1) Data Controller
This "Clarification Text" has been prepared by Golden Gateway Holding (“Company”) as the data controller in accordance with the Personal Data Protection Law No. 6698 (“KVKK”), to inform you within the scope of Articles 10 and 11 of KVKK regarding the collection, processing, use, transfer, and deletion of your personal data.
2) Purpose of Processing Your Personal Data
Your personal data will be processed verbally, in writing, or electronically within the scope of Articles 4, 5, and 6 of the KVKK for the purposes below:
- Conducting human resources processes and activities within the legal framework,
- Planning, auditing, and implementing information security processes,
- Establishing and managing IT infrastructure,
- Tracking finance and/or accounting operations,
- Contract management, legal procedures, and legal process follow-up,
- Ensuring personnel security,
- Conducting efficiency and appropriateness analyses of our commercial activities, and planning/executing these activities,
- Determining and implementing commercial and business strategies,
- Providing products and services, after-sales support, and customer relationship management,
- Responding to your requests and complaints,
- Fulfilling the Company’s contractual and legal obligations fully and properly,
- Evaluating and responding to suggestions, requests, complaints, and error reports submitted via our website, and implementing improvements accordingly.
Your personal data will be processed in accordance with the data processing conditions and purposes set out in Articles 5 and 6 of the Law, stored securely for the required period either physically or electronically, and in line with legal obligations such as guest internet access records and contact form submissions.
3) Transfer of Your Personal Data
Your personal data processed for the above-mentioned purposes may be transferred in accordance with the conditions and purposes set forth in Articles 8 and 9 of the Law.
4) Sharing Personal Data with Third Parties
Our Company will only share your personal data based on your explicit consent or when required by law, for the establishment or execution of a contract, to fulfill legal obligations, or due to legitimate interest. Data may be shared with domestic/foreign affiliates, contracted real and legal persons, subcontractors, business partners, shareholders, legal/financial/tax consultants, auditors, inspection companies, or legally authorized public institutions and organizations, under the security and privacy principles defined in KVKK.
5) Your Rights under the Personal Data Protection Law
Without prejudice to exceptions stated in Article 28 of the Law, data subjects have the right to:
- Learn whether personal data is processed,
- Request information if their data has been processed,
- Learn the purpose of processing and whether it is used accordingly,
- Know the third parties to whom data is transferred domestically or abroad,
- Request correction if the data is incomplete or incorrect,
- Request deletion or destruction of data as per Article 7 of the Law,
- Request notification of actions taken under (e) and (f) to third parties,
- Object to results derived exclusively from automated systems,
- Request compensation if the data is processed unlawfully and causes damage.
The accuracy of the data you share with the Company is important to enable you to exercise your rights. Responsibility for providing accurate and complete information rests with the individual providing the data.
Your applications within this scope can be made in writing, via registered email, secure electronic signature, mobile signature, or the email address previously notified to the Company and recorded in our systems. You can submit your application along with your name-surname, signature, ID number, residential or workplace address, and (if any) email address, phone or fax number, and an explanation of your request using the application form on our website, by personally visiting the address:
Reşitpaşa Mahallesi, Osman Barlas Caddesi No:24 34467 Sarıyer / İstanbul,
or via notary, or by sending a signed email to the Company's email address.
The Company will respond within 30 days of receiving your request. If the process incurs an extra cost, a fee may be charged as per the tariff set by the Board.
If a person other than the data owner makes the request, a special power of attorney issued by the data owner must be submitted.