Information Notice under the Personal Data Protection Law (KVKK)
Last updated:
This information notice has been prepared under Law No. 6698 on the Protection of Personal Data (“KVKK”) to inform, in our capacity as data controller, the people who visit utera.co and contact us about how their personal data is processed.
1. Data controller
[UTERA legal entity name] (“UTERA”), [registered address]. Contact: info@utera.co
2. Personal data processed
- Identity and contact details: name, surname, e-mail address, telephone number and any other contact details you share with us.
- Content of communication: messages and requests you send us by e-mail, WhatsApp or social media.
- Transaction security data: IP address, date and time, and browser information recorded automatically in the hosting provider’s server logs when you visit the site.
- Site usage data: if you give your consent, pages visited, clicks and scrolling, device and browser information and approximate location, collected through Google Analytics and Hotjar.
Our site sets no cookies of its own; analytics cookies (Google Analytics, Hotjar) run only if you choose “Accept” in the cookie panel. See our Cookie Policy for details.
3. Purposes of processing
- To receive and answer your contact requests,
- To carry out meetings, proposals and contract processes relating to our services,
- To ensure information security and the proper functioning of the website,
- With your explicit consent, to measure and improve how the site is used,
- To fulfil obligations arising from legislation and respond to requests from competent authorities.
4. Legal grounds and method of collection
Your personal data is collected when you send it to us by e-mail, WhatsApp, LinkedIn or Instagram; transaction security data is collected automatically when you visit the site.
This data is processed on the legal grounds set out in Article 5(2) of the KVKK: being directly related to the establishment or performance of a contract (c), compliance with the data controller’s legal obligations (ç), and the data controller’s legitimate interests, provided that they do not harm the fundamental rights and freedoms of the data subject (f). Where explicit consent is required, your data is processed only with your explicit consent. Site usage data is processed on the basis of the explicit consent you give through the cookie panel (Article 5(1) of the KVKK), which you can withdraw at any time with “Cookie settings”.
5. Transfer of personal data
Limited to the purposes above, your personal data may be transferred to the suppliers from whom we obtain website hosting and e-mail services, and, upon request, to competent public authorities.
If you contact us through third-party platforms such as WhatsApp (Meta), LinkedIn and Instagram (Meta), these platforms may process your data under their own privacy policies and on servers located abroad. Transfers abroad are carried out in accordance with Article 9 of the KVKK.
If you give your consent, site usage data is transferred to the analytics providers Google (Google Analytics) and Hotjar, and may be processed on servers abroad.
6. Retention period
Your personal data is kept for as long as the purpose of processing requires and for the limitation and retention periods set out in the relevant legislation; once these periods end it is deleted, destroyed or anonymised.
7. Your rights under Article 11 of the KVKK
By applying to the data controller, you have the right to:
- Learn whether your personal data is processed,
- Request information about it if it has been processed,
- Learn the purpose of processing and whether it is used accordingly,
- Know the third parties to whom it is transferred in Türkiye or abroad,
- Request its correction if it is incomplete or inaccurate,
- Request its erasure or destruction under the conditions set out in Article 7 of the KVKK,
- Request that the correction, erasure or destruction be notified to the third parties to whom the data was transferred,
- Object to a result against you arising from analysis exclusively by automated systems,
- Claim compensation if you suffer damage because of unlawful processing.
8. Application
You can send requests concerning your rights, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, by e-mail to info@utera.co or in writing to [registered address]. Your application will be concluded free of charge within thirty days at the latest; if the process requires an additional cost, the fee set by the Personal Data Protection Board may apply.