Privacy and Personal Data Processing Policy

This Privacy and Personal Data Processing Policy aims to provide information about personal data collected, stored, processed, shared and transferred by Ozan. All natural persons who visit the Ozan website and use any Ozan service are within the scope of this Privacy and Personal Data Processing Policy.

Since Ozan Turkey and Ozan Europe and UK are two companies that follow the same privacy policies and policies, the term "Ozan" is used throughout this policy to cover both companies. Throughout the Privacy and Personal Data Processing Policy, expressions such as "we" or "our company" may be used when referring to Ozan. Official titles and contact information of Ozan companies are at the end of this policy. The terms "personal data", "personal information" and "your information" are used interchangeably and include all information relating to an identified or identifiable natural person (for example, name, e-mail address, date of birth, identity and passport number).

We are aware of the importance of personal data for our customers and end users, and we will make every effort to ensure that everyone within Ozan complies with this policy, and to ensure the security of your personal data in all circumstances.

Purpose of this Privacy and Personal Data Processing Policy:

To explain our purpose and way of using the data we have obtained in the clearest and most understandable way possible,
To explain what information we obtain with your consent and for what purposes and how this information is processed,
To inform about the purposes and methods of transferring this information to third parties,
To inform you about your legal rights regarding your personal data,
Explaining our responsibility to protect your rights and privacy.

This policy is valid only for the use of Ozan products and services. The privacy policy and rules of the relevant person or institution will apply to all websites and environments that are not owned by Ozan. In cases where an Ozan payment form is placed on the website of a seller using Ozan products in order to transfer payment information to Ozan, the privacy policies of both Ozan and the relevant seller will apply.

The types of your personal data processed by Ozan may vary depending on which services you use and how you use them. Depending on factors such as your region and legal status, not all services may be available to you.

Personal Data Collected by Ozan We collect various personal data about you when you visit our website or use our services.

When you enter our website, send or receive a payment through Ozan, or register and open an account with Ozan; We collect the information necessary to provide the services you request in an effective and safe manner.

This information may include the following;

Your personal information (for example, your name, address, e-mail address, ID number),
Payment information (for example, your credit card number, expiration date of your card, your installment preference),
We may obtain personal data about these third parties when someone sends payments to third parties or takes any other action where they need to provide us with information about third parties.
Information obtained from other persons; For example, we may obtain information about the name and categories of the products or services you want to purchase from an Ozan member customer, the details of your membership within the seller, your IP address and your previous transactions. We can also obtain and use information about the status of your order from third parties such as Banks, Merchant merchants and Cargo companies.
In case you want to become a customer of our Ozan services, information that determines the type and identity of your workplace, contact information, introductory and explanatory information and documents related to the business, bank information required for transferring the payment, and records regarding your use of Ozan products and services (IP address, website you use). infrastructure etc.) will be obtained.

Some or all of this information may contain personal data, and as a company, you must guarantee that you are authorized to share this personal data. If you are a seller who sells on a platform (for example, a marketplace), your business's introductory information, contact and bank account information will be transferred to Ozan by the marketplace you are a member of. Additional information you provide to us, such as when you use optional services offered by Ozan or contact Ozan, is collected by Ozan: Information obtained through cookies, beacons and other tracking mechanisms; for example, details about your device, geolocation and usage.

Use of Personal Data by Ozan and Legal Basis: We use personal data in our possession for various purposes permitted by legal regulations in Turkey, UK and European Union. Our purposes for using your personal data are set out in the following paragraph. The legal compliance criteria we rely on when processing this personal data; fulfillment of our contractual obligations, our legitimate interests and legal obligations.

To provide our website and services to you; We need to use your personal information to make payments, transfer money, store your credit cards for future use, and to enable you to create, access and make changes to an account.
To improve our services and manage our Company's functional requirements.
To improve our performance and provide better products and services to users by monitoring the use of our websites and services and analyzing usage data.
Protecting our users from harm with risk management and our platform:
We measure risk levels to recognize and protect our users so we can find and prevent fraudulent actions. Decisions on this subject can be made by automatic algorithms or by our own officers within certain rules. If an application or transaction you want to perform is rejected as a result of these examinations, you can request information by contacting us via the contact information at the end of the document.
We use your contact information to contact you when necessary and to inform you about the status of your transactions. In addition, if there is a problem with your transaction or your account, we may use your contact information to reach you and solve the problem. Those who contact you on behalf of Ozan may be Ozan employees directly, or we may have different business partners from whom we receive services, in which case your personal data must be shared with these business partners.

To comply with our legal obligations or resolve disputes; Certain regulations in the places where we operate may require that we use and store your information in certain ways. As a payment service provider and electronic money institution, we are obliged to keep and examine the records of all transactions we mediate for purposes such as fulfilling our data retention obligations, preventing money laundering and taxation. When a dispute arises between the parties of a transaction we mediate, or between Ozan and users, your personal information can be used to resolve this dispute and transferred to courts and alternative resolution authorities.

We may also use your information for other purposes for which you have consented. We may obtain your consent for other processing activities, such as sending you marketing messages, receiving feedback from you. In such cases, you can always withdraw your consent, for this you can contact us from the contact information at the end of the document. When contacting us, you should also include information that will help us know you in your message. Your notice of withdrawal of consent is prospectively effective, so processing that we have performed in the past based on your consent will not become unlawful, but we will stop processing the relevant information after we receive your notice.

Storage and Deletion of Personal Data; The period for which Ozan will keep your personal data in a way that allows you to be identified is the shortest time required to meet our legal obligations and operational requirements. When the period of storage of your personal data expires, we delete or anonymize your personal data in accordance with our internal procedures aimed at ensuring the security of your data, so that it cannot be associated with you. When you close your account or request the deletion of your personal data, we delete or anonymize the data that we have to keep even if you close your account according to legal regulations, or that we reject your deletion request. The cookies we use have a certain validity period and if you do not use our website or services during this period, they are automatically disabled and the stored data is deleted. You can also delete these cookies using your internet browser settings. Transfer of Personal Data to Third Parties While providing our services, we sometimes share your personal data with third parties for the purposes described below. In order to manage our activities and to provide our services in a secure and continuous manner, we share your personal data between Ozan group companies or third parties from which we receive outsourcing to continue our activities. Transfers between Ozan group companies are carried out by taking necessary precautions and your personal data does not fall outside the scope of this privacy policy due to this transfer. We use the services of other companies where necessary and we may need to share your personal data with some of them. For example, when we receive your payment information (we may obtain this information directly from you or through the merchant you want to pay from), we transfer it to the relevant financial institutions so that your payment is processed. Or, if your transaction requires additional steps (eg customs clearance), we may transfer your data to the relevant service providers so that these steps can be taken. We may also transfer personal data to third parties (for example, data processors aiming to prevent fraud) in order to ensure the safety and comfort of our users and our business. When you use our services, We will notify other parties of your transaction (for example, the merchant or other users you are paying with). This information may include the transfer of some of your personal data to these persons. Public authorities and other authorized institutions may request your personal data from us. We only share this information when we are legally required to do so or when we think it is necessary to prevent or investigate a crime. We may also need to share your data with third parties for other administrative purposes. These purposes include various activities such as company audits, corporate governance and exercising our legal rights. While making these shares, we always act in accordance with the legal regulations. Public authorities and other authorized institutions may request your personal data from us. We share this information only when we are required to do so by law or when we believe it is necessary for the prevention or investigation of a crime. We may also need to share your data with third parties for other administrative purposes. These purposes include company audits, corporate governance and various activities such as exercising our legal rights. While making these shares, we always act in accordance with the legal regulations. Public authorities and other authorized institutions may request your personal data from us. We share this information only when we are legally required to do so or when we think it is necessary to prevent or investigate a crime. We may also need to share your data with third parties for other administrative purposes. These purposes include various activities such as company audits, corporate governance and exercising our legal rights. While making these shares, we always act in accordance with the legal regulations. These purposes include various activities such as company audits, corporate governance and exercising our legal rights. While making these shares, we always act in accordance with the legal regulations. These purposes include company audits, corporate governance and various activities such as exercising our legal rights. While making these shares, we always act in accordance with the legal regulations.

Transfer of Personal Data to Third Countries Due to the nature of the services we provide, we may need to transfer some personal data internationally. All of our information technology infrastructure, Ozan Turkey's infrastructure, is located in Turkey, and therefore, if you access our website or use our services from a country other than Turkey, your personal data will be transferred to Turkey. This transfer takes place in a legal framework that ensures the security of your personal data. We use the model contractual provisions published by the European and UK Commission for personal data transfers between Ozan Europe and UK and Ozan Turkey. In addition to transfers between Ozan companies, data transfers to third parties described above may require the transfer of your personal data to different countries. However, in any case, your personal data,

Your Preferences You can make certain choices regarding your privacy. You can always refuse to provide your personal data requested by Ozan. However, if the information you refuse to provide is necessary for us to provide our services, you will not be able to use our services. For example, if you do not enter your credit card number on the payment page of a merchant that accepts credit card payments through Ozan, we will not be able to process the payment.

Your rights

We would like to state that you have the following rights in accordance with the legal regulations:

To learn whether your personal data is processed, the processed personal data, the sources from which the personal data is obtained, the third parties to which it is transferred at home and abroad, the criteria used to determine the period or period of storage of the data;
Accessing your personal data, requesting that the personal data provided by it be given to him in a structured, commonly used and machine-readable format or transferred to another data controller,
To learn the purpose of processing your personal data and whether they are used in accordance with the purpose,
Objecting to the processing of your personal data or requesting restriction,
Requesting correction of your personal data if it is incomplete or incorrectly processed,
Requesting the deletion or destruction of your personal data in the event that the reasons for its processing disappear,
Requesting notification of transactions such as rectification and deletion to third parties to whom your personal data has been transferred,
Objecting to the emergence of an unfavorable result by analyzing the processed data through automated systems,
To request the compensation of the damage in case of loss due to unlawful processing of personal data.

You can contact us about your rights regarding your personal data mentioned above, within the framework of the conditions in the form specified at the end of the document. In order for us to be able to identify you when making this application, you must provide the full information you provided when registering or using our services, and you must include a copy of your official ID.

Protection of Personal Data

All personal data obtained by Ozan are transmitted and stored subject to reasonable security conditions accepted in the industry. The security of payment data is provided by our PCI DSS (Payment Industry Data Security Standards) Level 1 compliant infrastructure and the connections to which personal data are transferred are protected by encryption. While we take all reasonable precautions to protect your personal information, it is primarily your responsibility to keep your password and account information secure.

Please review the APPLICATION PROCEDURE REGARDING THE PROTECTION OF PERSONAL DATA.