applications, verify age (18+), propose a balanced and safe table, run the event, review safety reports, and measure participation and service performance.

Steps necessary to set up and run the service rely on the formation/performance of a contract; security, fraud prevention, and operational measurement rely on legitimate interest; records we're legally required to keep rely on legal obligation. Kaş&Go promotion and photo/video use rely on separate, optional choices (explicit consent). A phone number is requested only so we can reach you if something comes up on the day of the event.

Service providers and cross-border transfer

Participant profiles are never shared with other participants; the venue receives only the table and attendance information it needs for operations. Data is shared with the infrastructure providers below, only to the extent necessary to run the service:

Netlify, Inc. — Web barındırma ve sunucu fonksiyonları (Amerika Birleşik Devletleri).

Turso (ChiselStrike, Inc.) — Başvuru ve etkinlik veritabanı (libSQL) (Avrupa Birliği, İrlanda (AWS eu-west-1)).

Resend (Plus Five Five, Inc.) — İşlemsel e-posta gönderimi (kabul, mekân bildirimi) (Amerika Birleşik Devletleri).

Some of these providers host data outside Turkey (in the EU or the US). Cross-border transfer is not carried out without the safeguards required under current KVKK transfer rules (a standard contract/undertaking notified to the Board, or explicit consent). Assurance documents on the transfer are shared on request.

Retention and destruction

We keep your data for at most the following periods, depending on why it was processed:

Application profile (matching details such as interests, goals, social energy, conversation style, intro note): 12 months.

Basic participant identity (name, email, Instagram username, phone, birth year): 24 months.

Event and table records (which event and table you were part of): 36 months.

Check-in / attendance records (whether you showed up or not): 36 months.

Feedback and peer evaluation (event rating, return/reconnect answers, signals you left about people at your table): 24 months.

Safety / incident reports (safety incidents you reported or that were reported about you): 60 months.

Technical / operation logs (admin action log, rate-limit logs): 12 months.

Waitlist records (the email you left when no meetup was open): 24 months.

Deletion / anonymization records (the record of when and how a deletion or data-rights request was fulfilled): at least 36 months.

Payment and accounting records (collection and invoice records once payment infrastructure goes live): 10 years under applicable tax law.

Marketing consent records (your Kaş&Go promotion consent): until withdrawn, then 3 more years as evidence.

Diet/allergy and accessibility data is outside this table. It follows a separate, shorter rule (deleted 30 days after the event ends); see "Data we process" above.

Once the period ends, or the processing purpose and any legal retention reason no longer apply, data is deleted, destroyed, or anonymized.

Your rights and how to apply

You have the right to learn whether your data is processed, to request information, to request correction, deletion or destruction, to learn who it was transferred to, and to object to an outcome arising from unlawful processing.

Using your email address, you can submit access, correction, deletion, and Kaş&Go communication-preference requests from the My Data Rights screen. We may ask you to verify your identity where necessary.