Privacy & Data Subject Request Procedure
URly / urly.tr
Authoritative English version • Effective date: [INSERT EFFECTIVE DATE]
This procedure explains how users can exercise privacy rights under applicable law.
1. Submission
Send a request to legal@urly.tr. State the relevant account/email if applicable, requested right and sufficient information to locate the record.
2. Rights
Access, correction, deletion, restriction, objection, portability, withdrawal of consent and applicable automated-decision rights.
3. Identity verification
Reasonable verification may be requested to prevent unauthorized disclosure.
4. Clarification
We may request clarification where a request is too broad or ambiguous.
5. Response timing
URLy will respond within applicable legal deadlines. Where law allows extensions, the requester may be informed.
6. Fees
Requests are generally handled without charge unless applicable law permits a reasonable fee for excessive or manifestly unfounded/repetitive requests.
7. Deletion limits
Information may remain where legally required, necessary for security, fraud prevention, disputes, legal claims or other lawful exceptions.
8. Third-party destinations
URLy cannot generally delete personal data held independently by a third-party destination website.
9. Appeals
Where applicable, users may request reconsideration of a refusal or limitation.
10. Request records
URLy may retain limited records of privacy requests for compliance, audit and security purposes.
11. Contact
legal@urly.tr.
Access scope
An access response may include categories, purposes, recipients, retention information and copies of personal data where legally required.
Correction
Users may identify inaccurate or incomplete personal information and request correction.
Deletion
Deletion may be limited where records must be retained by law or are necessary for legal claims, security or fraud prevention.
Restriction
Where applicable, processing may be restricted while accuracy, legality or objection is assessed.
Objection
An objection may be reviewed against the lawful basis and applicable exceptions.
Portability
Where portability applies, data may be provided in a structured, commonly used and machine-readable format.
Consent withdrawal
Withdrawing consent does not invalidate processing already lawfully performed before withdrawal.
Third-party data
URLy cannot generally correct or delete data held independently by a third-party destination.
Identity fraud prevention
Verification information itself should be minimized and protected.
Records of decisions
Limited records may be retained to demonstrate compliance with privacy obligations.