INFORMATION NOTICE ON THE PROTECTION OF PERSONAL DATA

Last updated: October 7, 2026

MUP ROOT OYUN TASARIM VE İNOVASYON LİMİTED ŞİRKETİ (“ROOT”) attaches importance to the protection of your personal data. This Information Notice has been prepared under Turkish Personal Data Protection Law No. 6698 (“KVKK”) to explain, in our capacity as data controller, the purposes and legal grounds for which we may process your personal data, the parties to whom and purposes for which it may be transferred, our data collection methods, and your rights under the KVKK.

1. Data Controller

MUP ROOT OYUN TASARIM VE İNOVASYON LİMİTED ŞİRKETİ
Vişnezade Mah. Süleyman Seba Cad. No:79 İç Kapı No:1, Beşiktaş, 34357 Istanbul, Türkiye
Phone: +90 535 718 36 30
Email: hello@root.work
MERSIS No: 0624184633000001
Tax Office: Beşiktaş
Tax No: 6241846330

2. Personal Data We May Process

Depending on your relationship with ROOT and the services you use, we may process identity and contact information; delivery and billing information; order, payment and transaction information; customer service correspondence and requests; marketing and communication preferences; and Site usage, device, IP address, cookie and similar online usage data. The processing of payment card information is subject to the processes of the payment infrastructure and relevant payment service providers used for the transaction.

3. Purposes and Legal Grounds for Processing Personal Data

Your personal data may be processed for purposes including receiving and fulfilling orders, managing payment and invoicing processes, delivering products and managing returns, responding to customer requests, maintaining the security and operation of the Site, preventing fraud and misuse, complying with legal obligations, establishing, exercising or protecting legal rights, and improving our services.

Marketing and commercial electronic communications are carried out, where required, on the basis of consent, explicit consent or another appropriate legal ground provided under applicable law.

Depending on the specific processing activity, your personal data may be processed on the legal grounds set out in Article 5 and, where relevant, Article 6 of the KVKK, including where processing is directly related to the establishment or performance of a contract, necessary for compliance with a legal obligation, necessary for the establishment, exercise or protection of a right, necessary for the legitimate interests of the data controller provided that the fundamental rights and freedoms of the data subject are not harmed, or based on explicit consent where required.

4. Methods of Collecting Personal Data

Your personal data may be collected electronically or physically through the root.work website, order and payment processes, email and other communication channels, customer service, social media interactions, cookies and similar technologies, and service providers or other parties with whom we work.

5. Transfer of Personal Data

To the extent necessary to fulfill the purposes described above and provide our services, your personal data may be transferred, in accordance with the KVKK and applicable law, to providers of ecommerce infrastructure, payment, shipping and logistics, information technology, hosting, communications, analytics, marketing, accounting and consultancy services, as well as to competent public authorities and institutions.

Where personal data is transferred abroad, the applicable transfer mechanisms and safeguards under Article 9 of the KVKK and the By-Law on the Procedures and Principles for the Transfer of Personal Data Abroad are applied. Depending on the circumstances of the transfer, these may include an adequacy decision, standard contracts published by the Turkish Personal Data Protection Board, or other appropriate safeguards and exceptional transfer mechanisms provided by law.

6. Retention and Security of Personal Data

Your personal data is retained for as long as necessary for the purposes for which it is processed and for the retention periods required by applicable law. When the reasons requiring processing cease to exist, personal data is deleted, destroyed or anonymized in accordance with the KVKK and applicable legislation.

ROOT takes technical and administrative measures appropriate to the nature of the processing activity to prevent unlawful processing of and access to personal data and to ensure that personal data is stored securely.

7. Your Rights Under Article 11 of the KVKK

Under Article 11 of the KVKK, you have the right to apply to the data controller to:

  • learn whether your personal data is being processed,
  • request information if your personal data has been processed,
  • learn the purpose of processing and whether your personal data is used in accordance with that purpose,
  • know the third parties to whom your personal data is transferred in Türkiye or abroad,
  • request correction of incomplete or inaccurate personal data,
  • request deletion or destruction of your personal data under the conditions set out in Article 7 of the KVKK,
  • request notification to third parties to whom your personal data has been transferred of any correction, deletion or destruction carried out,
  • object to a result arising against you through the analysis of processed data exclusively by automated systems,
  • request compensation for damage arising from the unlawful processing of your personal data.
8. Applications and Contact

You may submit requests concerning your rights under the KVKK to MUP ROOT OYUN TASARIM VE İNOVASYON LİMİTED ŞİRKETİ using the methods prescribed by applicable law. Applications will be concluded as soon as possible according to the nature of the request and within the period prescribed by law.

Contact:
MUP ROOT OYUN TASARIM VE İNOVASYON LİMİTED ŞİRKETİ
Vişnezade Mah. Süleyman Seba Cad. No:79 İç Kapı No:1, Beşiktaş, 34357 Istanbul, Türkiye
Phone: +90 535 718 36 30
Email: hello@root.work