KVKK Information Notice (Turkish Data Protection Law)
Last updated: January 1, 2026
1. Data Controller
Within the scope of the Personal Data Protection Law No. 6698 ("KVKK"), your personal data is processed by Gloyd Teknoloji A.S. ("Company") as the data controller.
Company Information:
| Information | Value |
|---|---|
| Company Name | Gloyd Teknoloji A.S. |
| Address | Ilkbahar Mah. Guneypark Kume Evleri No:19B/12, Cankaya/Ankara, Turkey |
| Phone | +90 850 840 65 78 |
| kvkk@gloyd.com | |
| Mersis No | 0396164148200001 |
| KEP | gloyd@hs01.kep.tr |
2. Personal Data Processed
The following categories of your personal data are processed by our Company:
2.1. Identity Information
- First name, last name
- Turkish ID number (for invoicing purposes)
- Date of birth
2.2. Contact Information
- Email address
- Phone number
- Address information
2.3. Professional Information
- Company name and title
- Position/Role
- Business contact information
2.4. Financial Information
- Invoice information
- Payment information
- Bank account information
2.5. Digital Data
- IP address
- Cookie data
- Usage logs
- Session information
3. Purposes of Personal Data Processing
Your personal data is processed for the following purposes:
- Provision and execution of our services
- Execution of contractual processes
- Customer relationship management
- Processing of invoicing and payment transactions
- Fulfillment of legal obligations
- Execution of communication activities
- Execution of information security processes
- Tracking of requests and complaints
- Improvement of service quality
- Marketing activities based on your explicit consent
4. Legal Grounds for Personal Data Processing
Your personal data is processed based on the following legal grounds specified in Articles 5 and 6 of KVKK:
- Existence of your explicit consent
- Explicit provision in laws
- Necessity for the establishment or performance of a contract
- Fulfillment of legal obligation
- Necessity for our legitimate interests
5. Transfer of Personal Data
Your personal data may be transferred to the following parties in accordance with Articles 8 and 9 of KVKK and for the purposes stated above:
- Our business partners and suppliers
- Our service providers (hosting, payment processors, etc.)
- Legal regulatory and supervisory authorities
- Judicial authorities and public institutions upon request
Your personal data may be transferred abroad through our cloud service providers. These transfers are made with adequate protective measures and within the scope of Article 9 of KVKK.
6. Personal Data Retention Period
Your personal data is retained for the duration required by the processing purposes and within the framework of our legal obligations:
| Data Type | Retention Period |
|---|---|
| Account information | As long as the account is active and 5 years after closure |
| Invoice and payment information | 10 years (legal requirement) |
| Communication records | 3 years |
| Log records | 2 years |
7. Data Security
Our Company takes necessary technical and administrative measures to ensure the security of your personal data:
- Use of encryption technologies
- Access controls and authorization
- Firewalls and intrusion detection systems
- Regular security audits
- Employee training
8. Rights of the Data Subject
Pursuant to Article 11 of KVKK, you have the following rights as a data subject:
| No | Right |
|---|---|
| 1 | To learn whether your personal data is processed |
| 2 | To request information regarding processing if your personal data has been processed |
| 3 | To learn the purpose of processing your personal data and whether they are used in accordance with their purpose |
| 4 | To know the third parties to whom your personal data is transferred domestically or abroad |
| 5 | To request correction of your personal data if it has been incompletely or incorrectly processed |
| 6 | To request deletion or destruction of your personal data within the conditions stipulated in Article 7 of KVKK |
| 7 | To request notification of correction, deletion, and destruction operations to third parties to whom personal data has been transferred |
| 8 | To object to the emergence of a result against you through analysis of processed data exclusively by automated systems |
| 9 | To claim compensation for damages in case you suffer damage due to unlawful processing of your personal data |
8.1. Automated Decision Making
Our Company does not apply automated decision-making processes using your personal data. Profiling or automated evaluation systems are not used in our services. In case any automated decision-making process is applied, you will be separately informed on this matter.
9. Application Method
You can apply through the following methods to exercise your rights stated above:
- Email: To kvkk@gloyd.com, writing "KVKK Application" in the subject line
- Mail: By registered letter to Ilkbahar Mah. Guneypark Kume Evleri No:19B/12, Cankaya/Ankara
- KEP: To gloyd@hs01.kep.tr with secure electronic signature
Your application must clearly state your name, surname, signature, Turkish ID number, address, phone, and email information along with the subject of your request.
Your applications will be answered free of charge within 30 days at the latest, depending on their nature. However, if the transaction requires an additional cost, the fee determined by the Personal Data Protection Board may be charged.
10. Changes
This information notice may be updated in line with changes in legal regulations or company policies. The current text is always published on our website.
Related documents: Cookie Policy - Distance Sales Agreement - Privacy Policy - Subscription Agreement - Terms of Service