This notice is provided under Turkish Personal Data Protection Law No. 6698 ("KVKK") to inform you how your personal data is processed. It is not a consent form; where explicit consent is required, it is obtained separately. In case of any discrepancy, the Turkish version prevails.

1. Data controller

Solmaz Ahşap Ürünleri ve Tesis Yönetimi Sanayi Ticaret Limited Şirketi ("Uygun Ahşap"), Mustafa Kemal Mahallesi 3004 Caddesi No: 103/A Ataşehir / İstanbul, Türkiye · MERSİS: 0773077325800001 · Registered e-mail (KEP): solmazahsap@hs01.kep.tr · Email: info@uygunahsap.com · Phone: +90 552 592 30 16

2. Personal data we process

• Identity: name and surname; Turkish ID or tax ID number where required by invoicing rules
• Contact: phone number, email address, delivery and billing address
• Customer transaction: order, product, invoice, delivery, return and request details; your correspondence with us
• Financial: payment method and amount. Your card details are entered on the secure payment page of our contracted payment institution; we do not see or store them.
• Visual: photos and images you send us as part of a request or complaint
• Transaction security: IP address, browser and device information, site usage logs
• Marketing and analytics: site usage data collected through cookies, only if you give explicit consent

3. How we collect it

We collect your personal data through our website (order, membership, return and contact forms, cookies), phone, instant messaging apps, email and our social media accounts, by automated or partly automated means.

4. Purposes and legal grounds

• Handling orders, production, delivery, returns and withdrawals, and contacting you about your order and delivery: processing directly related to the conclusion or performance of a contract (KVKK Art. 5/2-c)
• Invoicing, e-archive, accounting and tax processes; record-keeping and reporting obligations under consumer protection and other applicable laws; responding to lawful requests from authorities: legal obligation (Art. 5/2-ç)
• Managing legal disputes and keeping the necessary records for that purpose: establishment, exercise or protection of a right (Art. 5/2-e)
• Ensuring the security of our website and information systems, detecting and preventing misuse and security incidents, fixing technical issues: our legitimate interest, provided it does not harm your fundamental rights and freedoms (Art. 5/2-f)
• Processing through analytics, measurement and advertising/marketing cookies: your explicit consent (Art. 5/1). You may withdraw your consent at any time; this does not affect the lawfulness of processing carried out before withdrawal.

Commercial electronic messages such as promotions or new product announcements are sent only if you give separate consent in accordance with the applicable law.

5. Transfers

Your personal data may be transferred, limited to and proportionate with the purposes above, to the following recipient groups:

• Cargo, transport and freight service providers: handling deliveries and returns
• Payment institutions and banks: processing payments and refunds
• E-invoice/e-archive service providers and the Revenue Administration: issuing invoices and meeting legal obligations
• Financial advisors and accounting service providers: keeping accounting, tax and financial records
• Hosting, technical infrastructure and information security providers: operating, maintaining and securing the website
• Analytics and advertising service providers: measurement and advertising through cookies, only if you give explicit consent
• Communication service providers: if you contact us through an instant messaging app, your contact details and the content you send are processed on that app's infrastructure to provide the communication
• Technical support, software development and maintenance providers: technical operation, maintenance and troubleshooting of the website, to the extent the service requires
• AI-assisted service providers: for tasks such as content preparation, data analysis and technical troubleshooting, to the extent necessary and, wherever possible, with personal data anonymised
• Authorised public institutions and judicial authorities: meeting legal obligations and conducting legal proceedings

Some of the hosting, infrastructure, analytics, advertising, communication and AI services we use are provided by service providers located abroad, so your personal data may be transferred outside Türkiye. Such transfers are carried out by meeting whichever of the conditions set out in KVKK Art. 9 applies to the transfer concerned.

6. Retention period

Your personal data is kept for as long as the purpose of processing requires and within the retention periods set by applicable law. Retention periods under tax and commercial law apply to invoices, accounting and commercial records, and those under consumer law apply to distance sales records. When the period ends or the purpose no longer exists, your data is deleted, destroyed or anonymised.

7. Your rights

Under KVKK Art. 11, you have the right to: learn whether your personal data is processed; request information if it is; learn the purpose of processing and whether it is used accordingly; know the third parties in Türkiye or abroad to whom it is transferred; request correction if it is incomplete or inaccurate; request its deletion or destruction under KVKK Art. 7 and notification of these actions to the parties it was transferred to; object to a result against you arising solely from analysis by automated systems; and claim compensation if you suffer damage from unlawful processing.

8. How to apply

You may send your requests in writing to our address above, to our registered e-mail address (solmazahsap@hs01.kep.tr), or from the email address you previously provided to us and registered in our system to info@uygunahsap.com. Your request is concluded free of charge as soon as possible and within 30 days at the latest, depending on its nature; if the action requires an additional cost, the fee permitted by law may be charged.

If your request is rejected, you find our response insufficient, or we do not respond in time, you may file a complaint with the Personal Data Protection Board under KVKK Art. 14 within 30 days of learning our response, and in any case within 60 days of your application date.

Last updated: 29.09.2026