Data Protection Notice

Identity of the data controller

Data controller

Universal & Partners SMMM A.Ş.

Address

Gürsel Mahallesi, İmrahor Caddesi, Premier Kampüs Ofis A Blok No: 29A, İç Kapı No: 101, Kağıthane / İstanbul

Telephone

+90 212 241 38 00

Website

mustafakoksoya.com

Personal data processed and how it is collected

Data is collected solely through your own actions on the site, by automated or partly automated means:

Identity and contact data

Name and email address — where you complete the contact form

Enquiry data

Subject line and message content — through the contact form

Transaction security data

IP address, date and time, requested address, browser and operating system — through server logs

No special categories of personal data are requested or processed. Please do not share information of that nature through the form.

Purposes of processing

• Carrying out communication activities and responding to enquiries
• Assessing press, interview and collaboration enquiries
• Operating information security processes and preventing misuse
• Conducting activities in compliance with legislation and providing information to authorised institutions

Legal bases

Processing for the purposes above relies on the following grounds in Article 5(2) of the Data Protection Law: (c) processing directly related to the conclusion or performance of a contract, (ç) compliance with the controller's legal obligations, and (f) the controller's legitimate interests, provided that fundamental rights and freedoms are not harmed. For preferences stored in your browser, your explicit consent is obtained under Article 5(1).

Transfers and categories of recipients

Your personal data may be transferred to the suppliers engaged for hosting the site and delivering the form, and to authorised public institutions where a request or obligation exists, in accordance with Articles 8 and 9 of the Data Protection Law and limited to those purposes. Your data is not shared with third parties for marketing.

Retention and destruction

Data is retained for as long as the purpose of processing requires and for the limitation periods prescribed by legislation; at the end of those periods it is deleted, destroyed or anonymised. The retention periods are set out in detail in the Privacy Policy.

Rights of the data subject

Under Article 11 of the Data Protection Law you may apply to the data controller and:

• Learn whether your personal data is being processed
• Request information if it has been processed
• Learn the purpose of processing and whether the data is used in line with that purpose
• Know the third parties in Türkiye or abroad to whom the data is transferred
• Request rectification if the data is incomplete or inaccurate
• Request erasure or destruction under the conditions set out in the law
• Request that rectification, erasure and destruction be notified to third parties to whom the data was transferred
• Object where an adverse outcome results from analysis carried out solely by automated systems
• Claim compensation where you suffer damage due to unlawful processing

These are your rights under the law.

How to apply

You may submit requests concerning your rights in writing to the address above or to our email address, together with information establishing your identity, in accordance with the Communiqué on Application Procedures and Principles. Your application will be concluded free of charge as soon as possible and in any event within thirty days; where the process incurs an additional cost, the fee in the tariff set by the Personal Data Protection Board may be charged.

Updates

This notice may be revised in line with changes to legislation and to processing activities. The version in force is published on this page.

Contact

For questions about this text and for applications under the Data Protection Law, you can write to [email protected] or call +90 212 241 38 00.