Privacy notice

Last updated: 15 October 2026

This notice is provided by Uğur Otomat (“we”), as data controller under Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Obligation to Inform, to people who visit ugurotomat.com.tr, fill in our contact form, or contact us by phone, WhatsApp or email.

1. Data controller

Uğur Otomat
Address: Cemil Meriç Cad., Koruma Sanayi Sitesi, Block G No: 112, Pendik / Istanbul, Türkiye
Email: [email protected]
Phone: +90 542 551 34 78

2. Data we process

  • Identity: name and surname.
  • Contact: phone number, email address and, if given, company name.
  • Customer transaction: the content of your request, drawings, sample photos, dimensions and quantities, quote and order correspondence.
  • Transaction security: IP address, browser and device information, date and time of your visit, kept in server and security logs.

We do not ask for special categories of personal data (health, biometric data, etc.). Please do not include such information in the form or your messages.

3. How we collect it

You provide your data through our contact form, phone calls, WhatsApp and email. Security data is collected automatically by our hosting and security providers when you visit the website.

4. Purposes and legal grounds

  • Preparing quotes, assessing your request and contacting you; carrying out orders, production and delivery — necessary to set up or perform a contract (KVKK Art. 5/2-c).
  • Keeping commercial books, invoices and records and responding to authorised bodies — our legal obligation (Art. 5/2-ç).
  • Keeping the website secure, preventing attacks and misuse, and protecting our rights in disputes — legitimate interest (Art. 5/2-f) and establishing, exercising or protecting a right (Art. 5/2-e).
  • Transferring the information you send through the contact form to the overseas service that delivers it to us — your explicit consent (Art. 9). See our Explicit Consent Statement.

We do not use your data for marketing, profiling or advertising, and we do not send commercial electronic messages.

5. Transfers

  • In Türkiye: our web hosting provider; our accountants and financial advisers; shipping companies (for orders); public authorities and courts where required by law.
  • Abroad: our content delivery and security provider (Cloudflare, Inc.), our business email provider (Google) and our contact form delivery service (FormSubmit), whose servers may be located outside Türkiye.

Transfers abroad are made under Article 9 of the KVKK: relying on appropriate safeguards (such as standard contracts) where available, otherwise on the exceptions set out in the law or your explicit consent. If you choose to message us on WhatsApp, your messages are also subject to WhatsApp’s (Meta’s) own privacy terms.

6. Retention

We keep your data for as long as the purpose requires. Unfinished quote requests and correspondence are kept for up to 2 years after the request is closed; records that become part of a contract are kept for the periods required by law (for example 10 years under the Turkish Commercial Code and Tax Procedure Law). Security logs are limited to our providers’ short retention periods. After that, data is deleted, destroyed or anonymised.

7. Your rights under Article 11

You may ask us whether your data is processed and request information about it; learn the purpose of processing and whether it is used accordingly; know the third parties it is transferred to in Türkiye or abroad; request correction of incomplete or inaccurate data; request deletion or destruction under Article 7 and have these actions notified to third parties; object to a result against you arising solely from automated analysis; and claim compensation for damage caused by unlawful processing. You may withdraw your explicit consent at any time; this does not affect earlier processing.

8. How to apply

Under the Communiqué on Applications to the Data Controller, send your request with information identifying you and the subject of your request: in writing with a wet signature to the address above; via registered electronic mail (KEP), secure electronic signature or mobile signature; or from an email address you have previously given us and that is registered in our records, to [email protected]. We will respond free of charge within 30 days at the latest; if the request involves an additional cost, the fee set by the Personal Data Protection Board may be charged. If your request is rejected, you find the answer insufficient or we do not answer in time, you may file a complaint with the Personal Data Protection Board (Art. 14).

This notice may be updated to reflect changes in the law or in our processing. The current version is always published on this page.