Privacy Policy and KVKK Disclosure

This Privacy Policy has been prepared in accordance with the Turkish Personal Data Protection Law No. 6698 (KVKK) and relevant legislation.

1. Data Controller

Under KVKK, the data controller is URAS TOPTAN GIDA SANAYİ VE TİCARET LİMİTED ŞİRKETİ, established in Turkey.

2. Purposes of Processing Personal Data

Your personal data is processed in accordance with Articles 5 and 6 of KVKK for the following purposes:

  • Execution of wholesale food sales and order processes
  • Payment, collection and virtual POS transactions
  • Management of invoicing, accounting and finance processes
  • Execution of logistics, shipping and delivery processes
  • Export transactions (if applicable)
  • Fulfillment of legal obligations

3. Transfer of Personal Data

Your personal data may be shared with the following parties in compliance with legislation and with necessary security measures:

  • PayTR - Authorized payment institution (virtual POS service provider, PCI-DSS Level 1 certified)
  • Banks and authorized payment institutions (virtual POS service providers)
  • Business partners for accounting and finance services
  • Logistics and shipping companies
  • Audit firms
  • Authorized public institutions within the scope of legal obligations

4. Payments and Card Data Security

  • Payment transactions are processed through PayTR's secure virtual POS infrastructure.
  • PayTR is a TCMB-licensed and PCI-DSS Level 1 certified payment institution.
  • Card information such as card number, CVV, and expiry date is NOT collected, processed, or stored by URAS TOPTAN GIDA.
  • Card information is transmitted directly to PayTR's secure payment system.
  • 3D Secure and PCI-DSS security standards are applied in payment transactions.
  • Payment security is ensured under the responsibility of PayTR and your bank.

5. Rights of Personal Data Owners

Under Article 11 of KVKK, personal data owners have the following rights:

  • Learning whether personal data is processed
  • Requesting information if processed
  • Learning the purpose of processing and whether it is used in accordance with its purpose
  • Knowing third parties to whom data is transferred domestically or abroad
  • Requesting correction if processed incompletely or incorrectly
  • Requesting deletion or destruction in accordance with KVKK

You can exercise these rights by contacting us in writing through the contact channels on our website or by methods specified in KVKK.