Personal Data Protection Notice.

1. Data Controller

This notice has been prepared in the capacity of data controller by Uluç Makina Gıda San. Tic. Ltd. Şti. ("the Company", "Uluc Maksan") pursuant to Law No. 6698 on the Protection of Personal Data ("KVKK").

2. Categories of Personal Data Processed

Our company processes the following categories of personal data:

2.1. Identity Information

Name, surname, date of birth (where required), national identity number (where contractually necessary).

2.2. Contact Information

E-mail address, telephone number, fax, postal address, company information and company address.

2.3. Customer Transaction Information

Requested product and service information, contents of quotation request forms, order information, invoice information, payment details.

2.4. Marketing Information

Newsletter registration information, campaign participation information, survey responses, website behaviour information.

2.5. Transaction Security Information

IP address, log records, website entry and exit information, cookie information, browser and device information.

2.6. Professional Experience Information (Career Applications Only)

CV information, education history, work experience, certificates, references, photograph.

3. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

• Evaluating and responding to your quotation requests
• Providing our products and services and conducting sales and after-sales support processes
• Customer relationship management and conducting customer satisfaction processes
• Fulfilling contractual and legal obligations
• Conducting communication activities (by e-mail, telephone and post)
• Conducting marketing and promotional activities (where consent has been obtained)
• Conducting human resources processes (career applications)
• Website security and performance analysis
• Legal reporting and audit activities
• Resolution of legal disputes

4. Legal Grounds

Your personal data is processed on the following legal grounds set out in Article 5 of the KVKK:

• Explicit consent (in cases such as marketing communication and newsletter registration)
• Establishment or performance of a contract (in order, quotation and sales processes)
• Fulfilment of a legal obligation (under tax, commercial and labour law)
• Establishment, exercise or protection of a right (legal disputes)
• Legitimate interest (website security, fraud prevention, improvement of business processes)

5. Transfer of Personal Data

Your personal data may be transferred to the following third parties in line with the purposes and legal grounds set out above:

• Authorised public institutions and organisations: For the fulfilment of legal obligations (Ministry of Customs and Trade, Ministry of Finance, etc.)
• Our business partners and suppliers: For the provision of logistics, freight, assembly and service
• Our service providers: Hosting (Cloudways, within EU borders), e-mail services, CRM and accounting software
• Our legal advisers and auditors: Legal consultancy and audit services
• Analytics services: Google Analytics, Microsoft Clarity (anonymous, subject to your explicit consent)

In the event of an international transfer, the necessary security measures are taken under Article 9 of the KVKK.

6. Retention Period of Personal Data

Your personal data is retained for the period required by the processing purposes or for the minimum periods prescribed by the relevant legislation:

At the end of these periods your personal data is anonymised or destroyed.

7. Rights of the Data Subject

Under Article 11 of the KVKK you have the following rights:

• To learn whether your personal data is being processed
• To request information if your personal data has been processed
• To learn the purpose of processing your personal data and whether it is used in accordance with that purpose
• To know the third parties to whom your personal data is transferred, domestically or abroad
• To request correction of your personal data if it has been processed incompletely or incorrectly
• To request deletion or destruction of your personal data within the conditions set out in Article 7 of the KVKK
• To request that the correction, deletion and destruction carried out be notified to third parties
• To object to a result to your detriment arising from the analysis of your processed data exclusively by automated systems
• To claim compensation if you suffer damage as a result of the unlawful processing of your personal data

8. Application Method

To exercise the rights above you may contact us by the following methods:

Your applications are answered in writing or electronically within 30 days at the latest. If responding to your application entails an additional cost, the fee tariff determined in the KVKK Communiqué is applied.