KVKK - Data Processing Policy
This Privacy Notice has been prepared in accordance with Article 10 of the Law No. 6698 on the Protection of Personal Data ("KVKK") and the Communiqué on the Principles and Procedures to be Followed in Fulfilling the Obligation to Inform, in order to inform visitors to our websites, users of Uzmo applications, our customers, customer representatives, and potential customers.
1. Data Controller
Your personal data is processed by Uzmo Teknoloji Sanayi Limited Şirketi ("UZMO") in its capacity as the Data Controller.
- Address: Ataköy 7-8-9-10. Kısım Mah. Çobançeşme E-5 Yan Yol Cad. Ataköy Towers A Blok No:20/1 İç Kapı No:109 Bakırköy / İstanbul
- MERSİS No: 0901057731800001
- Email: info@uzmoteknoloji.com
- Phone: 0 (850) 309 27 58
Regarding the data uploaded by our users to Uzmo applications about their own customers, suppliers, or employees, the relevant user acts as the Data Controller; UZMO processes this data solely as a Data Processor pursuant to the instructions of the user. Requests regarding such data should be directed to the relevant user.
2. Processed Data, Purposes, and Legal Grounds
| Data Category | Processing Purpose | Legal Ground (KVKK) |
| Identity and Contact: Full name, title, TR ID/Tax ID number, email, phone number, address | Membership and account creation; establishment and performance of contract; service delivery; information and support | Art. 5/2-c (Establishment and performance of contract) |
| Customer Transaction and Finance: Order, package, invoice, payment and return records, IBAN (for refunds), requests and complaints | Sales, invoicing, collection, and refund processes; finance and accounting operations; retention of distance contract records | Art. 5/2-c; Art. 5/2-ç (Legal obligation under Laws No. 213, 6102, 6502, 6563) |
| Consulting and Transaction Service Documents: Identity document details, signature, residence, partnership/authorization details, power of attorney | Execution of company formation, trademark registration, e-transformation applications, and similar operations on behalf of the customer | Art. 5/2-c; Art. 5/2-ç |
| Transaction Security: IP address, session and access logs, device and browser details | Ensuring information security; preventing unauthorized access and misuse; mandatory logging under legislation | Art. 5/2-ç (Law No. 5651); Art. 5/2-f (Legitimate interest) |
| Support Records: Call center audio recordings, live chat and email correspondence | Provision of support services; complaint management; service quality measurement; proof in legal disputes | Art. 5/2-c; Art. 5/2-e (Establishment, exercise, or protection of rights); Art. 5/2-f |
| Contact and Demo Forms: Full name, email, phone number, company name, message content | Responding to requests; presenting proposals and demos | Art. 5/2-c (Pre-contractual measures); Art. 5/2-f |
| Visual Records: Optional uploaded profile photo | Personalization of account | Art. 5/2-c |
| Marketing: Communication consents, campaign interactions, data collected via non-essential cookies | Sending promotional communications, campaigns, and newsletters; analytics and targeted advertising | Art. 5/1 (Explicit consent; also consent under Law No. 6563 for commercial messages) |
Our services generally do not require special categories of personal data; we kindly request that you do not share such data with us. If special categories of data are contained within documents mandatory for processing, such data is processed in accordance with Article 6 of the KVKK or redacted where possible.
UZMO does not make decisions producing legal effects about you solely through automated processing or analysis.
3. Method of Collection
Your personal data is collected via automated or semi-automated methods through forms on our websites and applications, account and order screens, cookies and similar technologies, email, phone/call center, live chat, face-to-face or online meetings, and physical/electronic documents submitted to us. Data regarding representatives of our corporate customers may also be transmitted by the respective company.
4. Transfer of Data
Your personal data may be transferred to the following recipient categories in accordance with Articles 8 and 9 of the KVKK, strictly limited to the purposes stated above:
- Suppliers: Hosting/cloud, email and SMS transmission, call center, support, and analytics service providers (acting as Data Processors for service delivery).
- E-Transformation Stakeholders: Private integrators and the Revenue Administration (GİB) (for providing e-document services).
- Banks and Payment Institutions: Execution of payment and refund transactions.
- Official Authorities: Trade Registry Offices, tax offices, Social Security Institution (SGK), TÜRKPATENT, notary publics, and similar institutions (for carrying out requested transactions).
- Commercial Electronic Message Management System (İYS): Recording commercial electronic message approvals.
- Financial Advisors, Auditors, and Legal Counsel: Fulfillment of legal and financial obligations, protection of rights.
- Authorized Public Institutions and Judicial Authorities: Information and document requests arising from legislation.
Emails, website data, and the Uzmo application are hosted on servers located in Turkey. Only providers used for the following specific services maintain servers abroad (United States and European Union), and relevant data is transferred accordingly:
| Service | Provider | Transferred Data | Basis |
| Document Storage, Sharing, and Backup | Google (Google Drive) | Documents shared with us within the scope of service, including identity, contact, and customer transaction data therein | KVKK Art. 9/4 – Standard Contract published by the Board |
| Site Analytics and Ad Measurement | Google, Meta | Transaction security and marketing data collected via cookies (only if cookie consent is given) | KVKK Art. 9/4 – Standard Contract; plus explicit cookie consent |
| Reference and Promotional Content | Meta (Instagram, Facebook), Google (YouTube), LinkedIn, TikTok | Videos, photos, audio, full name, and title authorized for publication via consent forms | KVKK Art. 5/1 and Art. 9/6-a – Explicit Consent |
| Customer Communication and Support (WhatsApp) | Meta (WhatsApp Business) | Phone number, profile name, and message content (including shared documents) in correspondence | KVKK Art. 5/2-c (Contract) and Art. 9 – Limited to communications initiated by you via WhatsApp |
Standard contracts are executed pursuant to Article 9 of the KVKK and the Regulation on the Procedures and Principles Regarding the Transfer of Personal Data Abroad, and are notified to the Personal Data Protection Authority. You may contact us using the methods in Article 6 to inquire about specific recipient providers.
5. Retention Period
Your personal data is retained for the period required by the processing purpose and statutory retention periods stipulated by legislation: 10 years following termination for contract and accounting records; 3 years for distance contract and commercial message consent records; statutory durations for access logs; and a maximum of 2 years for uncompleted requests and form records. Upon expiration of these periods, your data is deleted, destroyed, or anonymized in accordance with our Personal Data Retention and Disposal Policy.
6. Your Rights and Application
Pursuant to Article 11 of the KVKK, you have the right to:
- Learn whether your personal data is being processed,
- Request information if your personal data has been processed,
- Learn the purpose of processing and whether data is used in accordance with its purpose,
- Know the third parties to whom data is transferred domestically or abroad,
- Request rectification of incomplete or inaccurate data,
- Request deletion or destruction of data under statutory conditions,
- Request notification of rectification or deletion operations to third parties to whom data has been transferred,
- Object to adverse results arising solely from analysis via automated systems,
- Claim compensation for damages incurred due to unlawful processing.
For processing based on explicit consent, you may withdraw your consent at any time.
In accordance with the Communiqué on the Procedures and Principles for Application to the Data Controller, you may submit your application:
- In writing to our physical address provided above,
- Via KEP to uzmoteknoloji@hs01.kep.tr,
- Using secure electronic signature/mobile signature,
- From your registered email address in our system to info@uzmoteknoloji.com, or
- By using the Data Subject Application Form available on our website.
Applications will be concluded free of charge as soon as possible and within 30 days at the latest; if the operation incurs additional costs, a fee according to the tariff set by the Board may be charged. If your application is rejected, deemed insufficient, or not responded to in time, you may lodge a complaint with the Personal Data Protection Board.
For detailed information regarding cookies, please review our Cookie Policy, and for general principles, refer to our Personal Data Protection and Processing Policy.
Last Updated: October 7, 2026