CUSTOMER PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA

Dear Customers;

This privacy notice has been prepared by UR Work Yazılım Ticaret Limited Şirketi, acting as the data controller, within the framework of Article 10 of the Law on the Protection of Personal Data No. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform, in order to inform you, our customers who are natural persons, and the authorized representatives and employees of our customers who are legal entities, about the purposes for which your personal data is processed, the legal grounds, the methods of collection, to whom it may be transferred, and your rights under the KVKK.

Your personal data listed above;

• So that we can offer you our products and services,
• So that we can carry out communication activities with you,
• So that we can carry out after-sales support services for goods/services for you,
• So that we can carry out customer relations and satisfaction management processes and activities aimed at customer satisfaction,
• So that we can follow up your requests and/or complaints,
• So that we can carry out contract processes,
• So that our relevant business units can carry out the necessary work for the realization of the commercial activities conducted and carry out the related business processes,
• So that we can plan and implement commercial and/or business strategies,
• So that we can carry out finance and accounting work,
• So that we can carry out marketing analysis work for our products/services,
• So that, based on your explicit consent, we can carry out advertising, campaign, promotion and publicity processes related to our products/services and send commercial electronic messages,
• So that, where necessary, we can verify your identity information and documents; and carry out the necessary procedures to prevent abuse, loss and fraud,
• So that we can retain your information that must be kept under the relevant legislation; carry out copying and backup work to prevent loss of information; check the consistency of your information, and take the necessary technical and administrative measures for the security of your information,
• So that we can fulfil our legal obligations required or made mandatory by legal regulations towards regulatory and supervisory authorities, and carry out legal follow-ups and legal processes,

will be obtained, processed, recorded, stored, retained and classified for these purposes.

In order to be able to provide information to public prosecutors’ offices, courts and relevant public officials, upon request and as required by legislation, on matters concerning public security and in legal disputes that may arise; and, where necessary and within the purposes stated above, your personal data may be transferred to authorized public institutions and organizations, to the law firms we have agreements with for the follow-up of legal processes, to certified public accountants for the preparation of our company’s financial statements, to banks for the performance of goods/services contracts, to courier companies where necessary so that we can send documents and products, and to the companies from which we receive accounting support in order to carry out accounting work.

Your personal data stated above will be processed on the legal grounds regulated in Article 5 of Law No. 6698, namely i) that the processing of personal data belonging to the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract, and ii) that processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Within the scope of the purposes stated in this Privacy Notice and in accordance with the General Principles listed in Article 4 of the Law below;

• a) Being in compliance with the law and good faith,
• b) Provided that it is accurate and, where necessary, up to date,
• c) For specified, explicit and legitimate purposes,
• d) In connection with the purposes for which they are processed, in a limited and proportionate manner,
• e) To be retained for the period stipulated in the relevant legislation or necessary for the purpose for which they are processed, it will be processed, recorded, stored, retained, classified and, where necessary, transferred to the places stated above by automatic means or, provided that it is part of any data recording system, by non-automatic means (on paper, through forms, contracts).

Your personal data such as identity, contact, customer transaction, financial information, etc. may be processed, stored and, where necessary, shared through e-mail and cloud-based systems (Microsoft 365) used for the purposes of conducting and supervising business activities, managing customer relations, establishing and performing contract processes, conducting goods and services purchase-sale processes, carrying out finance and accounting transactions, fulfilling legal obligations, following up requests and complaints, and ensuring information security processes. Since the servers used are located abroad, it is transferred abroad. Your personal data is transferred in line with our legitimate interest, by concluding a standard contract and by taking measures regarding the security of your data.

We may transfer your personal data abroad by taking appropriate technical and administrative measures. Accordingly; your personal data such as identity, contact, customer transaction, financial information, etc. is transferred, on the legal grounds set out in Article 5 of the KVKK, (i) that the processing of personal data belonging to the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract, and (ii) that processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, to the e-mail and cloud-based company Microsoft 365 by concluding a standard contract.

Article 20 of the Constitution states that everyone has the right to be informed about personal data concerning them. Article 11 of the KVKK lists the rights of the data subject under the law.

You may submit your requests regarding your rights under the KVKK, in accordance with Article 5 of the “Communiqué on the Procedures and Principles of Application to the Data Controller”, to UR Work Yazılım Ticaret Limited Şirketi in writing or by using a registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the e-mail address previously notified by the data subject to the data controller and registered in the data controller’s system.

Data Controller: UR Work Yazılım Ticaret Limited Şirketi
Address: Esentepe, Keskin Kalem Sok. No:17, 34394 Arya Plaza Şişli, İstanbul
Mail: info@ur-work.com