Alpay Servis

Delete your account and data

This page explains what personal data Alpay Servis holds in connection with table reservations, guest orders and the staff app, how to ask for it to be deleted, and the deadline we answer within.

Last updated: 2026-09-13

1. What this covers — and what "account" means here

Guests have no user account: a reservation or a table order is placed without registering, and only what you entered yourself is stored. Staff have no personal account either — what exists is an ENROLLED DEVICE (a tablet or phone) in the room, and what is deleted there is the device, not a person.

2. What is stored

Depending on how you reached us:

Reservation: name, telephone number, optional e-mail address, date, time, party size, your notes, the record of your consent, and a shortened, encrypted identifier of your internet connection used for spam control.
Staff app: the device identifier of the enrolled tablet, the seat it holds (host stand or service) and the timestamps of its sessions. No staff names.

3. Delete it yourself — no request needed

Guest: every confirmation e-mail carries a personal link to your reservation, and you can cancel it there yourself at any time. The record is then deleted automatically under the periods in section 5.

Staff app: "Sign out" in the app ends the device immediately and permanently; the session is revoked on the server in the same moment. The office can additionally remove any device from the device list.

4. Ask us to delete it — without the app and without signing in

You need neither the app nor an account. Send us a plain message with the subject "Personal data deletion request" by any of these routes:

E-mail to [email protected] — please write from the address you gave when booking, or quote your telephone number and the date of the reservation.
Telephone +90 232 435 25 25

We ask for those details only so that we can match your records safely. There is deliberately no form on this page: a deletion needs an identity check, and an open form would either delete on an unverified claim or collect fresh data from you in order to hold less of it.

5. What is deleted, what remains, and why

Everything that points back to you is removed: name, telephone number, e-mail address, your notes, the address the form was sent from, the encrypted connection identifier, and the personal links to your reservation. What is left cannot identify anyone — anonymous data under GDPR Recital 26, and no longer personal data at all.

What remains is the anonymous shell of the booking — date, time, party size, status — with nothing pointing at a person. It is needed for the venue's own occupancy history and for the commercial and tax retention obligations the business is subject to, and it can no longer identify anybody.

Retention periods this venue has set for itself:

Open, unresolved requests: 365 days
Completed reservations: 3650 days

Note: automatic deletion currently runs in reporting mode at this venue — the periods are measured and reported, and deletion happens on request. A deletion you ask for under section 4 is carried out regardless.

6. Deadline

We answer without undue delay and in any case within one month of receiving your request (GDPR Art. 12(3)). Where a request is complex the period may be extended by up to two further months, and we tell you so within the first month.

7. Your other rights

Besides erasure (Art. 17) you have the right of access (Art. 15), rectification (Art. 16), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). You may also complain to a data protection supervisory authority at any time (Art. 77 GDPR).

8. Controller

Alpay Servis
+90 232 435 25 25
[email protected]