Personal Data and Cookies
Data controller: Gloyd Teknoloji Anonim Şirketi
İlkbahar Mah. Güneypark Küme Evleri No:19B/12, 06550 Çankaya / Ankara, Türkiye
MERSİS: 0396164148200001 · Trade Registry No: 506099 · Tax No: 3961641482
Contact: kvkk@gloyd.com · Registered e-mail (KEP): gloydteknoloji@hs01.kep.tr
Bu metnin Türkçe sürümü esastır. / The Turkish version of this text prevails.
This notice explains processing of personal data when you visit Gloyd Teknoloji A.Ş.’s corporate website, set cookie preferences or contact us. Accounts, orders and payments on Glodely are covered by that platform’s separate privacy notices.
1. Data and collection methods
We process the name, email, optional company name, subject, message and correspondence you provide through the contact form or email. Please do not include unnecessary identity, payment or special-category personal data.
Hosting, content delivery (CDN) and security services may automatically process IP addresses, request times, browser/device information and security logs. If you allow analytics, Google Analytics processes page addresses, session and cookie identifiers and device/browser measurement data. We do not intentionally include form values, messages, URL query strings or fragments in analytics events.
2. Purposes and legal grounds
| Processing | Purpose and basis under Turkish Law No. 6698 |
|---|---|
| Contact requests | To respond and assess cooperation: depending on the request, Article 5/2-c (contract formation/performance) or 5/2-f (legitimate interests without harming fundamental rights). |
| Site security | To operate and protect the site: Article 5/2-f. Where necessary, Articles 5/2-ç and 5/2-e for legal duties and protecting rights. |
| Visit analytics | To measure usage and improve content: optional explicit consent under Article 5/1. |
| Preference record | To remember, implement and show your choice: necessary storage based on legitimate interests under Article 5/2-f. |
Reading this notice, submitting the contact form, scrolling or continuing to browse is not consent to analytics. Analytics consent is not a condition of service.
3. Providers and recipients
The site works with the providers below. Each receives only the data its service requires.
| Provider and function | Processing or access location | Role |
|---|---|---|
| AWS Turkey Pazarlama Teknoloji ve Danışmanlık Hizmetleri Ltd. Şti. (Amazon Web Services) · site hosting (Amazon Lightsail) and content delivery (Amazon CloudFront) | The server is in Frankfurt, Germany (AWS eu-central-1). Pages are served from CloudFront’s worldwide edge locations, from the one nearest the visitor. The provider states it will not move content from the region the customer selected except as necessary to provide the service or to comply with the law. | Processor |
| AWS Turkey Pazarlama Teknoloji ve Danışmanlık Hizmetleri Ltd. Şti. (Amazon SES) · delivery of contact form emails | Frankfurt, Germany (AWS eu-central-1). | Processor |
| Cloudflare, Inc. · domain name service (DNS) and check against abuse of the contact form (Turnstile) | US-based provider. The provider states it primarily stores data in the USA and the European Economic Area and may access it from other countries where it operates. | Processor for DNS and the check; controller for its own bot detection |
| Google Ireland Limited (Google Analytics) · visit measurement, only with your analytics consent | The provider states it may process data in any country where it or its subprocessors maintain facilities. | Processor |
| Google Cloud EMEA Limited (Google Workspace and Google Cloud reCAPTCHA) · the info@gloyd.com, finance@gloyd.com and kvkk@gloyd.com mailboxes where form messages and emails are kept; the contact form's bot check (reCAPTCHA): IP address, browser and device information and form interaction | Contracting entity in Ireland. The provider states that data not covered by a data region policy may be stored and processed wherever it or its subprocessors maintain facilities. | Processor |
Authorised company staff access requests as required by their duties. Data may be disclosed to competent authorities or courts when legally required. Contact requests are not automatically added to marketing lists.
4. International transfers
Because of the infrastructure of the providers in section 3, your personal data may be processed outside Türkiye or accessed from abroad; processing or access locations are listed in the table.
For transfers abroad, the transfer conditions in Article 9 of the Law apply in addition to the processing condition stated above for the relevant activity. Providers that process data on Gloyd’s behalf are engaged within the framework of each provider’s own data processing agreement and the protective provisions of that agreement. Submitting the contact form or allowing analytics cookies does not constitute explicit consent to transfers abroad.
5. Cookies and browser storage
| Storage | Purpose, duration and party |
|---|---|
| gloyd_privacy · localStorage | Stored by Gloyd in this browser: analytics choice, notice version, choice and expiry timestamps, for up to 180 days. We ask again on expiry or a notice version change. |
| NEXT_LOCALE · cookie | Gloyd language preference; up to 1 year after an explicit language choice. Not used for analytics or advertising. |
| _ga and _ga_* · cookies | Set by Google Analytics on this site’s domain to measure visitors and sessions, only with consent, for up to 180 days. The site does not extend their expiry on each visit. |
| _GRECAPTCHA · cookie | Written on Google’s www.recaptcha.net domain (third party) by the bot check (Google Cloud reCAPTCHA), which loads only once you start using the contact form. A necessary security cookie for the risk analysis; Google sets its lifetime. The server and content delivery (CloudFront) write no cookie for this site. |
On your first visit, choose Accept, Reject or Cookie preferences. Before a choice or after rejection, the Google Analytics tag is not loaded and no analytics request is sent. Ad personalisation and Google signals are disabled in the site configuration.
Open Cookie preferences in the footer, turn analytics off and save to withdraw consent. New measurement stops and Analytics cookies accessible to this site are deleted. Withdrawal does not affect prior lawful processing. You can separately request deletion of data already received. Google Analytics transmission is disabled in local development and preview versions.
6. Retention and deletion
Messages received through the contact form or by email are kept for at most 2 years after the correspondence ends, or for the relevant period where a contract, legal duty or dispute requires it. They are then deleted or anonymised.
In Google Analytics, user- and event-level data are kept for 2 months. The duration of the Analytics cookies and the preference record in your browser is given in section 5.
Server and content delivery (CloudFront) request logs are kept for at most 30 days. The email delivery provider (Amazon SES) states that it may store and scan emails to prevent spam; it does not document a period for this.
7. Your rights and requests
Under Article 11, you may learn whether your data is processed, request information about processing, its purpose and appropriate use, learn domestic and international recipients, seek correction, request deletion/destruction where conditions are met and notification of these actions to recipients, object to adverse outcomes based solely on automated analysis, and claim compensation for unlawful processing.
Submit a written request to the company address above, to its registered electronic mail (KEP) address, or by other legally recognised methods. You may also write to kvkk@gloyd.com from an email address previously provided to and registered with the company. Only necessary identity verification information is requested. Requests are answered as soon as possible and within 30 days; any applicable fee follows the statutory tariff.
This text is a notice; your consent is not being requested.
Version 0007 · 21 October 2026