1. Data Controller
- Data Controller: GM YAZILIM A.Ş. (GirisimEngineering)
- Address: Caferağa Mah. Şifa Sk. No:19, Kolektif House, 34710 Moda – Kadıköy / Istanbul, Türkiye
- Email: info@girisimengineering.com
- Telephone: +90 551 254 53 30
2. Personal Data We Process
Depending on your interaction with the website, we may process the following categories of personal data:
We do not request special categories of personal data. Please do not submit health data, biometric or genetic data, religious beliefs, political opinions, criminal conviction information, unnecessary identity documents or other sensitive personal data through our contact forms.
- Identity and contact information: name and surname, business email address and telephone number.
- Professional and commercial information: company name, industry or application area, solution of interest and similar information relating to your business request.
- Request information: message content, volume or quantity information where provided, and the contents of any file you voluntarily upload.
- Website usage and security information: IP address, access date and time, server logs, browser and device information, as well as the page, language, solution or manufacturer context from which a form request originates.
3. Purposes and Legal Grounds for Processing
Submitting a contact form does not, by itself, constitute consent to receive advertising or marketing communications. Where commercial electronic communications are sent for marketing or promotional purposes, the separate legal requirements and consent mechanisms required by applicable law will be followed.
| Purpose | Legal Ground under the KVKK |
|---|---|
| Responding to enquiries and evaluating technical or commercial requirements; arranging meetings, samples, quotations and related commercial processes. | KVKK Article 5/2(c), where directly related to the establishment or performance of a contract; and Article 5/2(f), where processing is necessary for the legitimate interests of the Company, provided that the fundamental rights and freedoms of the data subject are not harmed. |
| Maintaining records of requests and correspondence; protecting legal rights in connection with disputes, audits or legal proceedings. | KVKK Article 5/2(e), where processing is necessary for the establishment, exercise or protection of a right; and, where applicable, Article 5/2(ç), for compliance with a legal obligation. |
| Maintaining the security of the website and communication infrastructure; detecting misuse, unauthorised access or technical errors. | KVKK Article 5/2(f), where processing is necessary for the legitimate interests of the Company, provided that the fundamental rights and freedoms of the data subject are not harmed; and, where applicable in the specific circumstances, Article 5/2(e). |
4. How We Collect Personal Data
Personal data may be collected electronically through the website and contact or quotation forms, email or telephone communications, files voluntarily provided by users, and website or server security logs. Data may be collected through wholly or partly automated means or, where applicable, through non-automated means forming part of a data filing system.
5. Transfer of Personal Data
Personal data may be shared, only to the extent necessary for the purposes described above, with authorised employees of the Company; information technology, hosting and email service providers; the relevant represented manufacturer or solution partner where required to technically or commercially evaluate your request; legal or financial advisers; and legally authorised public authorities and institutions.
Where personal data must be transferred abroad because a service provider, represented manufacturer or other recipient is located outside Türkiye, such transfer will be carried out in accordance with Article 9 of the KVKK and the Regulation on the Procedures and Principles Regarding the Transfer of Personal Data Abroad dated 10 July 2024, relying on the transfer mechanism applicable to the specific transfer, including an adequacy decision, appropriate safeguards such as standard contractual clauses published by the Personal Data Protection Board, or another exception or mechanism permitted by law.
6. Retention Period
Personal data is retained for as long as necessary for the purposes for which it was processed and for any applicable statutory retention or legal obligation periods. When the applicable retention period expires, personal data will be deleted, destroyed or anonymised in accordance with Article 7 of the KVKK and applicable legislation.
7. Your Rights Under Article 11 of the KVKK
Requests regarding your personal data may be submitted to the Company in writing at the address stated above or by one of the electronic methods permitted under the Communiqué on the Procedures and Principles of Application to the Data Controller. Where your email address has previously been registered in the Company’s systems, you may also submit your request to info@girisimengineering.com. Applications will be concluded as soon as possible and, in any event, within 30 days, depending on the nature of the request.
- Learn whether your personal data is being processed and, if so, request information about such processing.
- Learn the purpose of processing and whether your personal data is being used in accordance with that purpose.
- Learn the third parties in Türkiye or abroad to whom your personal data has been transferred.
- Request correction of incomplete or inaccurate personal data.
- Request deletion or destruction of personal data where the applicable legal conditions are met, and request notification of such actions to third parties to whom the data has been transferred.
- Object to a result arising against you solely through the automated analysis of processed personal data.
- Request compensation where you suffer damage as a result of unlawful processing of personal data.
8. Effective Date and Updates
This Privacy Notice was last updated on 31 August 2026. Where our personal data processing activities or applicable legislation change, this notice may be updated and the current version will be published on the website.