This privacy notice has been prepared pursuant to Article 10 of Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform, in order to inform individuals who visit the https://www.guneyss.com/ website and use the contact and quote forms on the site.

1. Data controller

Your personal data is processed by GÜNEYSS, in its capacity as data controller, within the scope described below.

Company name: GÜNEYSS
Address: Tuzla, Istanbul
Email: info@guneyss.com
Phone: +90 545 206 13 74

2. Personal data processed

The following data may be processed through the forms on our website and during form submission:

Identity information: First and last name
Contact information: Phone number, email address
Customer transaction information: Company name, the sector you select, the product or service you are interested in, and the content of your message and request
Form attachments: Photos, technical drawings and document files you optionally attach to the quote form (JPG, PNG, WebP, HEIC, PDF, DWG/DXF), and any information these files may contain (e.g., photo metadata)
Transaction security information: IP address, browser and device information, date and time of form submission

Our forms do not request special categories of personal data (health data, biometric data, etc.); we kindly ask you not to enter such data in the message field.

3. Method of collection

Your personal data is collected electronically when you fill in the forms on our website; transaction security information is collected automatically by the server during form submission. The site uses a session cookie required for the forms to work securely. If you contact us by phone, email or WhatsApp, the information you share is processed for the same purposes; for WhatsApp conversations, the service provider's own privacy terms also apply.

Cookies: In addition to the session cookie needed for the forms to work securely, the site uses a language cookie that remembers the language you chose (1 year) and Google Analytics cookies (_ga, _ga_*; up to 2 years) to measure visit statistics. The statistics cookies are not used for advertising or profiling. They are on by default; you can decline them at any time via the "Cookie preferences" link at the bottom of the page, and they are deleted when you decline. For visits from the European Union, the United Kingdom and Switzerland, statistics cookies are used only if you give your consent. Statistics data may be processed on Google's servers abroad.

4. Purposes of processing

Receiving, evaluating and responding to your contact and quote requests
Carrying out technical assessments and preparing quotes for the products and services you request
Conducting pre-contract discussions and initiating the order process
Ensuring the security of the website and form infrastructure, and preventing misuse and unsolicited submissions
Fulfilling legal obligations and providing information to authorized institutions
Establishing, exercising and protecting rights in the event of potential disputes

5. Legal grounds

Your personal data is processed on the following legal grounds set out in Article 5(2) of the KVKK:

Processing the personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of that contract (Art. 5/2-c): quote requests and pre-contract discussions
Processing is mandatory for the data controller to fulfill its legal obligations (Art. 5/2-ç)
Processing is mandatory for the establishment, exercise or protection of a right (Art. 5/2-e)
Processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (Art. 5/2-f): responding to your request and ensuring site security

Unless your separate consent is obtained, the contact information you submit through the forms is not used to send commercial electronic messages (campaigns, newsletters, etc.).

6. Transfer of personal data

Limited to the purposes above and in accordance with Articles 8 and 9 of the KVKK, your personal data may be transferred to the suppliers from whom we obtain website hosting, email and information technology services; to cargo and logistics companies where necessary to fulfill your request; to our legal and financial advisors; and, upon request and to the extent permitted by law, to authorized public institutions and organizations and judicial authorities.

If the servers of the hosting or email services used are located abroad, the transfer is carried out in accordance with the conditions set out in Article 9 of the KVKK. Your personal data is not sold and is not shared with third parties for marketing purposes.

7. Retention period

Your personal data is retained for the period required by the purpose of processing and for the retention periods stipulated in the relevant legislation. Quote and contact records are kept for the period required by the business relationship, taking statutory limitation periods into account. When these periods expire, the data is deleted, destroyed or anonymized in accordance with the Regulation on the Deletion, Destruction or Anonymization of Personal Data.

Files attached to the quote form are stored in a protected server area that cannot be accessed through the website, and are viewed only by the authorized personnel evaluating your request. Files are kept for as long as required to evaluate the request and for any resulting business relationship; you may request their deletion at any time through the channels described in Section 9. We kindly ask you to make sure that the photos you attach do not contain personal data belonging to third parties (faces, license plates, etc.).

8. Your rights as a data subject

Pursuant to Article 11 of the KVKK, by applying to the data controller, you may:

learn whether your personal data is being processed;
request information about the processing if your data has been processed;
learn the purpose of the processing and whether the data is used in line with that purpose;
know the third parties in Türkiye or abroad to whom the data has been transferred;
request the correction of the data if it has been processed incompletely or inaccurately;
request the deletion or destruction of the data under the conditions set out in Article 7 of the KVKK;
request that the third parties to whom your personal data has been transferred be notified of any correction, deletion or destruction;
object to any outcome against you arising from the analysis of the processed data exclusively by automated systems;
request compensation for any damage you suffer due to the unlawful processing of your personal data.

You are entitled to all of the rights listed above.

9. How to apply

You may submit requests regarding your rights, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, together with information that identifies you and a description of your request, through the following channels:

by a petition bearing your wet signature, delivered in person or through a notary public to Tuzla, Istanbul;
signed with a secure electronic signature or a mobile signature, to info@guneyss.com;
from the email address you have previously provided to us and that is registered in our system, to info@guneyss.com.

Applications are concluded free of charge as soon as possible, and within thirty days at the latest, depending on the nature of the request; if the process involves an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board. If your application is rejected, if you find the response insufficient, or if no response is given within the required time, you may file a complaint with the Personal Data Protection Board pursuant to Article 14 of the KVKK.

This notice may be updated in line with changes in the legislation and in our data processing activities; the current version is published on this page.

Privacy Notice (KVKK)