KVKK Privacy Notice

1. Identity of the data controller

Guidex Global Danışmanlık Limited Şirketi (“Guidex Global”, the “Company” or “we”) is a limited liability company registered at Cevizli Mah. Zuhal Cad. A Blok No: 46 İç Kapı No: 50, 34846 Maltepe / İstanbul, Türkiye, recorded with the Istanbul Trade Registry Office under number 1153104, MERSIS number 0411124129900001.

2. Personal data processed

Only the following categories are processed through this website:

• Identity data: first name and surname
• Contact data: e-mail address, phone number (if you choose to provide it)
• Customer transaction data: the subject you select and the content of your message
• Transaction security data: IP address, browser and device information, country code, request time

The site neither requests nor processes special categories of personal data (health, religion, membership and the like). Please do not submit such data through the form.

3. Purposes of processing

• Conducting communication activities and responding to your enquiry
• Conducting pre-contractual discussions and proposal processes
• Running information security processes and preventing automated or malicious submissions
• Conducting activities in compliance with legislation and informing authorised bodies
• Conducting storage and archiving activities

4. Method of collection and legal grounds

Your personal data is collected electronically and by wholly automated means, when you complete and submit the contact form on this site and when you visit the site. Collection rests on the following grounds under Article 5 of the KVKK:

• Art. 5/1 — your explicit consent (submission of the contact form and transfer abroad)
• Art. 5/2-c — direct connection with the conclusion or performance of a contract
• Art. 5/2-ç — necessity for the controller to fulfil a legal obligation
• Art. 5/2-f — necessity for the legitimate interests of the controller, provided that the fundamental rights and freedoms of the data subject are not harmed

5. Recipients of personal data and purposes of transfer

Your personal data may be transferred to the following parties in line with Articles 8 and 9 of the KVKK:

• Cloudflare, Inc., our hosting, infrastructure and bot protection provider — so that the site can be served and kept secure (transfer abroad)
• Resend, our e-mail delivery provider — so that form notifications reach us (transfer abroad)
• Public authorities and judicial bodies empowered by law — to fulfil our obligations under applicable legislation

Transfer abroad rests on the explicit consent you give when submitting the contact form. If you would rather not give that consent, you can reach us directly at [email protected] or at the postal address above.

6. Retention period

Your personal data is kept for as long as the purpose of processing requires and for the limitation periods set out in applicable legislation. Enquiries that do not become an engagement are kept for 2 years from the last correspondence; records that become a commercial relationship are kept for 10 years from the end of that relationship. At the end of these periods the data is deleted, destroyed or anonymised.

7. Your rights as a data subject (KVKK Art. 11)

By applying to the data controller, you may exercise the following rights:

• To learn whether your personal data is being processed
• To request information if your personal data has been processed
• To learn the purpose of processing and whether the data is used in accordance with that purpose
• To know the third parties, in Türkiye or abroad, to whom your personal data is transferred
• To request correction of incomplete or inaccurate data, and to request that this be notified to the third parties to whom the data was transferred
• To request erasure or destruction of your personal data where the grounds for processing have ceased, even though it was processed lawfully, and to request that this be notified to the third parties to whom the data was transferred
• To object to an outcome adverse to you arising from analysis of your data exclusively by automated systems
• To claim compensation for loss suffered as a result of unlawful processing of your personal data

8. How to apply

You may submit requests concerning the rights above in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Your application should state your name and surname, your signature (for written applications), your Turkish identity number, an address for notification, an e-mail address for notification if any, and the subject of your request.

• In writing: a signed letter to Cevizli Mah. Zuhal Cad. A Blok No: 46 İç Kapı No: 50, 34846 Maltepe / İstanbul, Türkiye
• Electronically: from the e-mail address registered in our system to [email protected]

Your application will be concluded free of charge as soon as possible and in any event within 30 (thirty) days of reaching us. Where the process incurs a cost, the fee set by the Personal Data Protection Board may be charged. If your application is rejected or you find the response insufficient, you may file a complaint with the Personal Data Protection Board within 30 days of learning the response and in any case within 60 days of the application date.