PERSONAL DATA PROTECTION NOTICE
1. Data Controller and Data Processor
Data Controller: The Customer (user) using the Platform
Data Processor: UR Work Yazilim ve Ticaret Ltd. Sti. (acts as Data Processor only in accordance with the User's instructions and within the scope of the Main Agreement) Address: Esentepe Mah. Keskin Kalem Sok. Arya Plaza No:17/2 Sisli, Istanbul 34394 Email: info@ur-work.com
2. Purposes of Processing Personal Data
Users' personal data is processed for the following purposes:
- •Platform access and user account creation
- •Execution of shift, leave and employee management processes
- •Management of billing, subscription and payment transactions
- •Provision of support and maintenance services
- •Fulfillment of legal obligations
3. Categories of Personal Data Processed
- •Identity information: Name, surname, national ID number (if entered by the User)
- •Contact information: Email, phone number, address
- •Work and personnel information: Number of employees, department information, leave information
- •Payment and financial information: Invoice information, bank details
- •Vehicle and usage data within the fleet module
- •Limited to records related to Platform usage
4. Processing Methods and Legal Grounds
Data is processed and stored electronically (web, mobile application, servers). Processing is based on legal grounds:
- •Explicit consent of the User (Article 5 KVKK)
- •Performance of the contract
- •Fulfillment of obligations stipulated by law
Data Security Measures
Personal data is protected by technical and administrative measures against unauthorized access. In this context, access authorization, encryption, logging, backup and security monitoring systems are used. However, due to the nature of internet and electronic systems, complete elimination of potential risks cannot be guaranteed.
5. Transfer of Personal Data
Data may be shared with domestic and international third-party service providers when necessary. In particular, AWS or similar cloud service providers may be used.
6. Rights and Obligations of the Data Subject
Data subjects, pursuant to Article 11 of KVKK:
- •Learn whether their personal data is being processed
- •Request information if processed
- •Learn the purpose of processing and third parties to whom data is transferred
- •Request correction of incorrect or incomplete data
- •Request deletion or destruction if data processing is contrary to KVKK
- •Object to analysis of processed data exclusively through automated systems
The accuracy, currency and legality of personal data entered into the Platform is the responsibility of the Data Controller. The Data Processor is not obligated to audit the content of data entered into the system by the User.
Last Updated: December 31, 2024