Privacy Policy

Data Controller

Address: İnönü mah. Cumhuriyet cd. No:123 Kat 9 34357 / ŞİŞLİ / İSTANBUL

E-mail: iletisim@gulenayva.com

Purpose and Scope of the Policy

This Policy determines the processing conditions of personal data and in the processing of personal data of the Company. It sets out the main principles adopted by the Company. In this framework, the Policy covers all personal data processing activities by the Company within the scope of the Law, the owners of all personal data processed by the Company and all personal data processed by the Company.

Enforcement and Changes to Privacy Policy

The policy is published by the Company on its website and presented to the public. In case of conflict with the legislation in force, especially the Law, and the regulations included in this Policy, the provisions of the legislation shall apply.

The Company reserves the right to revise or alter the content of this Privacy Policy in any manner and at any time, without notice. The current version of the Policy is available on the Company website. Your subsequent and/ or continued use of any portion of the website following a posting of changes to the Privacy Policy will constitute your acceptance of such changes.

Conditions for Processing of Personal Data

1- Personal data shall not be processed without obtaining the explicit consent of the data subject.

2- Personal data may be processed without obtaining the explicit consent of the data subject if one of the below conditions exists:

a) It is expressly permitted by any law;

b) It is necessary   in order to protect the life or physical integrity of the data subject or another person where the data subject is physically or legally incapable of giving consent;

c) It is necessary to process the personal data of parties of a contract, provided that the processing is directly related to the execution or performance of the contract;

ç) It is necessary   for compliance with a legal obligation which the controller is subject to;

d) The relevant information is revealed to the public by the data subject herself/himself;

e) It is necessary for the institution, usage, or protection of a right;

f) It is necessary   for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed.

Your Express Consent

We reserve the right to collect such personally identifiable information as, name, address, telephone number, e-mail address, etc., as well as demographic and profile data such as IP address, internet domain or browser, referrer or user agent information or other relevant information that we use as part of our data collection process, such as the use of cookies or certain other information you may provide to us, etc. ('Personal Information') as set forth in this Privacy Policy.

If you do not agree with any of the terms and conditions set forth in the Privacy Policy, or have any questions, please contact us directly at  iletisim@gulenayva.com.

By accessing or using the Web Site, you grant, a non-exclusive, worldwide, royalty-free perpetual license to use your Personal Information for the purposes set forth herein.

Collection/ Use of Data

When you access or use the Web Site, we may capture, store or use any Personal Information that

As part of our normal data collection process, the Web Site may deposit 'cookies' in your computer in order to identify you and/ or as a means of tracking the validity of sessions. You can access our Cookie Policy on our website. No cookies used by Gulenayva are stored permanently on your computer. All cookies are automatically removed from your computer either when you close your browser or your session times out.

We never sell, give, share, or disclose any Personal Information we collect by or through the Web Site, except as set forth in this Privacy Policy.

We reserve the right to share your information with our legally affiliated entities. In the event that the Company is merged, or in the event of a transfer of our assets, Web Site or operations, we reserve the right to disclose or transfer your Personal Information in connection with any such activity.

When specifically requested by the user or visitor, we may use customer contact information provided to us about our company and services.

The customer's contact information may also be used to contact the user or visitor when necessary.

Rights of Data Subject

Everyone, in connection with herself/himself, has the right to;

a) Learn whether or not her/his personal data have been processed;

b) Request information as to processing if her/his data have been processed;

c) Learn the purpose of processing of the personal data and whether data are used in accordance with their purpose;

ç) Know the third parties in the country or abroad to whom personal data have been transferred;

d) Request rectification in case personal data are processed incompletely or inaccurately;

e) Request deletion or destruction of personal data within the framework of the conditions set forth under article 7 of the Law;

f) Request notification of the operations made as per indents (d) and (e) to third parties to whom personal data have been transferred;

g) Object to occurrence of any result that is to her/his detriment by means of analysis of personal data exclusively through automated systems;

ğ) Request compensation for the damages in case the person incurs damages due to unlawful processing of personal data

by applying to the data controller.

Disposal Of Personal Data

Personal data processed within the framework of the Company activities are stored within the framework of the purpose of processing and for the periods necessary to achieve this purpose and for the storage period stipulated in the framework of the relevant legislation.

The data that has lost its function, whose storage period has expired, and which is requested to be destroyed by the data owner, if possible within the framework of the legislation, is destroyed by using the appropriate method of deletion, destruction or anonymization of the personal data listed in Article 7 of the Law.

Deletion of personal data is the process of making personal data inaccessible and non- reusable for relevant users.

Destruction of personal data is the process of making personal data inaccessible, unrecoverable and unusable by anyone in any way.

Anonymization of personal data means that personal data cannot be associated with an identified or identifiable natural person under any circumstances, even if it is matched with other data.

Matters Regarding The Protection Of Personal Data

In accordance with Article 12 of the Law, the Company takes the necessary technical and administrative measures to ensure the appropriate level of security in order to prevent the unlawful processing of the Personal Data it processes, to prevent illegal access to the data and to ensure the preservation of the data, and in this context, the necessary audits are carried out.

Protection of Personal Information Against Third-Party Access or Use

Although we will strive to take commercially reasonable security precautions regarding all Personal Information, visitors or users to the Web Site acknowledge and agree that the Company does not control the transfer of information or data via the Web Site or over any other electronic facilities or media.

Third Party Web Sites

You may be able to access certain third-party websites through links on the Web Site. We are not, however, responsible for any other websites, their respective privacy policies or other content nor how they treat information about their visitors or users. We strongly advise you to check their privacy policies to find out how they are treating your Personal Information.

Exceptions

Personal data owners cannot claim the above-mentioned rights in these matters, since the following cases are excluded from the scope of the Law in accordance with Article 28 of the Law;

a) Processing of personal data by natural persons in the course of a purely personal or household activity, provided that obligations relating to data security are complied with and data are not transferred to third parties.

b) Processing of personal data for the purposes of official statistics and, through anonymization, research, planning, statistics and similar.

c) Processing of personal data for the purposes of art, history, and literature or science, or within the scope of freedom of expression, provided that national defence, national security, public safety, public order, economic safety, privacy of personal life or personal rights are not violated.

ç) Processing of personal data within the scope of preventive, protective and intelligence- related activities by public institutions and organizations who are assigned and authorized for providing national defence, national security, public safety, public order or economic safety.

d) Processing of personal data by judicial authorities and execution agencies with regard to investigation, prosecution, adjudication or execution procedures.

- On the condition of being relevant and proportionate to the purpose and general principles of the Law, article 10 which regulates the obligation of the data controller to inform; except for right to request compensation, article 11 which regulates the rights of the data subject; and article 16 which regulates the obligation to register with the Data Controllers Registry shall not apply in the following cases:

a) Processing of personal data is necessary for prevention of crime or investigation of a crime.

b) Processing of personal data revealed to the public by the data subject herself/himself.

c) Processing of personal data is necessary, deriving from the performance of supervision or regulatory duties, or disciplinary investigation or prosecution by assigned and authorized public institutions and organizations and professional organizations with public institution status.

ç) Processing of personal data is necessary for the protection of economic and financial interests of the state related to budget, tax, and financial matters.

No Warranty

You understand that the company does not to provide any warranty, guarantee or representation of any kind concerning our ability to control, collect, correct, access, process, use, store, protect or transfer any personal information or concerning the existence or effectiveness of any security measures undertaken by us. you agree that the company will not be liable for any claims, losses, or damages of any kind whatsoever which may result from the access, disclosure, use or modification by any party not authorized or authorized by us, or the introduction of viruses, worms, or other harmful elements into the system and their possible effects on personal information contained on the web site. by accessing or using the web site, you acknowledge that you understand and agree to assume these risks.