Published by: GALA İLAÇ VE YAZILIM SANAYİ TİCARET ANONİM ŞİRKETİ Brand: FuudUp Last Updated: 10.09.2026
As GALA İLAÇ VE YAZILIM SANAYİ TİCARET ANONİM ŞİRKETİ ("FuudUp" or the "Company"), we attach importance to the privacy and protection of personal data.
This Personal Data Processing and Protection Policy ("Policy") has been prepared to explain the fundamental principles and rules relating to personal data processing activities carried out by FuudUp.
FuudUp aims to process and protect personal data in compliance with applicable personal data protection legislation, primarily the Personal Data Protection Law No. 6698 ("PDPL"), related secondary legislation, and decisions of the Personal Data Protection Board.
For questions regarding the processing of your personal data or requests within the scope of the PDPL, you may contact us at info@fuudup.com.
This Policy covers:
whose personal data is processed by FuudUp as data controller.
Separate privacy notices, explicit consent texts, or other disclosures may be provided to data subjects regarding different FuudUp services or data processing activities.
FuudUp is a digital platform focused on food, beverages, and gastronomy.
Individual users primarily discover restaurants, cafés, bars, and other food and beverage venues through the FuudUp mobile application; share posts, photos, videos, reviews, and ratings relating to these venues; interact with other users; and benefit from other social features offered by FuudUp.
Certain additional features may be offered to individual users under FuudUp Premium or another paid subscription determined by FuudUp. Individual user subscriptions may be carried out through Apple App Store, Google Play, or other supported app stores depending on the relevant purchase method.
Restaurants, cafés, bars, and other food and beverage businesses deemed suitable by FuudUp primarily carry out transactions relating to their businesses through the FuudUp website and web-based Business Panel.
Businesses may claim or manage their business profiles through the web-based Business Panel; and create or update business information, opening hours, contact details, photos, menus, products, prices, links, campaigns, and other business information.
Information entered or updated through the Business Panel may be reflected on the Business Profile shown to individual users in the FuudUp mobile application and other digital areas offered by FuudUp.
Businesses may purchase paid packages and subscriptions through the FuudUp website or web-based Business Panel.
FuudUp acts in compliance with the fundamental principles provided under the PDPL when processing personal data.
In this context, personal data shall be:
Personal data processed by FuudUp may vary depending on the data subject's relationship with FuudUp and the services used.
Content created or shared through the FuudUp mobile application, including:
may be processed.
If the User grants the necessary device permissions or provides location information:
may be processed.
If an individual User benefits from FuudUp Premium or another paid individual subscription service, the following information may be processed:
If the individual user subscription is carried out through Apple App Store, Google Play, or another app store, the payment transaction may be conducted by the relevant service provider.
FuudUp may process limited purchase and subscription information necessary to verify the subscription and provide the User access to relevant features.
For purchases carried out through app stores, full credit or bank card numbers, CVV/CVC security codes, and similar sensitive card information are not stored in FuudUp systems.
FuudUp is a food-and-beverage and gastronomy-focused platform.
Content shared by users may be reviewed to ensure compatibility with the Platform's purpose and community safety.
Within this scope, content that:
may be reviewed, visibility may be restricted, or such content may be removed.
During these processes, the content itself, linked account, time of transaction, complaint records, technical data, and other information necessary for moderation decisions may be processed.
Detailed rules regarding publication of content on the Platform may be set out in the FuudUp Community Guidelines.
FuudUp's services for businesses are primarily directed at restaurants, cafés, bars, and other eligible food and beverage businesses.
If a business applies for FuudUp business services, claims a Business Profile, uses the Business Panel, or purchases a paid package, information relating to the business and natural persons acting on behalf of the business may be processed.
Within this scope, the following may be processed:
FuudUp may request additional information or documents to verify the authenticity of the business, whether it operates in the food-and-beverage sector, whether the Business Profile belongs to the relevant business, and the authority of the person acting on behalf of the business.
Applications from businesses not suitable for FuudUp's field of activity may not be accepted.
A Business Member may manage business information to be displayed in the mobile application and other FuudUp digital areas through the web-based FuudUp Business Panel.
Within this scope, the business may provide:
Part of this information may be displayed publicly in the FuudUp mobile application, on the business profile, in QR menus, or on other FuudUp digital channels, as required by the nature of the service.
Transaction records relating to additions, edits, and other management actions in the Business Panel may be processed for security, service operation, prevention of unauthorized transactions, and resolution of disputes.
Business Members may purchase paid business packages offered by FuudUp through the FuudUp website or web-based Business Panel.
Within this scope, the following may be processed:
Business payments may be carried out through iyzico or other authorized payment institutions and banks with which FuudUp works.
Card information necessary to carry out the payment transaction may be processed by the relevant payment service provider through its own secure infrastructure.
Depending on the payment infrastructure used, FuudUp does not store full credit or bank card numbers, CVV/CVC security codes, or similar sensitive card information in its own systems.
FuudUp may process personal data for the following purposes, depending on the data subject and service used:
FuudUp processes personal data based on one or more legal grounds provided under the PDPL, depending on the nature of each processing activity.
Depending on the specific processing activity, these legal grounds may include:
Where processing must be based on explicit consent, the data subject's explicit consent is obtained.
Withdrawal of explicit consent does not affect personal data processing activities lawfully carried out before the date of withdrawal.
Personal data may be collected by FuudUp through electronic or physical methods.
Within this scope, data may be obtained particularly through:
FuudUp may use cookies, mobile SDKs, local storage, device or application identifiers, and similar technologies on its website, Business Panel, and mobile applications for:
More detailed information on these technologies is provided in the FuudUp Cookie Policy.
FuudUp may share personal data with third parties only where a legal processing and transfer condition exists and the transfer is necessary for the relevant purpose.
Depending on the service used, personal data may be shared to the necessary extent with:
FuudUp takes the data minimization principle into account in transfers of personal data and aims not to transfer personal data not necessary for performance of the relevant service.
Servers or service providers of certain app store, cloud infrastructure, analytics, subscription management, error monitoring, communication, or other technology services used by FuudUp may be located outside Turkey.
Therefore, transfer of certain personal data abroad may occur.
International transfer of personal data is carried out in compliance with Article 9 of the PDPL and related secondary legislation.
Depending on the nature of the specific transfer:
personal data transfer may be carried out.
Where international transfer must be based on explicit consent, the data subject's explicit consent is obtained in accordance with procedure.
FuudUp aims not to request special categories of personal data from users unless necessary within the ordinary operation of its services.
Where processing of special categories of personal data is necessary, such data is processed in compliance with processing conditions provided under the PDPL and with necessary technical and administrative measures.
Users are advised not to share unnecessary special categories of personal data relating to themselves or third parties in public posts or other User Content.
FuudUp retains personal data for the period required by the relevant processing purpose and in compliance with legal retention periods applicable under legislation.
If the processing purpose ceases to exist and there is no other legal ground requiring retention, data is:
in accordance with legislation.
Closing a FuudUp account or termination of a Premium subscription may not require deletion of all data relating to the user at the same time.
Similarly, termination of a Business Account or Business Subscription may not require immediate deletion of all business and transaction records.
In particular:
may be retained for the relevant legal periods.
If content created by a user relates to a business, closing the business's Business Account does not automatically result in deletion of such User Content.
FuudUp takes appropriate technical and administrative measures under the PDPL to:
Within this scope, depending on the nature of services and processed data, measures such as:
may be implemented.
Security measures may be reviewed and updated in line with technological developments and the nature of risks.
Users or businesses may be directed through FuudUp to third-party:
If the user begins using a third-party service outside FuudUp, the relevant third party may process personal data within its own data controller responsibilities and privacy policies.
Third-party data processing activities carried out outside FuudUp's control are subject to the relevant third party's own obligations.
FuudUp attaches special importance to the privacy and safety of young users.
Persons who do not meet the minimum age requirement determined within FuudUp services are not permitted to create accounts.
Where personal data of young users is processed, additional security and privacy measures may be applied in accordance with applicable legislation and FuudUp's Young User Safety Policy.
FuudUp may limit certain social or communication features by age to protect the safety of young users.
FuudUp may process personal data relating not only to Platform users but also to other data subjects such as employees, job applicants, business partners, suppliers, officials, representatives, and visitors during conduct of its activities.
Data relating to these persons may be processed for:
based on relevant legal processing conditions.
Where necessary, separate privacy notices are provided to these groups.
Under Article 11 of the PDPL, data subjects have the right, within the conditions provided by law, to:
Requests within the scope of the PDPL may be submitted to FuudUp using one of the methods provided under applicable legislation and the Communiqué on the Procedures and Principles of Application to the Data Controller.
Applications may be made:
FuudUp may request necessary information and documents to verify that the application belongs to the data subject and to conclude the request correctly.
Applications are evaluated within the periods provided under the PDPL and applicable legislation.
For questions and applications regarding the processing of personal data or your rights under the PDPL, you may contact FuudUp.
FuudUp may update this Policy in connection with changes in legislation, decisions of the Personal Data Protection Board, Company activities, the FuudUp mobile application, website, Business Panel, or technologies used.
The current version of the Policy is published by FuudUp through the website or other appropriate digital channels.
If material changes are made, data subjects may be informed through appropriate methods to the extent required by applicable legislation.
Last Updated: 10.09.2026