Website Cookies Privacy Notice

Introduction

This privacy notice has been prepared by Ones Bilişim Teknolojileri Anonim Şirketi (“Company”) in accordance with Law No. 6698 on the Protection of Personal Data (“KVKK”) and the “Communiqué on the Principles and Procedures to Be Followed in Fulfilling the Obligation to Inform.” Its purpose is to inform website visitors about the collection, processing and protection of personal data through cookies used on the website located at https://ones.com.tr.Under Article 10 KVKK, the Company, as data controller, provides information on:

• the purposes for processing personal data
• the recipients of personal data and the purposes of transfer
• the method and legal grounds for collecting personal data
• the rights listed in Article 11 KVKK

Definitions

Cookie: Small text files stored on your device when you visit a website that contain data such as session information, preference settings and pages visited.

Types of Personal Data Processed

• IP address
• Session duration and information
• Browser type and language
• Pages viewed
• On-site navigation and preference data

Purposes of Processing Personal Data

• Ensuring the website operates securely, quickly and user-friendly
• Performing statistical analysis on site usage
• Improving user experience and personalising services
• Detecting site errors and performance issues

(For the detailed purpose list, see Personal Data Processing and Protection Procedure.)

Processing of Special Categories of Personal Data

The Company does not process any special-category personal data via cookies.

Methods and Legal Grounds for Collecting Personal Data

Your data are obtained automatically through cookies via your browser and are processed on the following legal grounds in Article 5 KVKK:

• Your explicit consent
• Necessity for the legitimate interests of the data controller, provided fundamental rights and freedoms are not harmed

Cookie Types Used

Technical Cookies	Required for site security and basic functionality	No
Functional Cookies	Remember user preferences (e.g., language)	Yes
Performance & Analytics Cookies	Analyse visit numbers and usage habits to improve the site	Yes
Personalised Cookies	Provide customised content and recommendations	Yes
Third-Party Cookies	Display interest-based advertising by partners	Yes

Sample Cookies

Sample cookies used on https://ones.com.tr

Cookie Name	Cookie Type	Domain	Lifespan	Description
_ga*	Third-party	.ones.com.tr	1 year	Set by Google Analytics. Assigns a randomly generated number as a client identifier. More info: How Google uses cookies – Privacy & Terms – Google
cfz*	Third-party	.ones.com.tr	1 year	Set by Cloudflare to support Cloudflare Bot Management. More info: Cloudflare Cookies

Recipients of Personal Data and Purposes of Transfer

Collected data may be shared only with site administrators, IT service providers and, where necessary, legal authorities. Limited data may be shared with advertising partners for advertising cookies.

Retention Period of Personal Data

Personal data processed for the purposes stated in this notice are retained in accordance with the retention and destruction schedule defined in the Personal Data Processing and Protection Procedure / Deletion, Destruction and Anonymisation of Data and are then deleted, destroyed or anonymised.

Rights Concerning Personal Data

Under Article 11 KVKK you have the right to:

• Learn whether your personal data are processed;
• Request information if they are processed;
• Learn the purpose of processing and whether they are used appropriately;
• Know the third parties to whom they are transferred;
• Request correction of incomplete or inaccurate data;
• Request deletion or destruction when processing reasons cease;
• Object to results produced solely by automated processing;
• Request compensation for damage caused by unlawful processing.

Application Procedure

You may submit your requests under Article 11 KVKK in writing or via registered electronic mail (KEP), secure electronic signature or your e-mail address registered in our system:

• Written application: Send the completed KVKK Application Form to the Company address.
• KEP: Send via our KEP address.
• E-mail: Send from your registered e-mail address to ik

Your request will be concluded free of charge within 30 days of receipt. If the action requires a cost, the tariff set by the Personal Data Protection Board will apply.