Website Cookie Privacy Notice

Luminis Lojistik Teknoloji Ticaret Danışmanlık Hizmetleri Limited Şirketi

Effective Date: April 20, 2026

This privacy notice has been prepared by Luminis Lojistik Teknoloji Ticaret Danışmanlık Hizmetleri Limited Şirketi (hereinafter referred to as "Luminis" and "COMPANY"), in its capacity as data controller, in accordance with Article 10 of Law No. 6698 on the Protection of Personal Data (hereinafter referred to as the "Law") for the purpose of fulfilling the obligation to inform regarding personal data collected through cookies installed on the Rota mobile application, https://rota-app.com, and https://my.rota-app.com, which are interconnected and serve a common purpose.

As the Company, we use cookies to improve your experience, enhance application usability, and utilize visual features during your visits to our online platforms. The use of cookies is conducted in accordance with the legislation to which we are subject, primarily Law No. 6698 on the Protection of Personal Data ("KVKK").

The purpose of this Cookie Policy Privacy Notice is to inform you about the processing of personal data obtained through the use of cookies by Site users/members/visitors ("Data Subject").

We may cease using the cookies used on our site or add new cookies. Therefore, we reserve the right to change the provisions of this cookie policy. Any changes made to the current cookie policy will come into effect upon publication on the site or any publicly accessible medium.

For more detailed information regarding the purposes of processing your personal data by Luminis, to whom and for what purpose the processed data may be transferred, the method and legal basis of personal data collection, and your rights under Article 11 of the Law and other rights granted under Law No. 6698 on the Protection of Personal Data, you may contact us at privacy@rota-app.com.

What Is a Cookie?

Cookies are small text files stored on your device or network server by the websites you visit through browsers.

Which Personal Data Do the Cookies in Our Application Process and for What Purposes?

We process your personal data through various cookies used on our site for the following purposes:

Performing Essential Functions Required for the Site to Operate

For example, so that logged-in members do not need to re-enter their passwords when visiting different pages on the Site, providing usage practicality. Email, company information, team size, position in the company, and notes specifically entered by the user are used for basic functions.

Analyzing the Site and Improving Site Performance

For example, integration of different servers on which the Site operates, determining the number of visitors to the Site and adjusting performance settings accordingly, or making it easier for visitors to find what they are looking for. Automatically collected data such as UTM parameters, download page, browser information.

Enhancing Site Functionality and Providing Ease of Use

For example, sharing on third-party social media platforms through the Site, remembering usernames or search queries for visitors on their subsequent visits.

Cookies Used on Our Site

Below you can find the different types of cookies we use on our site. Our site uses both first-party cookies (placed by the site you visit) and third-party cookies (placed by servers other than the site you visit).

Pursuant to Articles 5 and 8 of KVKK and in the presence of exceptions in the relevant legislation, your personal data may be processed for the above purposes in accordance with your consent where required by legislation, and without consent in other cases. The main situations where consent is not required are:

• Explicit legal provision,
• Processing is necessary to protect the life or physical integrity of the person who is unable to express consent due to actual impossibility, or whose consent is not legally valid, or of another person,
• Processing is necessary provided that it is directly related to the establishment or performance of a contract between the Data Subject and the Company,
• Processing is mandatory for the Company to fulfill its legal obligations,
• The Data Subject has made the data public themselves,
• Processing is necessary for the establishment, use, or protection of a right,
• Processing is necessary for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the Data Subject.

How Can I Control the Use of Cookies?

You have the ability to personalize your preferences regarding cookies by changing your browser settings.

To Whom and for What Purpose May Your Processed Personal Data Be Transferred?

Your personal data may be transferred to relevant public institutions and relevant private institutions and organizations for the resolution of disputes or pursuant to legislation, to judicial authorities or relevant law enforcement upon request, to support providers and information processing service providers, in accordance with the conditions for the transfer of personal data and transfer abroad specified in Articles 8 and 9 of the Law.

What Is the Method and Reason for Personal Data Collection?

Your personal data is processed through automatic methods in accordance with Article 5 of the Law, without causing harm to the fundamental rights and freedoms of the data subject, to fulfill our legal obligations, for reasons stipulated by law, and for our legitimate interests, provided that it is part of a data recording system.

What Are the Rights of the Data Subject Under Article 11 of the Law?

As a personal data subject, we hereby inform you that you have the following rights under Article 11 of the Law:

• To learn whether your personal data is processed,
• To request information if your personal data has been processed,
• To learn the purpose of processing your personal data and whether it is used in accordance with that purpose,
• To know the third parties to whom your personal data is transferred within or outside Turkey,
• To request the correction of your personal data if incompletely or incorrectly processed, and to request that such correction be communicated to third parties to whom your personal data has been transferred,
• To request the deletion or destruction of your personal data when the reasons requiring its processing have ceased, despite being processed in accordance with the Law and other relevant legislation, and to request that such deletion or destruction be communicated to third parties to whom your personal data has been transferred,
• To object to the occurrence of a result against yourself due to the analysis of your processed data exclusively through automated systems,
• To request compensation for damages incurred due to the unlawful processing of your personal data.

You may submit your applications regarding the above-listed rights by filling out the Data Subject Application Form available at rota-app.com/legal or physically obtainable from us, and by mailing it to our Company's address at Küçükbakkalköy Mah. Yüksel Sk. No: 10 A Ataşehir/İstanbul, Turkey, by emailing it to privacy@rota-app.com, or by delivering it physically. Depending on the nature of your request, your applications will be finalized free of charge as soon as possible and no later than thirty days; however, if the operation requires additional cost, a fee may be requested from you in accordance with the tariff determined by the Personal Data Protection Board. In case of rejection of the request, the reason(s) for rejection will be communicated to you in writing or electronically with justification.

This document is provided for informational purposes only. The legally binding version is the Turkish original.