KVKK Privacy Notice
Last updated: 21 October 2026
This notice is prepared by U2 AI Studio Teknoloji Anonim Şirketi as data controller under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform. It explains which personal data we process through this website and the contact channels published on it, for what purposes and on what legal basis, how long we keep it and how you can exercise your rights. It applies together with the Privacy Policy and the Cookie Policy.
1. Identity of the Data Controller
Under Law No. 6698, your personal data is processed by U2 AI Studio Teknoloji Anonim Şirketi ("U2 AI Studio") as data controller.
| Item | Value |
|---|---|
| Trade name | U2 AI Studio Teknoloji Anonim Şirketi (joint stock company) |
| MERSIS no | 0883124471000001 |
| Trade registry | Ankara Trade Registry, 434199 |
| Tax office / no | Sincan, 8831244710 |
| Registered office | Ahi Evran OSB Mah. Erkunt Cad. No: 3 İç Kapı No: 41, Sincan / Ankara, Türkiye |
| Phone | +90 850 346 82 82 · +1 415 712 78 82 |
| info@u2aistudio.com | |
| Registered e-mail (KEP) | u2aistudio@hs01.kep.tr |
This notice covers the u2aidental.com domain and the contact channels published on it. When U2 AI Dental is made available, a separate notice will be published for processing related to use of the product.
2. Personal Data Processed
Depending on the channel you use, we may process your personal data in the following categories:
- Identity: name, surname, title.
- Contact: e-mail address, phone number, address, company and position.
- Request and complaint records: the subject and content of requests you send by e-mail or phone and subsequent correspondence.
- Customer, business partner and transaction records: demo, investor meeting and proposal records; contract, order and invoice details.
- Transaction security: IP address, time of request, browser and device information processed by the infrastructure serving the site when delivering pages.
Special categories of personal data. Please do not include special categories of personal data in messages or attachments you send us, including patient information, X-rays or examination records (such as health, biometric or genetic data, criminal convictions, religion, philosophical belief or political opinion, trade union membership). We do not request such data; if it reaches us anyway, it is not processed for any purpose and is removed from our records at the first opportunity.
3. Method of Collection
Your personal data is collected wholly or partly by automated means through the following channels:
- The e-mail, phone and KEP addresses published on the site.
- Phone calls and written correspondence.
- Documents and information you share when a meeting or commercial relationship is established or performed.
- Connection data processed automatically by the infrastructure provider when the site is served.
No forms, cookies or analytics tools are used on this website. Details are in the Cookie Policy and the general framework is in the Privacy Policy.
4. Purposes of Processing
Your personal data is processed for the following purposes:
- Receiving and responding to your requests, questions and complaints.
- Handling demo, investor meeting, proposal and other pre-contract processes.
- Concluding and performing contracts and managing related invoicing and record-keeping.
- Keeping requests and correspondence on record as evidence in a possible dispute.
- Fulfilling our obligations under tax, commercial and data protection legislation.
- Ensuring the security of the website and the infrastructure serving it.
We do not use your data for personalised advertising or remarketing or for any purpose other than those listed above; we do not carry out profiling that makes automated decisions about you; and we do not sell or rent it to third parties.
5. Legal Basis
Your personal data is processed on the basis of the conditions listed in Article 5/2 of the KVKK, which do not require explicit consent. The legal basis of each processing activity is shown separately below.
| Processing activity | Data | Legal basis (KVKK Art. 5/2) |
|---|---|---|
| Responding to requests sent by e-mail or phone and handling the pre-contract process | Identity, contact, request records | (c) directly related to the establishment or performance of a contract; (f) legitimate interest |
| Concluding and performing contracts; managing demo, investor meeting and proposal processes | Identity, contact, customer and transaction records | (c) establishment or performance of a contract |
| Keeping requests and correspondence on record against possible disputes | All categories above | (e) processing is necessary for the establishment, exercise or protection of a right |
| Bookkeeping and records, invoicing, tax obligations and responding to KVKK applications | Identity, contact, transaction records | (ç) compliance with a legal obligation of the data controller |
| Delivering pages, site and infrastructure security | Transaction security data | (f) legitimate interest, provided it does not harm your fundamental rights and freedoms |
No processing activity on this site relies on explicit consent. The general principles in Article 4 of the KVKK (lawfulness and fairness, accuracy, purpose limitation, proportionality and storage limitation) apply to all processing above; Article 4 is not, however, a legal basis on its own.
No newsletter or other commercial electronic message channel is operated on this website. If such a channel is added, consent will be obtained separately under Article 6 of the Law on the Regulation of Electronic Commerce No. 6563 and Article 5/1 of the KVKK, and this notice will be updated.
6. Transfers and International Transfers
Your data is shared with the following parties only to the extent necessary for the purposes above:
- Our infrastructure provider Amazon Web Services, which hosts this website and delivers its pages (files in Frankfurt, Germany; content delivered over a global network), and our domain and DNS provider Cloudflare, Inc.
- Our e-mail, file storage and office software providers.
- Our professional advisers under a duty of confidentiality (accountants and legal advisers).
- Competent public authorities and courts where there is a legal request or obligation.
- Business partners only where necessary to carry out work you have requested.
Some of these providers are established outside Türkiye. International transfers are made under Article 9 of the KVKK: on the basis of an adequacy decision of the Personal Data Protection Board where one exists; otherwise on the basis of one of the appropriate safeguards listed in Article 9/3 (usually the standard contract published by the Board), which is notified to the Board within five business days of signature. Where none of these is available, a transfer may be made only in the incidental cases listed in Article 9/6.
7. Retention Periods
We keep your data only for as long as the purpose of processing requires and not for less than the minimum periods required by law.
| Record | Retention period | Reason |
|---|---|---|
| Requests sent by e-mail or phone and related correspondence | 2 years from the last correspondence | Our company practice; kept as evidence of the request (Art. 5/2-e and 5/2-f) |
| Contracts, invoices and accounting records | 10 years from the end of the calendar year in which the record was made | Turkish Commercial Code No. 6102 Art. 82; books and documents at least 5 years under Tax Procedure Law No. 213 Art. 253 |
| Connection data (IP address, time of request, browser information) | We keep no access logs; the infrastructure provider processes it for operating and securing the service under its own retention periods | Site and infrastructure security (Art. 5/2-f) |
| KVKK applications and our responses | 2 years from the date of response | Our company practice; kept to prove the response was given in time |
At the end of the period, data is erased, destroyed or anonymised under Article 7 of the KVKK and the Regulation on the Erasure, Destruction or Anonymisation of Personal Data; under Article 11 of that Regulation the periodic destruction interval may not exceed six months.
8. Data Security and Automated Decisions
We apply technical and organisational measures under Article 12 of the KVKK: encryption in transit (TLS), access control based on least privilege, segregation of duties and logging of access to records. No measure makes a system entirely risk-free; we do not claim any certification or accreditation for this website.
No decision producing legal effects or similarly significant effects is made about you through this website solely by automated systems. The sample AI outputs in the product preview relate to a fictional case and do not concern real people.
9. Your Rights under Article 11 of the KVKK
As a data subject you have the following rights under Article 11 of the KVKK:
- to learn whether your personal data is processed (Art. 11/1-a);
- to request information about the processing if it has been processed (b);
- to learn the purpose of processing and whether the data is used in line with that purpose (c);
- to know the third parties in Türkiye or abroad to whom your personal data is transferred (ç);
- to request correction if your personal data is incomplete or inaccurate (d);
- to request erasure or destruction of your personal data under the conditions in Article 7 of the KVKK (e);
- to request that corrections, erasures or destructions made under (d) and (e) be notified to the third parties to whom the data was transferred (f);
- to object to an outcome against you arising from the analysis of processed data exclusively by automated systems (g);
- to claim compensation for damage suffered due to unlawful processing of your personal data (ğ).
10. How to Apply
You may submit requests under Article 11 of the KVKK through the channels listed in Article 5 of the Communiqué on the Procedures and Principles of Application to the Data Controller:
- In writing: Ahi Evran OSB Mah. Erkunt Cad. No: 3 İç Kapı No: 41, Sincan / Ankara, Türkiye (in person with proof of identity, or through a notary).
- Registered e-mail (KEP): u2aistudio@hs01.kep.tr
- With a secure electronic signature or mobile signature: to info@u2aistudio.com.
- From an e-mail address you have previously notified to us and that is registered in our systems: to info@u2aistudio.com.
Under Article 5/2 of the Communiqué, your application must include your name and surname and, if written, your signature; your Turkish ID number if you are a Turkish citizen, or your nationality and passport or ID number if you are not; your address for service; your e-mail address, phone and fax number if any; and the subject of your request.
Your application is concluded free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request; if the process requires an additional cost, the fee in the tariff set by the Board may be charged (KVKK Art. 13). If your application is rejected, you find the response insufficient or no response is given in time, you may file a complaint with the Personal Data Protection Board within thirty days of learning the response and in any case within sixty days of your application (KVKK Art. 14).
For questions about this notice: info@u2aistudio.com