Website Privacy Notice

This notice is an English translation. In the event of any discrepancy, the Turkish text shall prevail.

1. Data controller

For the purposes of the Turkish Personal Data Protection Law No. 6698 (“Law No. 6698”), the data controller is GRC Teknoloji Mühendislik Tanıtım San. ve Tic. Ltd. Şti. Tax Office: Küçükyalı; Tax No: 4110472316; Trade Registry No: 71601-5. Address: Altıntepe Mh. İstasyon Yolu Sk. No: 3/1 Maltepe / Istanbul, Türkiye. Email: info@grctek.com.

2. Which data is processed, for what purpose and on what legal basis?

• Contact enquiries: Your name, email address, optional telephone number, selected subject, message, stated area of interest and how you heard about us are processed to respond to your enquiry, conduct quotation or pre-contract discussions and maintain the communication history. Depending on the nature of the enquiry, the legal basis is that processing is directly related to establishing a contract under Article 5(2)(c) of Law No. 6698, or the controller’s legitimate interest under Article 5(2)(f), provided your fundamental rights are not harmed.
• Marketing communications: If you grant the optional explicit consent in the form, your email address, product/service interests, information source and consent record are processed on the basis of your explicit consent under Article 5(1) of Law No. 6698 so GRC Teknoloji may send you emails about its products, software and engineering solutions. This permission is not required to submit the form and may be withdrawn at any time.
• Transaction security: IP address, date and time, requested page, browser/device information and technical error records related to requests made to the site may be processed for a limited period on the legitimate-interest basis in Article 5(2)(f) of Law No. 6698 to secure the site, prevent attacks and resolve technical problems.

3. To whom is data transferred?

The site will operate on Hostinger infrastructure for hosting and security services. Contact messages also reach authorised GRC Teknoloji personnel through the email infrastructure in use. Data is transferred to service providers, and where necessary authorised public bodies, only to provide the service, ensure security and meet legal obligations; it is not sold to third parties for commercial purposes.

Hostinger may use international infrastructure and a network of subprocessors. If the selected data centre and service agreement result in an international transfer, an appropriate transfer mechanism under Article 9 of Law No. 6698 will be established separately before publication.

4. Collection method

Data is obtained electronically: directly from you through the contact form and email, and automatically during access to the site for server-security records. The site currently uses no visitor analytics, advertising tracking or behavioural profiling.

5. Retention periods

• Contact enquiries: no more than two years after the last communication;
• Marketing records: until explicit consent is withdrawn or no more than three years after the last interaction;
• Technical security records: for the limited period configured in Hostinger and necessary for security.

A legal obligation requiring longer retention or an ongoing dispute remains reserved. At the end of the applicable period, data is erased, destroyed or anonymised.

6. Your rights under Law No. 6698

Under Article 11 of Law No. 6698, you have the right to learn whether your data is processed; request information if it has been processed; learn whether it is used for its purpose; know the third parties to whom it is transferred domestically or abroad; request correction if it is incomplete or inaccurate and notification of that action to third parties; request erasure or destruction when the conditions apply and notification to third parties; object to an adverse result produced solely through automated analysis; and claim compensation for damage caused by unlawful processing.

You may submit your application in writing to the company address or, using an email address previously supplied to and recorded by the Company, to info@grctek.com. Applications are concluded as soon as possible according to their nature and no later than 30 days.