Güralsan Cookie Privacy Policy

The purpose of this Privacy Policy is Güralsan During the operation of the www.güralsancephe.com website operated by Ve Tic (“Company”)/, Platform users/members/visitors (“Data Owner”) shared with the Company or during the use of the Platform by the Data Owner. to determine the terms and conditions regarding the use of the personal data it produces.

The Data Owner declares that he has been informed about the processing of his personal data with this Privacy Policy and that he consents to the use of his personal data as specified here.

Which Data is Processed?

Under this heading, the data processed by the Company and considered as personal data in accordance with the Law on Protection of Personal Data No. 6698 are listed. Unless expressly stated otherwise, the term "personal data" will include the following information within the scope of the terms and conditions provided under this Privacy Policy:

• Customer information
• Device Information
• Behaviours
• Demographic Information

In accordance with Articles 3 and 7 of the Personal Data Protection Law, the data that has been irreversibly anonymized will not be considered as personal data in accordance with the provisions of the aforementioned law and the processing activities regarding this data will be carried out without being bound by the provisions of this Privacy Policy.

For What Purposes Are The Data Used?

The Company offers personal data to the relevant persons by customizing the products and services offered by the Company according to the tastes, usage habits and needs of the persons concerned; It may be processed for use within the scope of direct and indirect marketing activities and for transferring the Company's representatives, solution partners and third parties from whom it receives services for these purposes.

In accordance with Articles 5 and 8 of the Personal Data Protection Law and/or in case of exceptions in the relevant legislation, the Company will be able to process and share personal data with third parties without the consent of the Data Owner. The main of these situations are listed below:

• Clearly stipulated in the law,
• It is compulsory for the protection of the life or physical integrity of the person or another person, who is unable to express his consent due to actual impossibility or whose consent is not legally valid,
• It is necessary to process personal data, provided that it is directly related to the establishment or performance of any contract between the Data Owner and the Company,
• It is compulsory for the company to fulfill its legal obligations,
• Having been made public by the Data Owner himself,
• Data processing is mandatory for the establishment, exercise or protection of a right,
• Data processing is mandatory for the Company's legitimate interests, provided that it does not harm the fundamental rights and freedoms of the Data Owner.

Who Can Access the Data?

The Company may transfer its personal data and new data obtained using this personal data to third parties from whom the Company's services are used in order to achieve the purposes set out in this Privacy Policy, limited to the provision of such services. The Company will also be able to transfer the data to the Company's business partners and suppliers and legally authorized institutions and organizations for the purposes specified in this Privacy Policy.

The company aims to improve the data owner experience (including improvement and personalization), to ensure the security of the data owner, to detect fraudulent or unauthorized use, to investigate operational evaluation, to correct errors regarding Platform services, and to send SMS to fulfill any of the purposes in this Privacy Policy. It will be able to share it with third parties such as outsourcing service providers, hosting service providers (hosting services), law firms, research companies, call centers.

The data owner accepts that the aforementioned third parties may store the personal data of the data owner on their servers all over the world, provided that they are limited to the above-mentioned purposes, and they consent to this in advance.

About Right of Access to Data and Correction Requests

Data owners pursuant to Article 11 of the Law,

• Learning whether personal data is processed or not,
• If personal data has been processed, requesting information about it,
• Learning the purpose of processing personal data and whether they are used in accordance with its purpose,
• Knowing the third parties to whom personal data is transferred at home or abroad,
• Requesting correction of personal data in case of incomplete or incorrect processing and requesting notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,
• Requesting the deletion or destruction of personal data in the event that the reasons requiring its processing cease to exist despite the fact that it has been processed in accordance with the provisions of the law and other relevant laws, and requesting that the transaction carried out within this scope be notified to the third parties to whom the personal data has been transferred,
• Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
• Requesting the compensation of the damage in case of loss due to unlawful processing of personal data

has rights.

These rights are reserved by the personal data owners at the address of www.güralsancephe.com, Elektronik Bilgi Güvenlik A.Ş. If it is transmitted by the methods specified in the Policy on the Protection and Processing of Personal Data, it will be evaluated and finalized as soon as possible and in any case within 30 (thirty) days. Although it is essential not to charge any fee for the requests, the Company reserves the right to charge a fee based on the fee schedule determined by the Personal Data Protection Board.

The data owner accepts that he/she may not be able to fully benefit from the operation of the Platform if he/she makes a request that will result in the inability to use any of his personal data by the Company and declares that any responsibility arising in this context will be his/her own.

Retention Period of Personal Data

The company will keep the personal data provided by the data subject for as long as required by the above-mentioned processing purposes.

In addition, in case of any dispute that may arise between the Company and the data owner, the Company will be able to keep personal data limited to the purpose of making the necessary defenses within the scope of the dispute and during the statute of limitations determined in accordance with the relevant legislation.

Data Security Precautions and Commitments

The company, under the conditions determined in the relevant legislation or expressed in this Privacy Policy,

• Personal data is not processed unlawfully,
• Personal data is not illegally accessed and
• Retention of personal data

undertakes to take the necessary technical and administrative measures to ensure the appropriate level of security and to carry out the necessary inspections.

The Company cannot disclose the personal data obtained about the Data Owner to others in violation of the provisions of this Privacy Policy and the Law on the Protection of Personal Data, and cannot use it for purposes other than processing.

In case of linking to other applications on the platform, the Company does not bear any responsibility for the privacy policies and contents of the applications.

Cookies (Cookies)

Cookies are used on the Platform in order for the Data Owners to benefit from the Platform in the most efficient way and to improve the user experience. If you do not prefer the use of cookies, you can delete or block Cookies from your browser's settings. However, we would like to remind you that it may affect your use of the Platform.

• What is a cookie and why is it used?

Cookies are small text files that are stored on your device or network server via browsers by the websites you visit. For more detailed information about cookies, you can visit "www.aboutcookies.org" and "www.allaboutcookies.org".

The main purposes of using cookies on our website are listed below:

• To improve the services offered to you by increasing the functionality and performance of the website,
• To improve the Website and to offer new features on the Website and to customize the features offered according to your preferences;
• To ensure the legal and commercial security of the Website, you and our Company.
• To use within the scope of direct and indirect marketing activities
• Categories of Cookies Used on the Site

• Cookies Used on the Platform

• Can the Use of Cookies Be Blocked by Data Owners?

Data owners have the opportunity to customize their preferences for cookies by changing their browser settings. If the browser used offers this possibility, it is possible to change the preferences regarding cookies through the browser settings. Thus, although it may differ according to the possibilities offered by the browser, data owners have the opportunity to prevent the use of cookies, to receive a warning before the use of cookies, or to disable or delete only some cookies.

Preferences for cookies may need to be made separately for each device from which the user accesses the platform.

• Changes to the Privacy Policy

The Company may change the provisions of this Privacy Policy at any time. The current Privacy Policy becomes effective on the date it is submitted to the Data Owner by any means.