This Personal Data Processing and Protection Information Notice (“Information Notice”) has been prepared by GURUTECH BİLİŞİM TEKNOLOJİLERİ SAN. VE TİC. LTD. ŞTİ. (GURUTECH) in order to fulfill our obligation to inform you, as data subjects, within the scope of the protection of personal data pursuant to the Law No. 6698 on the Protection of Personal Data (“KVKK”). With this Information Notice, the procedures that our company must follow during the processing of your personal data, as well as your rights and freedoms, are explained.
1. What Is the Legal Basis for Processing Personal Data and For What Purposes Is It Processed?
Pursuant to Articles 4, 5, and 6 of the KVKK No. 6698, your personal data may be processed within the scope of the services we will provide, based on the instructions and applications we receive from you, within the obligations and limits arising from the applicable legislation, for the purposes of enabling you to benefit from the services offered and to do so smoothly, providing the services within the scope of the contract, making the necessary notifications regarding the service you purchase during the contract term, informing you about relevant campaigns, storing information, reporting, and complying with our information obligations. In this context, we may carry out processing operations deemed as “Data Processing” under KVKK—such as obtaining, recording, storing, updating, classifying, sharing with third parties permitted by the legislation, or transferring to them—regarding your personal and special categories of personal data, including identity information, contact information, legal transaction and compliance information, request and complaint management information, visual and audio data, customer data, and customer transaction data. For this reason, your personal data may be processed for purposes such as preparing all records and documents required to complete your transactions in oral or electronic environments, planning, auditing, and implementing corporate sustainability, corporate governance, strategic planning, and information security processes, and fulfilling our administrative and legal obligations. Therefore, your personal data is processed within the limitations prescribed by law for the purposes of enabling our Company’s products and services to be offered, establishing communication regarding the product and service you have received/will receive, and—if you have given permission—being used in marketing activities; as well as for product/service offers, modeling, reporting, scoring, risk monitoring, intelligence, existing or new product studies of our Company and its affiliates, identification of potential customers, and in connection with capital markets activities. The personal data collected may be processed by our Company and its affiliates within the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK Law for the purposes of carrying out the necessary work by our business units to enable you to benefit from the products and services offered by our Company and its affiliates; recommending and customizing the products and services offered by our Company and its affiliates according to your preferences, usage habits, and needs; ensuring the legal and commercial security of our Company, its affiliates, and persons who have a business relationship with our Company (administrative operations for communication carried out by our Company, ensuring and auditing the physical security of company locations, affiliate customer evaluation/complaint management processes, reputation research processes, event management, legal compliance process, audit, finance, etc.); determining and implementing our Company’s commercial and business strategies; and ensuring the execution of our Company’s human resources policies.
2. To Whom and For What Purpose the Processed Personal Data May Be Transferred
Your collected personal data may be shared within the scope of the principles set forth by the legislation on the protection of personal data with our Company and its affiliates for the necessary work to be carried out by our business units so that you may benefit from the products and services offered; with our Company’s domestic and foreign direct or indirect shareholders, affiliates, parent partners, and group companies; with program partners with whom it has signed agreements; with third parties with whom it carries out co-branding efforts; and with persons, institutions, and organizations (including public legal entities) with whom sharing may be necessary for the provision of its services and who are permitted by legislation; with other persons, institutions, and organizations permitted by legal regulations; and with other third parties located domestically and abroad from whom it receives services.
3. What Are the Rights of the Personal Data Subject Listed in Article 11 of the KVKK Law?
Pursuant to the KVKK Law, you have the right to request information if your personal data has been processed; to learn the purpose of processing your personal data and whether it is used in accordance with that purpose; to know the third parties to whom your personal data is transferred domestically or abroad; to request correction of your personal data if it is processed incompletely or incorrectly; to request deletion or destruction of your personal data; to request that the correction, deletion, or destruction operations be notified to third parties to whom your personal data has been transferred; to object to the emergence of a result against you by analyzing your processed personal data exclusively through automated systems; and to request compensation for damages in case you suffer damages due to unlawful processing of your personal data. As a personal data subject, in the application you will make to exercise your rights specified above, it is required that the subject of your request is clear and understandable, that the requested matter relates to you, or if you are acting on behalf of someone else, that you are specifically authorized and you document your authorization, that the application includes identity and address information, and that documents verifying your identity are attached to the application. As personal data subjects, you may submit your requests regarding your rights to our Company by filling out the application form available on our website and delivering a signed copy of the form in person together with documents identifying you to the address İçerenköy Mh. Topçu İbrahim Sk. AND Ofis Sit. No: 8-10D/5 34752 Ataşehir / İstanbul, or by sending it through a notary public or via other methods specified in the KVKK Law, or by sending the relevant form to [email protected] with a secure electronic signature. In such case, the Company will finalize the request as soon as possible and at the latest within thirty (30) days depending on the nature of the request. However, if the transaction requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board will be charged by the Company.
4. For How Long Will the Data Be Retained?
Your personal data will be processed provided that it is not used for purposes other than those notified to you with this Information Notice, and it will be retained for the legal retention periods stipulated in the relevant legislation. At the end of these periods, pursuant to Article 7 of the KVKK, the Data will be deleted, destroyed, or anonymized officially or upon your request.
Trade Registry No: 110826 - 5
Mersis No: 0412073847400001
Trade Name: GURUTECH BİLİŞİM TEKNOLOJİLERİ SAN. VE TİC. LTD. ŞTİ.
Address: İçerenköy Mh. Topçu İbrahim Sk. AND Ofis Sit. No: 8-10D/5 34752 Ataşehir / İstanbul
Website: www.gurutech.com.tr
Head Office Phone: 0850 532 4878