Protection of personal data is an important matter for Graten Consultancy.

This Privacy Policy (“Policy”)has been prepared in accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”) and includes information regarding the purposes and legal grounds for the processing of your personal data, the security measures taken to ensure the safety of your data, and your rights as a data subject, when you visit the Graten Consultancy website and fill out the contact form available on the site. When you voluntarily provide us with your personal data, we process such data with strict confidentiality. No personal data is ever rented, sold, publicly disclosed, or shared with other companies, organizations, applications, or websites except as specifically described in this Policy.

Methods and Legal Grounds for Processing Your Personal Data

Your personal data may be processed through automated or non-automated means via cookies and contact forms while communicating with us through the form or visiting our website. It is processed based on legal grounds such as being directly related to the establishment or performance of a contract, being necessary for the processing of personal data of the parties to the contract, being required for the establishment, exercise, or protection of a right, and being necessary for our legitimate interests, provided that it does not harm your fundamental rights and freedoms.

Purposes of Using Your Information

Graten Consultancy primarily uses the collected user information for the purposes listed below:

- To contact you:

- Identity category: name and surname

- Contact category: e-mail address, phone number

- Other data category: company information

– If you give explicit consent, to improve the performance of the website and provide a better service: advertising ID

These purposes indicate the general usage purposes of the information collected about users. For more information about Graten Consultancy’s purposes of processing personal data and other related matters, please refer to the Clarification Text within the scope of the Law on the Protection of Personal Data.

Sharing Your Information with Third Parties

While processing and sharing your personal data, we adhere to all legal regulations and obligations related to the protection of personal data, particularly Articles 8 and 9 of Law No. 6698. The information you provide to Graten Consultancy may be transferred to third parties both within and outside the country for the realization of the purposes mentioned above. Within this scope, your data may be shared with our business partners, suppliers/service providers from whom support is received for the provision of products/services, internet service providers, and mobile application software maintenance and support service providers. Additionally, based on your explicit consent, your personal data obtained through cookies such as Google Analytics may be used to measure the performance of our website. Furthermore, we may share your data with authorized persons, institutions, and organizations if required by legal obligations or if it is determined that sharing is legally necessary to protect our rights and perform our defenses.

When we engage other companies to provide services to Graten Consultancy and later provide or allow access to personal data for these purposes, we require these companies to store data and comply with applicable data privacy standards and all legal regulations regarding the protection of personal data, especially Law No. 6698. Service providers may occasionally process personal data outside of Turkey in compliance with KVKK and relevant legislation. Also, when the Chatbot feature is used, due to the servers being located abroad for this feature, personal data such as phone number and device information are transferred abroad in compliance with KVKK and relevant legislation. In such cases, Graten Consultancy ensures an adequate level of data protection in accordance with local legislation and company policies. The information provided by users will not be transferred to third parties except for the purposes stated in the user-provided texts and situations necessary for the provision of the service.

Storage and Protection of Your Information

Your information is stored for as long as required by the purpose for which it was collected. If a specific retention period is stipulated by law, we comply with that period. Graten Consultancy takes the necessary technical and administrative measures specified in the Personal Data Protection legislation to protect your information against data security threats (cyber-attacks, hash, etc.) in the systems, servers, and databases where your information is stored.

Accuracy and Currency of Your Information

The accuracy and currency of the information provided in the Contact Form is the responsibility of the users. It is necessary to provide your information to us truthfully and to update it in case of any changes. You can update the information you shared with Graten Consultancy at any time through the application. It is your responsibility to ensure that your registration is complete and current to avoid any disruption in the services you may receive under the application.

Links to Third Parties

Graten Consultancy may include links to third-party websites not operated by Graten Consultancy. During your visit to any of these links, you become subject to the privacy policies and terms of use of the respective third party. Graten Consultancy is not responsible for the terms, policies, or practices of such third parties.

Changes to the Website and This Policy

Graten Consultancy reserves the right to change, suspend, or discontinue any services, information, visuals, or other content offered without prior notice. Graten Consultancy also reserves the right to make changes and updates to this Policy. It is the user's responsibility to follow the current version of the Policy.

Your Rights as a Data Subject

Pursuant to KVKK, by applying to Graten Consultancy, you can exercise the following rights:

- To learn whether your personal data is processed or not;

- If processed, to request information regarding this;

- To learn the purpose of processing and whether they are used in line with the intended purpose;

- To know the third parties to whom your personal data is transferred within or outside the country;

- To request correction of your personal data if it is incomplete or incorrectly processed and to request that this correction be notified to the third parties to whom the data has been transferred;

- To request the deletion, destruction, or anonymization of your personal data and to request notification of such operations to third parties to whom the data has been transferred;

- To object to any outcome that is against you arising from the analysis of your data exclusively through automated systems;

- To demand compensation for damages if you suffer harm due to unlawful processing of your personal data.

If you wish to exercise any of your rights explained above, please send your request along with your identity verification information and a written explanation of the right you wish to exercise, through one of the following application channels. Regarding the documents to be submitted for identity verification, we kindly ask that you do not provide any documents without identity information and avoid including any other personal data (e.g., race or ethnic origin, political opinion, religion, blood type, etc.) in the document. Requests submitted under KVKK will be finalized within a maximum of 30 (thirty) days from the date they are received. If it is determined that the information or documents you provided are incomplete or unclear, we may contact you to rectify the deficiency or clarify the matter. As a rule, no fee will be charged for such requests; however, Graten Consultancy reserves the right to charge a fee in accordance with the tariff determined by the Personal Data Protection Authority. You may submit your applications through the following channels:

You may submit your applications through the following channels: by email to: kvkk@gratenconsultancy.com, or via any other method provided for by the Personal Data Protection Authority. By sending an e-mail with a secure electronic or mobile signature to kvkk@gratenconsultancy.com; or through other methods determined by the Personal Data Protection Authority or specified in personal data protection legislation.

Disclaimer

Graten Consultancy is not responsible for any direct or indirect damages or costs that may arise due to any errors, interruptions, delays, viruses, faults, and/or system failures during the electronic delivery of our services.

Policy Last Updated: 04.02.2025