INFORMATION NOTICE UNDER THE PERSONAL DATA PROTECTION LAW NO. 6698
This notice has been prepared to inform data subjects pursuant to Article 10 of the Personal Data Protection Law No. 6698 (“KVKK”). This notice does not constitute a declaration of explicit consent.
1. Data controller
ENES GÜNEY (trade name / business name: UcuzGames)
Address: Güneştepe Mah., Osmangazi / Bursa
Phone: 0850 307 7805
E-mail: [email protected]
Tax Identification Number: 4350811042 — Tax Office: Osmangazi
2. Categories of personal data processed
- Identity information (first name, surname; where necessary, Turkish Republic identity number and date of birth),
- Contact information (e-mail, phone),
- Membership and account information (user registration, sessions, password hash, linked login credentials),
- Order and transaction information (product, amount, delivery / access records),
- Invoice and address information,
- Payment and collection transaction records (payment method, transaction reference; full card numbers are not stored on the site’s servers),
- IP address, device / browser and security logs,
- Support conversations and request content (live support, ticket, e-mail),
- Fraud prevention and transaction security records,
- Cookie and marketing preferences.
3. Methods of collection
Personal data may be collected automatically or partly automatically through membership and login forms, order / payment processes, support channels, cookies and similar technologies, security logs, and linked login methods such as Google / Steam.
4. Purposes and legal grounds for processing
Depending on the category and activity, data may be processed for the purposes below and on the legal grounds set out in Article 5/2 of the KVKK:
- Creating and managing a membership account — establishment / performance of a contract,
- Receiving and fulfilling orders, delivery and invoicing — performance of a contract and legal obligation,
- Payment collection and reconciliation — performance of a contract and legal obligation,
- Conducting customer support processes — performance of a contract / legitimate interest,
- Transaction security and prevention of fraud and abuse — legitimate interest / legal obligation,
- Fulfilment of legal obligations (tax, e-commerce, consumer protection, etc.) — legal obligation,
- Measuring and improving website performance — legitimate interest; for non-essential cookies, separate preference / consent,
- Marketing communications (only within the scope of relevant preferences) — explicit consent or other grounds provided for under the applicable legislation.
5. Categories of recipients to whom data may be transferred
Personal data may be transferred to the following categories of recipients for the purposes stated above and in accordance with the KVKK:
- Authorised public institutions and organisations,
- Banks and payment institutions / payment service providers,
- Accounting and e-invoice / e-archive service providers,
- Hosting, server, CDN and technical infrastructure providers,
- E-mail and communications infrastructure providers,
- Live support and customer service tools / notification channels,
- Analytics and advertising service providers (depending on your cookie preferences),
- Legal and financial advisers,
- Artificial intelligence / cloud service providers used in live support processes.
6. Transfer to foreign countries
Personal data may be transferred overseas in compliance with the conditions set forth in Article 9 of Law No. 6698 and appropriate safeguards, when the technical infrastructure used and the service providers are located abroad.
Within this scope, cross-border transfer may occur through Cloudflare's content delivery network and site security/performance infrastructure, analytics/advertising tags connected to Google Tag Manager, advertising measurement tools such as Meta Pixel and Meta Conversions API (the server-side notification includes event type, order number, amount and product information, and a summarized form of e-mail and phone that cannot be reversed, IP address and browser information; those visitors who reject advertising/marketing cookies will not be sent), and through artificial intelligence/cloud service providers used in connected login services with Google and Steam as well as live chat processes. Data categories that may be transferred, depending on the nature of the relevant service, may include IP address, device/browser information, cookie identifiers, membership/communication details, and support conversation content.
7. Retention period
Data are kept for the period required by the purpose of processing and for the mandatory retention periods foreseen by tax, commercial, consumer and other applicable regulations; at the end of the period, they are deleted, destroyed or anonymized.
8. Rights of the data subject
Within the scope of KVKK Article 11, you have the rights to learn whether your personal data is processed, to request information if processed, to learn the purpose of processing and whether it is used in accordance with that purpose, to know the third parties inside or outside the country to whom it is transferred, to request correction if incomplete or incorrect, to request deletion or destruction under the conditions set forth in KVKK, to request notification to third parties to whom data was transferred, to object to results arising from solely automated analysis due to automatic decision-making against you, and to demand redress for damages if your data are processed unlawfully.
9. Application method
You may submit your applications by electronic mail to [email protected], in writing to the address Güneştepe Mah., Osmangazi / Bursa, or by other methods specified in the Communiqué on Procedures and Principles for Data Controller Applications. Applications may require information for identity verification. Requests are concluded as soon as possible and no later than thirty days in accordance with KVKK Article 13.
You can access the current version of this text on the KVKK Disclosure Statement page at www.ucuzgames.com.
