Data Protection Notice

WE CARE ABOUT THE SECURITY OF YOUR PERSONAL DATA!

The highest possible security measures are taken to ensure that your personal data is collected, stored and shared lawfully
and to protect your privacy.

We use cookies and similar methods on the Mobile Application and on the Site in order to carry out statistical work on how the site is used, to run targeted advertising and promotion
and to give you an effective customer experience.

INFORMATION ON THE PROTECTION OF PERSONAL DATA

The Turkish Personal Data Protection Law No. 6698 (“KVKK”) was adopted by the Grand National Assembly of Turkey on 24 March 2016
and entered into force upon its publication in the Official Gazette dated 07 April 2016.

We are deemed to be the Data Controller in respect of the personal data we obtain from you in the course of our activities.
As the Data Controller, your personal data may, within the scope described below,
be recorded, stored, updated and classified, and where the legislation permits
be disclosed and/or transferred to third parties and/or abroad,
and otherwise processed in the ways listed in the KVKK.

Purposes and legal grounds for the processing of personal data:

Personal data is processed
in order to draw up all records and documents, in electronic or paper form, that form the basis of processing; to comply with the record keeping, reporting
and disclosure obligations laid down by the legislation and by the competent authorities; to provide the products and services you request
and to perform the contract you have entered into in respect of the products or services you will receive.

In order to serve our customers better, ultimateuo.com asks you for certain personal data (name, age, interests, e-mail and so on).
This data, collected on the ultimateuo.com servers, is stored and used for periodic campaigns, for designing
promotions aimed at particular customer profiles, for the customer “segmentation” that keeps unwanted e-mail
from being sent, and for the continuation of advertising, promotion and marketing activities
built on that personal data.

Personal data is processed for the following purposes;

To verify the identity of the person who makes or arranges a purchase through the website,

To record the address and other details needed to contact you,

To contact our customers about the terms, current status and any updates
of the contracts we conclude under the distance sales agreement
and the relevant articles of the Turkish Consumer Protection Law,
and to provide them with the necessary information,

To draw up all records and documents, in electronic (internet, mobile and so on) or paper form, that form the basis of processing,

To perform the obligations undertaken under the contracts we conclude by virtue of the distance sales agreement
and the relevant articles of the Turkish Consumer Protection Law,

To provide information to public officials on matters of public security, upon request and as required by the legislation,

To give our customers a better shopping experience,
“taking our customers’ interests into account”, to tell them about products
they may be interested in and to pass on campaigns,

To increase customer satisfaction, to get to know the customers who shop on the website
and to use that in customer base analysis,
to use it in various marketing and advertising activities and, in that context, to run surveys
electronically and/or physically through the organisations we work with,

To allow the institutions and solution partners we work with to make recommendations to our customers, and to inform our customers about our services,

To assess customer complaints and suggestions about our services,

To fulfil our legal obligations and to exercise the rights arising from the legislation in force

So that you can benefit from the ultimateuo.com services, this personal data will be processed and stored on the basis of your explicit consent,
with information security measures in place, on condition that it is not used
beyond the purposes and scope set out in this Privacy / Personal Data Protection Policy
and in the Communication Consent.

The persons or organisations to which personal data may be transferred for the purposes set out above are: our principal shareholder,
our direct and/or indirect domestic or foreign affiliates; the organisations from which we procure services in order to carry out our activities,
with which we cooperate or which are our business partners, the partners you consent to under the Confidentiality Agreement
and other third parties. However, we would like you to know that, as required by the KVKK,
we take every measure to have your personal data protected with the greatest care
by these third parties with which we have no organic link, and that any such sharing is done under contracts with serious sanctions,
including written undertakings, concluded with every third party.

How personal data is collected: your personal data may be collected orally,
in writing or electronically, with explicit consent obtained,
through channels such as head office, business units, e-sales channels
or the call centre.

Your rights under Article 11 of the KVKK: by applying to ultimateuo.com, you have the right to
a) learn whether your personal data is processed, b) request information if it has been processed,
c) learn the purpose of the processing and whether the data is used in line with that purpose, d) know the third parties to which it has been transferred, in Turkey or abroad,
e) request that it be corrected if it has been processed incompletely or inaccurately, f) request that it be erased or destroyed within the conditions laid down in Article 7 of the KVKK,
g) request that the third parties to which it has been transferred be notified of the actions taken under paragraphs (e) and (f) above,
h) object to a result against you arising from analysis carried out solely by automated systems,
i) claim compensation if you suffer damage
because your personal data has been processed unlawfully.

Personal Data Retention Period

Even though it has been processed in accordance with Law No. 6698 and the other relevant provisions,
where the reasons requiring its processing cease to exist personal data is erased,
destroyed or anonymised by our company, either on its own initiative or at your request.
However, under Law No. 6563 on the Regulation of Electronic Commerce,
records showing that consent has been withdrawn are kept for 1 year from that date;
the content of commercial electronic messages and any other record relating to their dispatch are kept for 3 years
so that they can be submitted to the relevant Ministry if needed. Once that period has passed, your personal data is erased,
destroyed or anonymised by our company or at your request.

For requests of this kind you can reach us by e-mail at destek@ultimateuo.com.