Privacy notice

Your personal data is processed by Gils Danışmanlık ve İletişim Ticaret Limited Şirketi as data controller. Its details are below.

Legal name

Gils Danışmanlık ve İletişim Ticaret Limited Şirketi

Address

Suadiye Mah. Bağdat Cad. Ark 399 No: 399/1 İç Kapı No: 1, Kadıköy/İstanbul

Email

info@gils.com.tr

• Contact form: your name, email address, company, phone number (optional), message (optional), the topics you select and the page language. The form also sends these technical details: your IP address, the approximate location it points to (city, region, country) and your internet provider, your browser and operating system (user agent), your device's language and time zone settings, your screen and window size, and the address that referred you to the site.
• Form security check: when the contact page loads in your browser, Cloudflare Turnstile collects your IP address, your browser and operating system details (user agent), your TLS fingerprint and technical signals that your browser produces during the check. Turnstile does not read what you type into the form. Cloudflare processes this data on our behalf to tell people from bots, and for its own purpose of improving its bot detection.
• Server logs: when you visit the site, our web server records your IP address, browser, the page requested and the time of the visit.
• Your cookie choice: whether you allowed analytics and when you chose are kept in your browser's local storage (localStorage) and are never sent to our server.
• Analytics (only with your permission): Cloudflare Web Analytics collects the page you visit, the address that referred you, your browser and device type, your country and page load times. According to Cloudflare, it uses no cookies or local storage and does not identify visitors by IP address or browser details.

Our own code sets no cookies; the only thing it stores on your device is your cookie choice. The site uses no advertising tools. Cloudflare Turnstile on the contact page may store and read technical information on your device that is strictly necessary for the security check.

Please do not include sensitive personal data (special categories under KVKK Article 6) in your message.

• To answer your request, scope your project and prepare a proposal. Legal basis: processing is necessary for our legitimate interest in answering business enquiries and building customer relationships, provided it does not harm your fundamental rights and freedoms (KVKK Art. 5(2)(f)). If you contact us on your own behalf with a view to a contract, processing is also necessary for, and directly related to, entering into that contract (KVKK Art. 5(2)(c)).
• To understand which channel a request came through and to plan our reply around your device, language and time zone (the technical details sent with the form). Legal basis: processing is necessary for our legitimate interest in assessing business enquiries properly, provided it does not harm your fundamental rights and freedoms (KVKK Art. 5(2)(f)).
• To protect the form against automated and abusive submissions and to keep the site secure and running. Legal basis: processing is necessary for our legitimate interest in keeping the site and the form secure, provided it does not harm your fundamental rights and freedoms (KVKK Art. 5(2)(f)).
• If you allow it, to measure how the site is used and improve it. Legal basis: your explicit consent (KVKK Art. 5(1)). You can withdraw it at any time with the “Cookie preferences” link at the bottom of every page; this does not affect processing before the withdrawal.
• To answer requests for information or documents that courts and competent public authorities make on a legal basis. Legal basis: processing is necessary for compliance with our legal obligations (KVKK Art. 5(2)(ç)).

Apart from analytics, none of this relies on your consent. Sending the form does not mean you agree to receive commercial electronic messages; we only reply to your request.

We collect your data electronically and by automated means: through the contact form when you fill it in, through our web server's logs when you visit the site, through Cloudflare Turnstile when the contact page loads in your browser and, if you allow it, through Cloudflare Web Analytics.

• Cloudflare, Inc. (United States): as our processor, receives the site's traffic and passes it to our server, runs the form's security check (Turnstile), turns the form into an email that it delivers to us (Cloudflare Workers and Email Routing) and, if you allow it, measures visits (Web Analytics). Cloudflare also processes Turnstile data as an independent controller to improve its bot detection.
• Google (Google Workspace): as our processor, hosts the mailbox where your request arrives.
• Contabo GmbH (Germany): as our processor, hosts the server that runs this website, in a data centre in the European Union.
• Courts and competent public authorities: only where they are legally entitled to request the data, on their request and to meet our legal obligations.

Because these providers process your data on servers outside Türkiye, your data is transferred abroad within the meaning of Article 9 of KVKK. We are in the process of signing, with these providers, the standard contracts announced by the Personal Data Protection Board under Article 9(4)(c) of KVKK and of notifying them to the Personal Data Protection Authority. We do not sell your data or share it for advertising.

• Contact requests and correspondence: two years after our last exchange; if a contract follows, for as long as the applicable laws require.
• Server logs: up to 15 days.
• Request logs of the form service (Cloudflare Workers): up to 7 days. Where Cloudflare processes Turnstile data for its own purposes, Cloudflare decides how long it keeps it.
• Your cookie choice: 12 months in your browser, after which we ask again. You can remove it at any time by clearing your browser data.
• Analytics data: Cloudflare keeps raw measurements for 7 days and then aggregates them; the aggregated statistics remain viewable for 6 months.

At the end of these periods the data is deleted, destroyed or anonymised.

These are the technologies the site uses and what they are for. You can change your choice at any time with the “Cookie preferences” link at the bottom of every page.

Necessary

Your cookie choice (local storage, 12 months) and the Cloudflare Turnstile security check on the contact page. Needed for the site to work; cannot be switched off.

Analytics

Cloudflare Web Analytics. Loads only with your permission and uses no cookies.

Under Article 11 of KVKK you have the right to:

• Learn whether your personal data is processed
• Request information about the processing
• Learn the purpose of the processing and whether the data is used for that purpose
• Know the third parties in Türkiye or abroad to whom the data is transferred
• Ask for incomplete or inaccurate data to be corrected
• Ask for the data to be erased or destroyed under the conditions of Article 7 of KVKK
• Ask for any correction, erasure or destruction to be notified to the third parties who received the data
• Object to a result against you that arises solely from the automated analysis of your data
• Claim compensation if you suffer damage because your data was processed unlawfully

If the EU General Data Protection Regulation (GDPR) or the UK GDPR applies to our processing of your data, you also have the rights it gives you, including access, rectification, erasure, restriction, data portability and objection, and you may lodge a complaint with your local data protection authority.

To exercise these rights, send us a signed letter to the address above, or send a request signed with a secure electronic signature or mobile signature to info@gils.com.tr. You can also email info@gils.com.tr from the address you gave us in the contact form. Your request must include your name and surname (and your signature if it is on paper); your T.R. identity number if you are a Turkish citizen, or otherwise your nationality and your passport number or, if you have one, your identity number; your residential or business address for notifications; any email address, phone or fax number you want us to use; and what you are asking for. You may attach documents that support your request.

We will conclude your request free of charge as soon as possible and within 30 days at the latest. If it involves an additional cost, we may charge the fee set by the Personal Data Protection Board. If we reject your request, if you find our answer insufficient or if we do not answer in time, you may complain to the Personal Data Protection Board within 30 days of learning of our answer, and in any case within 60 days of your request (KVKK Art. 14).

The contact form is protected by Cloudflare Turnstile to block automated submissions. Turnstile runs in the background and asks nothing of you. What Turnstile collects and how Cloudflare uses it is described in Cloudflare's Turnstile Privacy Addendum. If the check wrongly blocks you, email us at info@gils.com.tr.

We update this notice when the way we process personal data changes. The current version is always on this page; the date at the top shows the last change.