1. Information We Collect

• 1.1. Uretia Teknoloji ve Tarim Hizmetleri Ltd. Şti. is the Data Controller.
• 1.2. Address: Turkey
• 1.3. Email: info@uretia.com
• 1.4. Tel: 0533 214 50 93
• 1.5. (Optional) Data Protection Officer: [Name - email]

2. Categories of Personal Data Processed

• 2.1. Identity data: name, surname, TCKN*, email, phone, address.
• 2.2. Account data: username, password, role, verification logs.
• 2.3. Security data: log, IP, browser/device info, access records.
• 2.4. Customer data: listings, purchases, messages, complaints.
• 2.5. Financial data: invoice, IBAN*, payment summaries.
• 2.6. Location data (only with consent).
• 2.7. Marketing data: cookies, campaign data, preferences.
• 2.8. (*) Only where necessary and limited in scope.

3. Data Collection Methods

• 3.1. Forms, account operations, and messaging on the Portal/mobile app.
• 3.2. Cookies, SDKs, and similar technologies.
• 3.3. Lawful partners, payment providers, logistics integrations.
• 3.4. Official authorities and court orders.

4. Purposes and Legal Bases

• 4.1. Contract performance: Membership, listings, billing, customer support.
• 4.2. Legal obligation: Log retention (5651), tax compliance, official requests.
• 4.3. Legitimate interest: Fraud prevention, security, analytics, reporting.m
• 4.4. Explicit consent: Marketing, geolocation, non-essential cookies.

5. Data Transfers and Recipients

• 5.1. Service providers: hosting, security, analytics, support.
• 5.2. Payment/financial: payment gateways, banks, e-invoice systems.
• 5.3. Logistics (if applicable): delivery coordination.
• 5.4. Legal authorities: courts, law enforcement, KVKK Authority.
• 5.5. Group companies and partners (as needed).
• 5.6. International transfer: via consent or under KVKK Article 9 (adequacy/standard clauses).

6. Data Retention Periods

• 6.1. Example Retention Table:

Data Type	Purpose	Legal Basis	Duration
5651 logs	Hosting provider obligation	Law	1 year
Contracts/invoices	Legal & financial	Law	10 years
Account data	Service delivery	Contract	Until closure
Marketing	Campaigns	Consent/interest	Up to 2 years
Complaints/disputes	Legal rights	Legitimate interest	Statute of limitations

7. Data Subject Rights (KVKK Art.11)

• 7.1. Learn if your data is processed.
• 7.2. Request correction or deletion.
• 7.3. Know the recipients of your data.
• 7.4. Object to unfavorable automated decisions.
• 7.5. Claim damages if misuse occurs.
• 7.6. Applications: info@uretia.com
• 7.7. Complaints: Turkish Data Protection Authority (KVKK).

8. Cookie Policy Summary

• 8.1. Mandatory cookies → no consent required.
• 8.2. Functional/performance cookies → legitimate interest or consent.
• 8.3. Advertising cookies → require consent.
• 8.4. Cookie preferences may be updated anytime.

9. Security Measures

• 9.1. Technical: TLS encryption, hashed passwords, access control, monitoring.
• 9.2. Administrative: confidentiality agreements, audit trails, deletion policy.
• 9.3. Breach notification: users and KVKK are notified promptly.

10. Children's Data

• 10.1. The Portal is not intended for users under 18; parental consent is required.
• 10.2. Accounts violating this rule will be deleted and data removed.

11. Commercial Communications

• 11.1. Email, SMS, and push notifications are sent only with user consent.
• 11.2. Users may opt out at any time via the Unsubscribe" link or profile settings.

12. Updates and Effective Date

• 12.1. This policy may be updated periodically.
• 12.2. The latest version becomes effective upon publication on the Portal.
• 12.3. Date of Publication: 14.11.2025