GDPR Privacy Policy

Personal Data Protection and Processing Policy

The protection of personal data is a constitutional right and is included within the priorities of our company. In fact, with this purpose in mind, a continuously updated system is aimed to be established within our company.

For What Purpose Do We Process Your Personal Data?

The personal data collected may be processed by our relevant departments for the purposes listed below, within the scope of the personal data processing conditions specified in Articles 5 and 6 of Law No. 6698:

In order to carry out the commercial activities conducted by the Company, necessary works are carried out by our relevant business units and related business processes are executed, including the establishment and management of information technology infrastructure, planning and/or execution of activities to ensure business continuity, planning and execution of corporate communication activities, event management, planning and execution of corporate sustainability activities,
Ensuring the legal, technical, and commercial security of the Company and the individuals in business relationship with the Company, ensuring the accuracy and currency of data, planning and execution of company audit activities,
Planning and execution of necessary operational activities for the conduct of company activities in compliance with company procedures and/or relevant legislation, ensuring the security of company campuses and/or facilities,
In order to benefit the relevant individuals from the products and services offered by the Company, necessary works are carried out by our business units and related business processes are executed, including planning and execution of customer relationship management processes, planning and execution of product and/or service sales processes, tracking of customer requests and/or complaints,
Planning and execution of activities necessary for the customization, recommendation, and promotion of products and services offered by the Company according to the preferences, usage habits, and needs of the relevant individuals, including planning and execution of product and/or service marketing processes, planning and/or execution of customer satisfaction activities,
Planning and execution of the Company’s human resources policies and processes.

To Whom and for What Purpose Do We Transfer Processed Personal Data?

Your collected personal data may be transferred, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of Law No. 6698, to our business/solution partners, group companies, suppliers, relevant judicial authorities for the execution or follow-up of judicial processes, competent public institutions and organizations authorized by law, and to private individuals or organizations, as well as third parties, limited to the fulfillment of these purposes and to Group Companies.

How Do We Process Personal Data and Based on Which Legal Grounds?

Your personal data is processed within the scope of the personal data processing conditions specified in Articles 5 and 6 of the Law, as explicitly prescribed in the laws, for the establishment, exercise, or protection of a right; for the fulfillment of the legal obligations of the company; for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject; and based on the necessity of processing personal data for the establishment or performance of a contract, via various communication channels such as contracts, camera recordings, printed forms, mail, email, fax, notifications from administrative and judicial authorities, and other communication channels, where personal data is learned orally, electronically, or in writing directly from our customers/suppliers/business partners.

These personal data collected based on legal grounds can be processed and transferred within the framework of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698, as stated in clauses (b) and (c) of this Privacy Notice, and in compliance with all relevant legislation.

What Are Your Rights Regarding Your Personal Data?

As individuals whose personal data is processed by our company, if you submit your requests regarding your rights to us, our company will conclude the request within the shortest possible time and no later than thirty days free of charge, depending on the nature of the request. However, if the transaction requires an additional cost, a fee will be charged according to the tariff determined by the Personal Data Protection Board. In this regard, as individuals concerned, you have the following rights:

To learn whether your personal data is being processed,
If your personal data has been processed, to request information regarding this,
To learn the purpose of processing personal data and whether they are being used in accordance with their purpose,
To know the third parties to whom personal data is transferred domestically or abroad,
If personal data is incomplete or incorrectly processed, to request their correction and to request notification of the correction made to third parties to whom personal data has been transferred,
To request the deletion or destruction of personal data in accordance with the Law No. 6698 and other relevant laws, despite being processed in accordance with the relevant laws, provided that the reasons requiring its processing cease to exist and to request notification of this to third parties to whom personal data has been transferred,
To object to the occurrence of a result against the individual as a result of the analysis of the processed data exclusively through automated systems,
To demand compensation for damages in case of suffering damages due to the unlawful processing of personal data.
In accordance with Article 13(f.1) of the Law, you can submit your request regarding the exercise of the above-mentioned rights to Ustası Burada, in writing or through other methods determined by the Personal Data Protection Board. In this context, in your applications to Ustası Burada within the scope of Article 11 of the Law, the channels and methods to submit your written application are explained below:

You can submit your request, including your explanations regarding the right you want to exercise, together with your identification documents, by completing the Personal Data Owner Application Form under the Law No. 6698 on the Protection of Personal Data in full;

You can deliver a signed copy of it in person to the address “100. Yıl Mah. Reşit Galip Cad, Hatır Sk. No:11/5, 06105 Çankaya/Ankara”,
You can send it to our address above by notary or registered mail,
You can send it securely with an electronic signature via your Registered Electronic Mail (KEP) account to the KEP address of the company you want to apply to, as listed in the attachment.
Our company will conclude the request within the shortest possible time and no later than thirty (30) days depending on the nature of the request. Applications must be made in Turkish. In applications, it is mandatory to include the name, surname, and if the application is in writing, the signature, the Republic of Turkey ID number for Turkish citizens, nationality for foreigners, passport number/ID number, place of residence or business address for notification, if any, the electronic mail address for notification, telephone or fax number, and the subject of the request.

In the application containing the explanations regarding the rights to be exercised by the data subject and the explanations regarding the right requested to be exercised; it must be clear and comprehensible, be related to the person, or if acting on behalf of someone else, it must be specifically authorized and documented, include identity and address information, and be accompanied by identity documents to prove identity.