Company Policies

The Company processes the personal data mentioned below for the following purposes: improving, developing, and providing services to Users on the Website; informing and communicating with Users who submit requests and complaints; providing better and personalized service to Users; marketing communications and contact with Users subject to their sharing and consent in relevant sections of the Website; quickly addressing Website security vulnerabilities, improving User experience, resolving Website errors, analyzing User data, planning and implementing marketing policies; planning and implementing human resources policies; conducting reporting and business development activities, creating databases; ensuring corporate policy operations, as limited to the purposes stated in the Personal Data Processing Policy shared at www.uzunyaylagroup.com, www.uzunyaylatugla.com, www.vitalia.com.tr, www.uzunyaylaboru.com. In accordance with Article 5(2) and Article 6(3) of the Law, personal data may be processed by the Company without seeking explicit consent from the User when one of the required conditions exists.

The Company may share personal data with third parties (such as call centers, law firms, service providers, hosting service providers) limited to the purposes stated in the Personal Data Processing Policy shared on www.uzunyaylagroup.com, www.uzunyaylatugla.com, www.vitalia.com.tr, www.uzunyaylaboru.com, which belong to Uzunyayla Group companies. Limited to the purposes stated above, the User acknowledges that personal data may be stored by the Company on servers located anywhere belonging to third parties in accordance with the Law, that the Company has fulfilled its obligation to inform in this regard, and consents to this.

In accordance with Article 5(2) and Article 6(3) of the Law, and when necessary ensuring compliance with Article 9(2) of the Law, the Company may transfer personal data to third parties without seeking explicit consent from the User.

Depending on the User's access to and transactions on the Website, the Company may process the User's:

– Identity Information,

– Site Activity Information,

– IP Information,

– User Information,

– Legal Transaction Information,

– Contact Information,

– Request/Complaint Management Information,

and personal data that may be necessary for the Company to operate the Website in accordance with the Personal Data Protection Law.

Cookies are information files consisting of small pieces sent to users by servers. In this context, the Company stores certain information on the User's computer, phone, etc., in the form of text files for a specified period and uses them again when necessary.

Personal data related to the User's website navigation may be processed by the Company for the purposes written below and shared with third parties for these purposes. In this context, the Company may track the User's browsing information and usage history on the Website to provide personalized service and increase service quality; make special promotions; improve page content according to the User; improve User experience; offer promotion and marketing suggestions; process information collected from the User and use it together with information obtained from other sources like third parties.

The User explicitly consents to the processing of data that they may share with the Company for the purposes specified in this Privacy Policy. The User can change their browser settings to reject cookies or to be notified when they are sent.

Cookies are information files consisting of small pieces sent to users by servers. In this context, the Company stores certain information on the User's computer, phone, etc., in the form of text files for a specified period and uses them again when necessary.

Personal data related to the User's website navigation may be processed by the Company for the purposes written below and shared with third parties for these purposes. In this context, the Company may track the User's browsing information and usage history on the Website to provide personalized service and increase service quality; make special promotions; improve page content according to the User; improve User experience; offer promotion and marketing suggestions; process information collected from the User and use it together with information obtained from other sources like third parties.

The User explicitly consents to the processing of data that they may share with the Company for the purposes specified in this Privacy Policy. The User can change their browser settings to reject cookies or to be notified when they are sent.

The Company informs the Data Subject of their rights pursuant to Article 10 of the Law; provides guidance on how to exercise these rights; and makes necessary internal, administrative, and technical arrangements for this purpose.

The Company explains to persons whose personal data is collected that they have the right to:

• learn whether their personal data is being processed,

• request information if their personal data has been processed,

• learn the purpose of processing their personal data and whether it is used in accordance with this purpose,

• know the third parties to whom their personal data is transferred domestically or abroad,

• request correction if their personal data is processed incompletely or inaccurately,

• request deletion or destruction of their personal data within the framework of conditions provided in Article 7 of the Law,

• request notification of operations carried out pursuant to subparagraphs (d) and (e) of Article 11 to third parties to whom their personal data has been transferred,

• object to the occurrence of a result against themselves by analyzing their processed data exclusively through automated systems,

• claim compensation if they suffer damage due to unlawful processing of their personal data.

The Data Subject can submit their requests regarding the implementation of the Law to the Company by filling out the Personal Data Protection Law Data Subject Application Form (Application Form) available on the Website and submitting it as specified in the Application Form. The Company concludes the requests in the application free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires additional cost, a fee may be charged according to the tariff determined by the Board. The Company may respond to such requests in the ways specified in the Application Form.

In cases where the application is rejected, the response is found insufficient, or the application is not responded to within the time limit; the Data Subject may file a complaint with the Board within thirty days from learning the Company's response and in any case within sixty days from the date of application. The complaint procedure cannot be initiated without exhausting the application procedure explained above.

(i) If the purposes for processing personal data have been fulfilled and/or expired, or the purpose of processing has disappeared; and (ii) The retention periods specified by relevant legislation and the Company have expired; personal data shall be deleted, destroyed, or anonymized by the Company ex officio or upon request of the relevant person.

However, in cases where there is a legal regulation requiring personal data to be stored for longer periods or personal data may be put forward as evidence in a legal dispute, personal data shall be stored only until such dispute is resolved or until the retention period prescribed by legislation expires.

The Company collects personal data based on legal grounds specified in the Law and other relevant legislation; through physical environment, website, email, mobile application, and other means verbally, in writing, or electronically. The Company takes all necessary technical and administrative measures to ensure the security of the personal data it collects; acts in accordance with data privacy policies to prevent unlawful processing and access to data and to ensure their preservation.

Only authorized personnel can access personal data, and regular audits are conducted. The Company shows due diligence regarding data security and does not disclose or reveal user information to third parties unlawfully.

The Company provides links to other sites through its website and bears no responsibility for the privacy practices and content of the linked sites.

The Company cannot be held responsible for the data security policies and practices of the redirected sites.

The Company may update and modify the provisions of this Privacy Policy at any time it deems necessary, provided that it does not conflict with applicable legislation, by publishing it on the Website.

Updates and changes made by the Company to the Privacy Policy become effective on the date they are published on the Website. The User is responsible for following the changes and updates made to the Privacy Policy.