References

www.uzumcu.com.tr PROTECTION AND PROCESSING OF PERSONAL DATA

1. DEFINITIONS

In this privacy notice:

Personal Data: Any information relating to an identified or identifiable natural person,

Personal Data Protection Law (PDPL): Law No. 6698 on the Protection of Personal Data, published in the Official Gazette on April 7, 2016, and entered into force on the same date,

Data Processor: A natural or legal person who processes personal data on behalf of the Data Controller based on the authority granted by the Data Controller,

Data Controller: A natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system.

www.uzumcu.com.tr., in accordance with the Personal Data Protection Law No. 6698 (PDPL), as the Data Controller, informs you about the collection methods and legal grounds of your personal data, our methods and policy for protecting your personal data, and examples of processed personal data, within the scope of our obligation to provide information under the PDPL. We would like to inform you about the methods and legal grounds for collecting your personal data, our methods and policies for protecting your personal data, examples of processed personal data, the identity of the data controller, the purposes for processing personal data, the transfer of your personal data to third parties and/or abroad, and your rights under the PDPL.

2. IDENTITY OF THE DATA CONTROLLER

In accordance with the Personal Data Protection Law, the Data Controller is XX, registered with the Commercial Registry under registration number 00000, Mersis number 0000000000000000, and located at the company headquarters address www.uzumcu.com.tr.

3. PURPOSES OF PROCESSING YOUR PERSONAL DATA

Your Personal Data is processed in accordance with the Personal Data Protection Law Article 5.2 and Article 6.3 of the PDPL, to fulfill our legal obligations, to establish or perform a contract, to fulfill our legal obligations, to establish, exercise or protect a right, and to protect our legitimate interests without harming your fundamental rights and freedoms, and may be processed without your explicit consent for personal data that you have made public. Your personal data will be processed based on your explicit consent within the scope of Articles 5.1 and 6.2 of the Personal Data Protection Law for the purposes specified in our Privacy Policy on our website. Furthermore, your Personal Data will be processed based on your explicit consent for the planning and execution of activities necessary to customize and recommend products and services to you according to your preferences, usage habits, and needs.

4. TRANSFER OF YOUR PERSONAL DATA TO THIRD PARTIES AND/OR ABROAD

Your Personal Data may be transferred to third parties and/or abroad without your explicit consent if the purposes specified in Articles 5.2 and 6.3 of the Personal Data Protection Law (PDPL) are present, or for the purposes stated in the Information Text, in accordance with Articles 5.1 and 6.3 of the PDPL. Article 5.1 and Article 6.3 of the PDPL, to third parties located in Turkey and abroad in areas such as storage, archiving, information technology support (server, hosting, program, cloud computing), security, call center, sales, and marketing, with which we cooperate and/or receive services, group companies, GSM operators, business partners, supplier companies, banks, financial institutions, consulting firms providing support in areas such as law, taxation, etc., third parties providing support in sales, marketing, and other areas related to the activities of www.uzumcu.com.tr (advertising companies for the purpose of sending emails and creating campaigns, companies providing CRM support, and similar), and institutions and organizations.

5. YOUR RIGHTS AS A DATA SUBJECT UNDER ARTICLE 11 OF THE LAW

As a data subject, we hereby inform you that you have the following rights under Article 11 of the Law:

1. To learn whether your personal data has been processed,
2. To request information regarding the processing of your personal data,
3. To know the third parties to whom your personal data has been transferred within or outside the country,
4. To learn the purpose of the processing of your personal data and whether it is being used for its intended purpose,
5. To request the correction of your personal data if it has been processed incompletely or incorrectly, and to request that the third parties to whom your personal data has been transferred be notified of this action.
6. Even if processed in accordance with the Law and other relevant legal provisions, to request the deletion or destruction of personal data when the reasons for processing no longer exist, and to request that this action be communicated to third parties to whom your personal data has been transferred,
7. To object to a result that is detrimental to you arising from the analysis of processed data exclusively by means of automated systems.
8. To request compensation for damages incurred due to the unlawful processing of your personal data.
9. You can submit your requests regarding the above rights to our company by filling out the Contact Form available on our website. Your requests will be processed free of charge as soon as possible and within thirty days at the latest, depending on the nature of your request; however, if the process incurs additional costs, you may be charged a fee according to the rates determined by the Personal Data Protection Board.