Company Policies

The Company processes the personal data mentioned below for the purposes stated in the Personal Data Processing Policy shared at www.uzunyaylagroup.com, www.uzunyaylatugla.com, www.vitalia.com.tr, www.uzunyaylaboru.com, limited to improving, developing, and providing services offered to the User on the Website; informing and communicating with Users who submit requests and complaints; providing better and personalized service to Users; marketing communications with User consent when shared in relevant sections of the Website; addressing Website security vulnerabilities quickly, improving User experience, fixing Website errors, making sense of User data, planning and implementing marketing policies; planning and implementing human resources policies; conducting reporting and business development activities, creating databases; ensuring corporate policy operations. In accordance with Article 5(2) and Article 6(3) of the Law, the Company may process personal data without seeking User's explicit consent when one of the required conditions exists.

The Company may share personal data with third parties it receives services from (such as call centers, law firms, service providers, hosting service providers) limited to the purposes stated in the Personal Data Processing Policy shared on www.uzunyaylagroup.com, www.uzunyaylatugla.com, www.vitalia.com.tr and www.uzunyaylaboru.com websites belonging to Uzunyayla Group companies. Limited to the purposes stated above, the User accepts and consents that their personal data may be stored by the Company on servers located anywhere belonging to third parties in accordance with the Law, that the Company has fulfilled its obligation to inform in this regard.

The Company may transfer personal data to third parties without seeking User's explicit consent when one of the conditions required under Article 5(2) and Article 6(3) of the Law exists and when necessary, ensuring compliance with Article 9(2) of the Law.

The Company may process the User's following personal data depending on their access to the Website and transactions they will perform:

– Identity Information,

– Site Activity Information,

– IP Information,

– User Information,

– Legal Transaction Information,

– Contact Information,

– Request/Complaint Management Information,

and personal data that may be necessary for the Company to operate the Website in accordance with the Personal Data Protection Law.

Cookies are information files consisting of small particles sent to users by servers. In this context, the Company stores certain information as text files on the User's computer, phone, etc. for a specified period and uses it again when necessary.

Personal data related to the transactions performed by the User while browsing the website can be processed by the Company for the purposes written below and shared with third parties for this purpose. In this context, the Company may track the User's browsing information and usage history on the Website; process information collected from the User and use it together with information obtained from other sources such as third parties in order to provide personalized service to the User through the website and improve service quality; make special promotions; improve page content according to the User; enhance User experience; offer promotion and marketing suggestions.

The User explicitly consents to the processing of data that they may share with the Company for the purposes specified within the scope specified in this Privacy Policy. The User can change their browser settings to not accept cookies or to be warned when they are sent.

Cookies are information files consisting of small particles sent to users by servers. In this context, the Company stores certain information as text files on the User's computer, phone, etc. for a specified period and uses it again when necessary.

Personal data related to the transactions performed by the User while browsing the website can be processed by the Company for the purposes written below and shared with third parties for this purpose. In this context, the Company may track the User's browsing information and usage history on the Website; process information collected from the User and use it together with information obtained from other sources such as third parties in order to provide personalized service to the User through the website and improve service quality; make special promotions; improve page content according to the User; enhance User experience; offer promotion and marketing suggestions.

The User explicitly consents to the processing of data that they may share with the Company for the purposes specified within the scope specified in this Privacy Policy. The User can change their browser settings to not accept cookies or to be warned when they are sent.

The Company informs the Data Subject of their rights pursuant to Article 10 of the Law; provides guidance on how to exercise these rights and implements the necessary internal processes, administrative and technical arrangements for all these.

Pursuant to Article 11 of the Law, the Company explains that persons whose personal data is collected have the right to:

• learn whether personal data is being processed,

• request information if personal data has been processed,

• learn the purpose of processing personal data and whether they are used in accordance with their purpose,

• know the third parties to whom personal data is transferred at home or abroad,

• request correction if personal data is processed incompletely or inaccurately,

• request deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law,

• request notification of the operations carried out pursuant to subparagraphs (d) and (e) of Article 11 of the Law to third parties to whom personal data has been transferred,

• object to the occurrence of a result against themselves by analyzing the processed data exclusively through automated systems,

• claim compensation for damages arising from unlawful processing of personal data.

The Data Subject may submit their requests regarding the implementation of the Law by filling out the Personal Data Protection Law Data Subject Application Form (Application Form) available on the Website and submitting it to the Company as specified in the Application Form. The Company concludes the requests in the application free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, a fee may be charged according to the tariff determined by the Board. The Company may respond to these requests in the ways specified in the Application Form.

In cases where the application is rejected, the response is found insufficient, or the application is not responded to within the time period; The Data Subject may file a complaint with the Board within thirty days from the date of learning the Company's response and in any case within sixty days from the date of application. The complaint procedure cannot be initiated without exhausting the application procedure explained above.

(i) If the purposes for processing personal data have been realized and/or ended or if the purpose of processing has disappeared; and (ii) If the storage periods specified by the relevant legislation and the Company have expired; personal data shall be deleted, destroyed or anonymized by the Company ex officio or upon request of the relevant person.

However, in cases where there is a legal regulation regarding the storage of personal data for longer periods or where the storage of personal data for longer periods may be put forward as evidence in a legal dispute; personal data shall be stored only until the said dispute ends or until the storage period stipulated in the legislation expires.

The Company collects personal data based on legal reasons in the Law and other relevant legislation; in physical environment, on the website, via e-mail, mobile application and other means verbally, in writing or electronically. The Company takes all necessary technical and administrative measures to ensure the security of the personal data it collects; acts in accordance with data privacy policies in order to prevent unlawful processing and access to data and ensure their protection.

Technical and administrative measures are taken to ensure that only authorized personnel can access personal data, and audits are conducted at regular intervals. The Company shows due diligence on matters related to data security and does not disclose or reveal information belonging to users to third parties unlawfully.

The Company provides links to other sites through its website and does not bear any responsibility for the privacy practices and contents of other sites to which links are provided.

The Company cannot be held responsible for the data security policies and practices of the redirected sites.

The Company may update and change the provisions of this Privacy Policy at any time it deems necessary, provided that it does not contradict the legislation in force, by publishing it on the Website.

Updates and changes made by the Company to the Privacy Policy become valid on the date they are published on the Website. The User is obliged to follow the changes and updates made to the Privacy Policy.