Privacy Policy

PROTECTION OF PERSONAL DATA AND PRIVACY POLICY

1. GENERAL PROVISIONS AND SCOPE

This Protection of Personal Data and Privacy Policy ("Policy") has been prepared in accordance with the Law No. 6698 on the Protection of Personal Data ("KVKK") and relevant legal legislation. It regulates the procedures and principles regarding the processing of personal data resulting from users ("Data Subject") visiting and using the website.

Using this website implies that the Data Subject accepts the processing of their personal data under the terms and conditions specified within this Policy.

2. DATA CONTROLLER

Acting in the capacity of Data Controller pursuant to KVKK No. 6698, the Company ("Data Controller") is defined as the real or legal entity determining the purposes and means of personal data processing, responsible for establishing and managing the data registration system where data is stored.

With this Policy, the Data Controller aims to provide comprehensive information regarding which personal data of website visitors will be processed for what purposes, with whom and on what legal grounds the processed data may be shared, data processing methods, legal bases, and the rights of Data Subjects.

3. PROCESSED PERSONAL DATA

Personal data collected and processed by this website is classified under the following categories:

3.1. Technical Data

• Device Information: Technical specifications of the accessing device, operating system, browser details.

• IP Address: Internet protocol address information and associated location data.

4. SERVICES USED AND THIRD-PARTY SERVICE PROVIDERS

4.1. Infrastructure Services

• Cloudflare: Used within the scope of website security, performance optimization, DDoS protection, SSL certification, and CDN (Content Delivery Network) services.

• DigitalOcean: Used within the scope of infrastructure and hosting services; personal data may be stored on DigitalOcean servers.

4.2. Analytics and Tracking Services

• Google Analytics: Used for analyzing visitor behavior, website usage statistics, visitor traffic, interactions, and detailed reporting regarding user engagement.

5. PURPOSES AND LEGAL BASES OF DATA PROCESSING

Personal data is processed in accordance with Articles 5 and 6 of the KVKK for the following purposes:

• Providing services suitable for the website's intent,

• Fulfilling legal obligations,

• Enhancing and developing service quality,

• Communicating with Data Subjects,

• Implementing cybersecurity measures,

• Sharing information with authorized legal authorities.

Personal data will not be used for any purpose other than those explicitly stated.

6. TRANSFER AND SHARING OF DATA

6.1. General Principles Without prejudice to legal obligations, personal data shall not be shared with third parties without the explicit consent of the Data Subject.

6.2. Exceptions Personal data may be shared to the necessary extent in the following circumstances:

• With our service providers for the purpose of delivering the service,

• With our business partners within the scope of fulfilling legal obligations,

• With legal authorities within the framework of executing statutory duties.

7. COOKIE POLICY

7.1. Definition of Cookies Cookies are small text data files stored on users' terminal devices that enable storing specific user information during website visits.

7.2. Use of Cookies This website utilizes cookie technology. Cookies are stored on the device via the browser during the initial visit and enable the website to recognize the device on subsequent visits to present personalized content.

8. RIGHTS OF THE DATA SUBJECT

8.1. Rights Under KVKK Pursuant to Article 11 of the KVKK No. 6698, Data Subjects may exercise the following rights by applying to the Data Controller:

• Right to learn whether personal data is processed,

• Right to request information if personal data has been processed,

• Right to learn the purpose of processing personal data and whether they are used in accordance with their purpose,

• Right to know the third parties to whom personal data is transferred domestically or abroad,

• Right to request rectification of incomplete or inaccurate personal data,

• Right to request erasure or destruction of personal data within the framework of conditions stipulated in Article 7 of the KVKK,

• Right to request notification of rectification, erasure, and destruction operations to third parties to whom personal data has been transferred,

• Right to object to the occurrence of a result against the person by analyzing processed data exclusively through automated systems,

• Right to demand compensation for damages in case of suffering damage due to unlawful processing of personal data.

8.2. Application Procedure Requests regarding the exercise of the rights stated above may be submitted to the Data Controller in writing or through other methods determined by the Personal Data Protection Board.

9. CONTACT INFORMATION

To exercise your rights regarding your personal data, obtain information about this Policy, or submit any questions or requests, you may use the following contact channel:

• E-mail:info@onvo.com.tr

10. CONSENT AND ENTRY INTO FORCE

Using this website implies that the Data Subject accepts the processing of their personal data within the scope of this Policy. Sharing personal data is entirely subject to the choice of the Data Subject.

This Policy entered into force on February 19, 2026, and may be updated when deemed necessary. Any modifications shall be announced by being published on the website.