1. Personal Data Collection
1.1 Data Controller
For the personal data processed on this website (“Site”), GRANOBRA REKLAM PAZARLAMA YAZILIM VE BİLİŞİM SANAYİ TİCARET LİMİTED ŞİRKETİ (“Company” or “We”) is the data controller. Contact details:
- E-mail: info@granobra.com
1.2 Collection Methods
| Method | Examples | Data Collected |
|---|---|---|
| Direct Interaction | Contact form, newsletter subscription, job application | First name, last name, email, phone, CV, message content |
| Automated Technologies | Cookies, tracking pixels, analytics tools | IP, device information, browser type, browsing behaviour, location data |
| Third-Party Sources | Business partners, ad networks, analytics providers | Campaign performance info, demographic data, interests |
1.3 Information from Other Sources
- Our other platforms
- Technical/advertising service providers
Such data are processed only to achieve the purposes in this policy and in compliance with KVKK/GDPR provisions.
2. Purposes of Processing and Legal Bases
| Purpose | Sample Processing | Legal Basis* |
|---|---|---|
| Site Operation and Service Delivery | Session management, order tracking, location-based content | KVKK Art. 5/2-c (Contract) |
| Fraud Prevention | IP checks, suspicious session analysis | Legitimate interest (KVKK Art. 5/2-f) |
| Site Performance & Experience Improvement | Analytics reports, cookie tracking | Explicit consent |
| Satisfaction Surveys | Sending email questionnaires | Explicit consent |
| Marketing & Communication Campaigns | SMS, email, retargeting | Explicit consent / Legitimate interest |
| Responding to Inquiries | Support, quotation, meeting arrangements | Contract / Legitimate interest |
| Evaluation of Job Applications | CV review, interview scheduling | Explicit consent |
* Personal data are processed on the basis of at least one legal ground set out in KVKK Arts. 5-6 and GDPR Art. 6.
Important: The Company does not sell, rent, or transfer your personal data for commercial purposes.
3. Data Subject Rights
| Right | Description | Basis |
|---|---|---|
| Access | Learn which data are processed | GDPR 15, KVKK 11/1-a |
| Rectification | Correct/update inaccurate data | GDPR 16, KVKK 11/1-d |
| Erasure (“Right to be Forgotten”) | Request deletion under certain conditions | GDPR 17, KVKK 7 |
| Restriction | Request suspension of processing | GDPR 18 |
| Objection | Especially object to marketing activities | GDPR 21, KVKK 11/1-f |
| Data Portability | Receive data in a structured, machine-readable format | GDPR 20 |
| Post-Mortem Instructions | Decide the fate of your data after death | KVKK 10/1-ç |
Exercising Your Rights
You can submit your requests to info@granobra.com together with a copy of your ID. Applications will be finalised within 30 days.
4. Retention Periods
| Data Category | Retention Period |
|---|---|
| Contact Inquiries | Up to 1 year after resolution |
| Job Applications | 6 months (unless further consent) |
| Marketing Data | Until consent is withdrawn |
| Analytics Records | 2 years |
| Records under Legal Obligations | Statutory tax/bookkeeping periods |
5. Data Transfers
- Data are hosted on AWS servers located within the EU.
- If a transfer outside the EU is necessary:
- To countries with a European Commission adequacy decision, or
- Via Standard Contractual Clauses (SCC) plus additional encryption measures.
Users will be informed about the transfer.
6. Confidentiality of Personal Data
Your data:
- are not published, sold, or marketed without your consent.
- In case of a company transfer, are passed to the acquirer with the same confidentiality obligations.
7. Security Measures
For details on encryption, firewalls, access controls, and incident-response plans, see ► Security Policy.
8. Cookies and Tracking Technologies
For cookie usage and management, please review ► Cookie Policy.
9. Policy Updates
This policy may be revised due to legislation, technological developments, or changes in our business processes. Significant changes will be announced on the Site or via email.