Privacy Policy
Last updated: January 29, 2025
1. Data Controller
Under the Turkish Law on Protection of Personal Data No. 6698 (“KVKK”), the data controller is YMA Yapı Sistemleri San. ve Tic. Ltd. Şti. (“GESPERA”), located at Hamidiye Mah. Kemerburgaz Cad. No: 152/6, Kağıthane, Istanbul.
This Privacy Policy describes how GESPERA processes personal data collected through the website gespera.com and related subdomains (“Site”).
2. Personal Data Processed and Purposes
When you submit the contact form on the Site, we collect your name, email address, phone number, and message content. This data is processed to evaluate your request, respond to you, and conduct commercial communication. Legal basis: KVKK Art. 5/2 – your explicit consent or necessity for the performance of the service.
Cookies and similar technologies may be used for technical security and user experience; use of reCAPTCHA may involve limited data transfer to Google LLC. Legal bases: legitimate interest (security, site operation) and, where required, explicit consent.
3. Transfer of Personal Data
Your personal data may be transferred to business partners or abroad only to the extent required by law or for the provision of the service (e.g. hosting, email service, reCAPTCHA for bot protection), in compliance with KVKK and with appropriate safeguards. It is not sold or rented to third parties for commercial purposes.
4. Retention Period
Contact form data is retained for as long as necessary to fulfil the purpose of processing and any legal retention obligations. After that period, data is deleted, anonymised, or retained only for archival purposes where required by law.
5. Cookies
The Site may use necessary (security, session) and functional cookies. Where Google reCAPTCHA is used, Google’s own cookie and data processing policies apply; use of reCAPTCHA is based on legitimate interest for bot protection.
You may disable cookies in whole or in part in your browser settings; some features (e.g. contact form verification) may then not work properly.
6. Data Security
Your personal data is protected by appropriate technical and organisational measures against unauthorised access, loss, alteration, or disclosure. Processing is carried out in accordance with KVKK and applicable law.
7. Your Rights (KVKK Art. 11)
Under KVKK Art. 11, you have the right to learn whether your personal data is processed, to request information if it has been processed, to learn the purpose of processing and whether it is used accordingly, to know the third parties to whom it is transferred (in Turkey or abroad), to request rectification if incomplete or incorrect, to request deletion or destruction where the conditions in KVKK Art. 7 are met, to request that rectification or deletion be notified to third parties, to object to any result to your detriment arising from analysis by solely automated means, and to claim compensation for damage arising from unlawful processing.
You may exercise these rights by submitting a written request to the data controller (GESPERA) or in the manner prescribed by the Turkish Personal Data Protection Board. Requests will be concluded within thirty days at the latest.
8. Changes to This Policy
This Privacy Policy may be updated due to legal changes or company policy. Material changes will be published on the Site and may be communicated by email or notice on the Site where appropriate.
9. Contact
For questions about this policy or your personal data: you may email info@gespera.com or submit a written request to the data controller.