Last update: July 1, 2025
User Data Privacy Notice
1) Introduction
Üstad Teknoloji Anonim Şirketi (“USTAD.CO”) is a company that adheres to all legal regulations, corporate codes, business ethics, and ethical rules it is subject to. The term “USTAD.CO” or “we” in this text is used to refer to USTAD.CO, its business partners, and all of its affiliates.
USTAD.CO processes your personal data because you visit the digital platform offered at www.ustad.co and purchase USTAD.CO products and services or wish to obtain information about these products and services. Data belonging to identifiable natural persons is considered personal data under the Personal Data Protection Law No. 6698 (“KVKK”) and secondary regulations based on it, as well as the decisions of the Personal Data Protection Board (“Board”), (hereinafter collectively referred to as “Turkish Data Protection Legislation”). Therefore, the data of our visitors, users, and/or potential users who visit the USTAD.CO platform and of natural person representatives accessing the platform on behalf of legal entities (referred to as “Individuals” or “you”) are protected as personal data in accordance with the Turkish Data Protection Legislation.
We present this privacy notice to your knowledge so that you can understand how we process the personal data of individuals for the purposes of contract execution, customer relationship management, and securing our legitimate interests.
2) Legal processing of your personal data
The personal data of individuals is processed based on your explicit consent, either for the reason that it is directly related to the establishment or performance of a contract between you and USTAD.CO, or in line with USTAD.CO's legitimate interests[2]. Your personal data will be processed to determine the identity, address, tax number, and other information of the owner and the counterparty in any work and transactions related to any products and services we will offer to you, to organize the information and documents that will form the basis of the work and transactions to be carried out on paper or electronically, to comply with the information retention, reporting, and disclosure obligations envisaged by all competent judicial and administrative authorities in accordance with the relevant legislation, and to fulfill the requirements of our contracts and the service we will provide to you.
3) Purpose of processing personal data
We process personal data for the purposes defined under the following headings, such as storing, saving, updating data in the cloud environment through third parties, sharing it with operators and other third parties we collaborate with for sending information, advertisements, promotions, etc., for tracking and resolving your complaints, providing better services to individuals, notifying about the products, services, advertisements, and campaigns of USTAD.CO and its partners, preparing special campaigns and benefits for you, conducting surveys to measure your satisfaction, and providing call center services:
Conducting Finance and Accounting Processes,
Managing Contract Processes,
Conducting Internal Audits/ Investigations / Intelligence Activities,
Executing Business Activities / Auditing,
Handling Customer Relations and Satisfaction Management,
Carrying Out Marketing Activities,
Managing Goods / Service Sales Processes,
Fulfilling Legal Notification Obligations.
4) Types of Personal Data We Collect
USTAD.CO ; regarding the transactions made on the internet site or applications with the domain name www.ustad.co, Individuals'; i) Identity information (Full Name, Turkish ID No), ii) Contact information (Mobile Phone Number, Email Address), iii) Financial information (Bank Account IBAN Information, Tax Identification No, Payment Information, Bank Information), iv) Customer transaction information consisting of general personal data derived from website visit details (IP address, cookie records, permission/approval records, navigation logs, log information) can be processed for the aforementioned reasons.
5) Sources of personal data
Your personal data is collected directly from you through various channels, such as our website, mobile applications, representatives that contact you, or the information you provide to us via email, phone, text message, or other means. This may occur verbally, in writing, or electronically, and can also involve systems that partially or fully automate data recording, such as the identification system known as "cookies," which recognizes you automatically when you visit our website.
6) To whom is your personal data being transferred?
Your personal data may be transferred to our consultants and lawyers with whom we collaborate, partner institutions, organizations, individuals, service providers that store data in the cloud, institutions with whom we have agreements to send communications to our customers, domestic and foreign banks (including correspondent banks), financial institutions, payment organizations, and other third parties within the framework of our cooperation. In cases where there is a request from official authorities or an obligation to provide information in accordance with the law, your information may be transferred to the legal authorities and institutions, which may also share your information further.
We obtain explicit consent from all Individuals whose personal data is processed, in accordance with Turkish Data Protection Legislation, if necessary, for the processing of their data by USTAD.CO, and in all cases, we ensure that Individuals are informed in accordance with the procedures and principles determined under the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform, for any data processing activities carried out using USTAD.CO systems.
7) How long do we retain personal data?
We process and retain the personal data of individuals as long as your contract with USTAD.CO is in effect. Additionally, after the termination of your contract with USTAD.CO, we continue to store the personal data of individuals for 10 (ten) years in accordance with the statute of limitations determined in the Turkish Code of Obligations No. 6098, in line with our legitimate interests[3]. However, during the 10 (ten) year storage period following the termination of the contract, we store personal data in such a way that only certain authorized individuals can access it, applying access restrictions.
8) Keeping personal data secure
Safeguarding individuals' personal data is our priority. Personal data is securely stored either by us or by our carefully selected service providers, who process data for us under a service and privacy agreement. We ensure that stringent security measures are implemented to keep personal data safe from loss, misuse, unauthorized access, or disclosure. We make sure that the technical and administrative measures we take meet the requirements specified by the Turkish Data Protection Legislation in terms of security.
9) Individuals' data protection rights
Under the Turkish Data Protection Legislation, Individuals have the right to contact USTAD.CO at any time regarding;
a) Learning whether personal data is being processed,
b) Requesting information if their personal data has been processed,
c) Understanding the purpose of processing personal data and whether it is used in accordance with its purpose,
ç) Knowing the third parties to whom personal data is transferred domestically or internationally,
d) Requesting correction if personal data is incomplete or incorrectly processed,
e) Requesting the deletion or destruction of personal data,
f) Requesting notification to third parties to whom personal data has been transferred, regarding the actions taken under subparagraphs (d) and (e),
g) Objecting to results derived against themselves through the analysis of processed data exclusively through automated systems,
h) Requesting compensation for damages if they suffer damage due to unlawful processing of personal data.
10) Contact
If you are not satisfied with the way we process data, or if you want to get information or ask questions about something you do not understand, you can contact us at any time.
Address: BARBAROS MH.ŞEBBOY SOK..NO.4/1 İÇ KAPI N.2 ATAŞEHİR / İSTANBUL
Email: destek@ustad.co
Website: www.ustad.co
Registered email address (KEP): ustadteknoloji@hs01.kep.tr
MERSİS NO: 0478-1033-9380-0001
[1] It is regulated in accordance with Article 5, paragraph 2, subparagraph c) of Law No. 6698 on the Protection of Personal Data as one of the conditions enabling the processing of personal data without the explicit consent of the concerned person.
[2] It is regulated in accordance with Article 5, paragraph 2, subparagraph f) of Law No. 6698 on the Protection of Personal Data as one of the conditions enabling the processing of personal data without the explicit consent of the concerned person.
[3] It is regulated in accordance with Article 5, paragraph 2, subparagraph f) of Law No. 6698 on the Protection of Personal Data as one of the conditions enabling the processing of personal data without the explicit consent of the concerned person.