ABOUT THE PROCESSING AND PROTECTION OF PERSONAL DATA

INFORMATION TEXT

As GullsEye Logistics Technologies Inc. (“GULLSEYE”), we take utmost care to ensure the privacy and security of all our customers’ and visitors’ personal data in compliance with the Constitution of the Republic of Turkey, the Personal Data Protection Law No. 6698, and related legislation. Your personal data is processed within the framework outlined below in accordance with our “Data Controller” role under the provisions of the Personal Data Protection Law No. 6698 and related legislation.

1. Who is Responsible for the Security and Processing of Your Personal Data?

As GULLSEYE, we are responsible as the “data controller” under the Personal Data Protection Law No. 6698 for the security of all personal data you have provided us.

GULLSEYE LOGISTICS TECHNOLOGIES INC.

info@gullseye.com

2. For What Purposes is Your Personal Data Processed?

Your personal data is primarily processed to fulfill the obligations imposed on us by legal provisions, especially the Turkish Commercial Code No. 6102 and the Tax Procedure Law No. 213.

In addition to fulfilling our legal obligations, your personal data is processed for purposes such as ensuring data security, providing the highest level of service and product, providing after-sales support for the products and services offered, having your profile ready for your next service and product request, and quickly and accurately identifying services and products suitable for you, in line with our fundamental principle of customer satisfaction.

Furthermore, your personal data may be processed for purposes such as improving the products and services offered to you, announcing our products and campaigns, accurately planning, executing, and managing management and communication activities and strategies, enhancing the services offered on our website, rectifying errors on the site, improving service quality, enabling third parties to fulfill technical and other necessary functions as service providers on our behalf, and informing you about services related to you.

3. To Whom and for What Purposes Can Your Personal Data Be Transferred?

Necessary persons for the provision of the service

Your personal data may be shared with our business and solution partners to ensure that the services provided to you are complete and flawless, and only to the extent that it is appropriate for the nature of the service. These third parties are those who must access the relevant information to ensure that the services are fully and flawlessly provided.

Persons legally obligated to share

In cases where it is mandatory for GULLSEYE to fulfill its legal obligations, where it is explicitly provided for by law, or in the event of a judicial/administrative order issued in accordance with the law, your personal data may be transferred -only to the extent limited to the relevant person or institution.

Consultancy and auxiliary service providers

Your personal data may be transferred to third parties from whom we receive support in areas such as storage, archiving, information technology support, and security; business partners with whom cooperation is carried out and/or services are received; law firms, consultancy firms, and other related parties with whom data transfer is required, as well as competent authorities and institutions, solely for the purpose of protecting GULLSEYE’s rights and/or your rights and fulfilling legal obligations.

4. By Which Methods and on What Legal Grounds Are Your Personal Data Collected?

Your personal data is collected through forms you fill out on our websites, information you provide to us via mail, e-mail, fax, and similar environments with your explicit consent, or during meetings held at our company, and through contracts concluded with you. The personal data collected, according to the nature of the data, is collected to provide our services and fulfill our contractual and legal obligations completely and accurately in line with the purposes mentioned above, especially to fulfill the obligations imposed on us by the Turkish Commercial Code No. 6102, Tax Procedure Law No. 213, Personal Data Protection Law No. 6698, and other relevant legislation.

The legal grounds for collecting your personal data within this scope are processed in accordance with one of the legal grounds appropriate to the nature of the data, including explicit consent, explicit provision in the laws, necessity for the performance of the contract, necessity to fulfill our legal obligations, or necessity for data processing for the legitimate interests of the data controller.

Processed Personal DataLegal Basis for Processing

Name, Surname

If a product or service is purchased from us, it is processed due to the obligation under the Tax Procedure Law No. 213, Articles 230 and following, and Article 82 of the Turkish Commercial Code No. 6102.

(Law No. 6698, Art. 5/2-a)

Even if no product or service has been purchased from us, it is processed due to the explicit consent you provided through the contact form on our websites.

(Law No. 6698, Art. 5/1)

E-mail, telephone information

If you receive a service from us, it is processed to provide necessary information regarding the product and service you received, establish communication between the parties, and fulfill the contractual relationship due to the necessity of processing personal data of the parties to the contract.

(Law No. 6698, Art. 5/2-c)

Even if no product or service has been purchased from us, it is processed due to the explicit consent you provided through the contact form on our websites.

Service history

Navigation movements

5. What Rights Do You Have Regarding Your Personal Data?

According to the Personal Data Protection Law No. 6698, everyone can apply to the data controller and request:

1. To learn whether personal data has been processed,
2. If personal data has been processed, to request information regarding this,
3. To learn the purpose of processing personal data and whether it is used in accordance with its purpose,
4. To know the third parties to whom personal data is transferred within or outside the country,
5. If personal data has been processed incompletely or inaccurately, to request its correction,
6. To request the deletion or destruction of personal data if the reasons for its processing have disappeared,
7. To request that third parties to whom personal data has been transferred be notified of the processes carried out under sub-paragraphs (d) and (e),
8. To object to any result against themselves arising from the analysis of processed data exclusively through automated systems,
9. To request the compensation of damages if they suffer any loss due to the unlawful processing of personal data,

and other rights.

To exercise these rights, you may hand-deliver your request with a wet signature to İTÜ Ayazağa Campus, Reşitpaşa Mah. Katar Cad. İTÜ Teknokent Arı-3 No:4/501 Maslak – Sarıyer / Istanbul, or send it with a secure electronic signature to gullseye@hs02.kep.tr. Additionally, if you have previously provided us with an email address and registered it in the GULLSEYE system, you may also send your application form to info@gullseye.com using this registered email address.

Your request must clearly state your identity information along with the right/request you wish to exercise and include all information and documents related to your request.

Requests submitted to us that meet the required qualifications will be concluded within 30 (thirty) days depending on the nature of the request, and the result will be communicated to you in writing or electronically according to the feedback method you have chosen in your request.

GULLSEYE LOGISTICS TECHNOLOGIES INC.