Personal Data Notice

This English text is provided for information. In case of any discrepancy, the Turkish text is binding.

1. Data controller

This notice is issued under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") by the data controller:

Uçuş Atölyesi
Address: İstanbul, Türkiye
E-mail: [email protected]
Phone: +90 530 468 02 78
Web: ucusatolyesi.com

2. Personal data we process

Identity and contact: name, surname, e-mail address, phone number, institution name and city.
Customer account: login e-mail, encrypted password, e-mail verification and consent records.
Delivery and invoicing: delivery and billing addresses, Turkish ID or tax number where required for invoicing.
Order and cart: products, kit configurations, quantities, prices, cart activity, order and return history.
Payment: card data is entered on Stripe's secure page and is not stored by us; we only keep Stripe customer/payment references, card brand, last four digits and expiry.
Requests: contact form and quote request content, training interest and estimated number of students.
Technical: IP address, browser/device information, access logs and cookie preferences.

3. Purposes of processing

Creating and managing customer accounts
Receiving, paying for, shipping and invoicing orders; handling returns and withdrawal requests
Responding to contact and quote requests, planning trainings and workshops
Sending transactional e-mails (verification, password reset, order status)
Sending marketing communication only if you have given permission
Ensuring information security, preventing fraud and misuse
Fulfilling legal obligations (consumer, tax and commercial legislation) and responding to authorities

4. Legal grounds

Personal data is processed on the grounds in Article 5(2) KVKK: performance of a contract (orders, accounts, quotes), compliance with legal obligations, establishment or protection of a right, and our legitimate interests (security, service improvement) provided your fundamental rights are not harmed. Marketing communication and optional analytics cookies are based on your explicit consent (Article 5(1)), which you can withdraw at any time.

5. Transfers

Personal data may be shared, only to the extent necessary, with:

Stripe (payment processing; may involve transfer abroad under Article 9 KVKK),
cargo and logistics companies (delivery),
hosting, e-mail and IT service providers acting on our behalf,
Google (Google Analytics, only with your cookie consent),
accounting advisors and authorised public institutions where required by law.

6. Method of collection

Data is collected electronically through the website forms, customer account, cart and checkout pages, e-mail and phone communication, and automatically through cookies and server logs.

7. Retention

Data is kept for as long as the purpose requires and for the periods set by law (for example 10 years for commercial and tax records). Afterwards it is deleted, destroyed or anonymised. Inactive quote and contact records are reviewed periodically.

8. Your rights

Under Article 11 KVKK you may request to learn whether your data is processed, request information, learn the purpose and recipients, request correction, deletion or destruction, object to results arising from automated analysis, and claim compensation for unlawful processing.

You can send your request in writing to our address or by e-mail from the address registered with us to [email protected]. Requests are answered free of charge within 30 days at the latest. You can also contact us via the contact page.