Privacy Notice

1. Data controller

Under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data is processed by Greftly Yazılım ve Bilişim Limited Şirketi ("Greftly" or the "Company") acting as data controller, within the scope described below.

• Legal name: Greftly Yazılım ve Bilişim Limited Şirketi
• Address: Barbaros Mah. Begonya Sk. Nidakule Ataşehir Batı No: 1 İç Kapı No: 2, Ataşehir / İstanbul, Türkiye
• Mersis No: 0411124304900001
• E-mail: info@greftly.com

2. Scope of this notice

This notice applies only to the greftly.com website. When the Greftly mobile application launches, a separate notice will be provided for the data processed within the application.

3. Data processed, purposes and legal grounds

greftly.com has no sign-up, registration, form, survey or similar data collection field. The site contains no analytics or advertising tool that tracks visitor behaviour. The personal data processed is limited to the following.

a) Server logs

• Data processed: IP address, date and time of access, requested page address, browser and operating system information
• Purpose: operating the site, ensuring its security, detecting errors and misuse
• Method of collection: automatically, by the hosting service provider
• Legal ground: KVKK art. 5/2-(f), the legitimate interests of the data controller, provided this does not harm your fundamental rights and freedoms; where a statutory retention obligation applies, also art. 5/2-(ç)

b) E-mail correspondence

• Data processed: name, e-mail address and any other information you include in your message
• Purpose: assessing and responding to your requests, questions and applications
• Method of collection: e-mail you send to info@greftly.com
• Legal ground: KVKK art. 5/2-(f) legitimate interests; depending on the nature of the request, art. 5/2-(c) conclusion or performance of a contract

4. Cookies

greftly.com does not use cookies. Nor does it use any browser storage technology (local storage, session storage, etc.).

Fonts are served from our own server, so viewing the site does not cause an automatic connection to any third-party server.

5. Transfer of personal data

Your personal data may be transferred only within the following scope:

• To Hostinger, the hosting provider engaged to host the site. Data is processed on servers located in Germany (Frankfurt) and transferred to servers in France for backup purposes.
• To public authorities legally empowered to request it, where required by legislation.

International transfer

As the servers are located outside Türkiye, the processing of server logs by the hosting provider constitutes an international transfer within the meaning of KVKK art. 9.

The transfer is limited to operating the site technically. No data is transferred to any other country or third party in this context.

6. Retention period

Your personal data is retained for as long as the processing purpose requires and for the retention periods prescribed by applicable legislation. Once those periods expire, the data is deleted, destroyed or anonymised.

7. Your rights as a data subject

Under KVKK art. 11 you may apply to the Company to exercise the following rights:

• To learn whether your personal data is processed.
• To request information if it has been processed.
• To learn the purpose of processing and whether the data is used in line with that purpose.
• To know the third parties to whom the data is transferred, in Türkiye or abroad.
• To request rectification if the data is incomplete or inaccurate.
• To request erasure or destruction under the conditions set out in KVKK art. 7.
• To request that rectification, erasure and destruction be notified to third parties to whom the data was transferred.
• To object to a result adverse to you arising from analysis solely by automated systems.
• To claim compensation if you suffer damage due to unlawful processing.

8. How to apply

You may submit your requests in accordance with the procedures set out in the Communiqué on the Principles and Procedures of Application to the Data Controller, by e-mail to info@greftly.com or in writing to Barbaros Mah. Begonya Sk. Nidakule Ataşehir Batı No: 1 İç Kapı No: 2, Ataşehir / İstanbul, Türkiye. Your application will be concluded free of charge as soon as possible and in any event within thirty days at the latest, depending on the nature of the request.

9. Changes

This notice may be updated in line with changes in legislation or in the Company's data processing activities. The current version is always published on this page.