GP Kompozit Anonim Şirketi (“GP Kompozit”) attaches great importance to the security of your personal data processed during your use of the GP Garaj mobile application (“Application”). This Privacy Policy explains which data is collected through the Application, the purposes for which it is processed, with whom it is shared, and your rights. By using the Application, you declare that you have read and accepted this Privacy Policy.
- Collected Personal Data
The following personal data is processed during your use of the Application:
- 1.1 Identity Information: Name – Surname, T.R. Identity Number.
- 1.2 Contact Information: Phone number, E-mail address, and other basic contact data related to the user account.
- 1.3 Location / Device Data: Location information from the GPS/GSM tracking device attached to the motorcycle; route, speed, pause, movement, and engine status data on the map; device and connection information required for the Application to function correctly.
- 1.4 Vehicle Information: License plate, vehicle brand-model information, and technical information belonging to the device.
- 1.5 Usage Data: In-app usage movements, log records, and login information.
- 1.6 Cookie and Similar Technologies: Cookie-like technologies may be used to increase Application performance, detect errors, and improve the user experience.
- Purposes of Processing Personal Data
Personal data is processed within the scope of the Application for the following purposes:
- 2.1 Service Provision and Use of Tracking Device: Providing GPS/GSM-based tracking services, creating and managing customer accounts, and displaying data regarding the operation of the device.
- 2.2 Execution of the Agreement: Carrying out Application membership processes, fulfilling the Customer Agreement regarding the tracking device, and performing billing, subscription, and technical support transactions.
- 2.3 Security and System Performance: Ensuring account security, preventing unauthorized access, keeping log records, and monitoring/improving system performance.
- 2.4 Legal Obligations: Fulfilling obligations under KVKK, the Turkish Commercial Code, Tax Legislation, and other legal requirements, as well as making necessary notifications to official institutions and organizations.
- Sharing of Personal Data
Your personal data may be shared limited to the following situations:
- 3.1 Mandatory Sharing: Courts, prosecutor’s offices, law enforcement forces, and other authorized public institutions; third parties required by legal obligations.
- 3.2 Sharing Required for Service Provision: Technical service and maintenance support providers; software, server, and cloud service providers; accounting and law firms. All sharing is carried out in accordance with KVKK and by taking the necessary technical/administrative measures.
- Retention Period of Personal Data
GP Kompozit deletes, destroys, or anonymizes your personal data:
- As long as you benefit from the service.
- During the period required by legal storage obligations.
- Within the framework of the periodic destruction policy when the periods stipulated by the legislation expire.
- Data Security
Our Company takes all reasonable technical and administrative measures to ensure the security of your personal data, such as:
- Network and system security against unauthorized access.
- Encryption, log records, and access controls.
- Employee confidentiality obligations.
- Regular penetration tests.
- Third-Party Websites and Applications
The Application or the GP Kompozit website may contain links to third-party websites or applications. GP Kompozit is not responsible for the content, data collection/privacy practices, or security levels of sites accessed through these links. This Privacy Policy is only valid for the GP Garaj application.
- Commercial Electronic Messages
If you approve receiving commercial electronic messages when registering or giving communication permission, the following may be sent to you:
- Campaign and promotion notifications.
- Announcements.
- Special day celebrations.
- Satisfaction surveys. The user can withdraw their commercial message permission at any time via the account settings section in the Application or the “reject” link in the sent messages.
- User Account and Password Security
The user is personally responsible for ensuring the security of all access information, such as username, password, and account information created for application access. GP Kompozit is not responsible for damages that may arise from sharing this information with third parties or providing unauthorized access.
- Technical Data Security Measures
The Company takes appropriate technical and administrative measures to protect your personal data:
- SSL/TLS encryption.
- Access control and authorization.
- Firewalls.
- Regular penetration tests.
- Maintenance of log records.
- Rights of the Data Subject under KVKK
Pursuant to Art. 11 of the KVKK, you have the right to:
- Learn whether your personal data is processed.
- Request information if it has been processed.
- Learn the purpose of processing and whether it is used appropriately.
- Know the third parties to whom it is transferred domestically or abroad.
- Request correction of the data.
- Request deletion or destruction if the reasons for processing disappear.
- Request notification of these actions to third parties to whom the data was transferred.
- Object to results occurring against the person through automated systems.
- Request compensation in case of damage due to unlawful processing. You can submit your applications in writing to the Company address, via KEP, with a secure electronic/mobile signature, or via your registered e-mail address.
- Changes to the Privacy Policy
The Privacy Policy may be updated due to legal requirements or changes in the application. The current policy is made available within the Application.
- Contact
For all your requests and applications:
- GP KOMPOZİT A.Ş.
- Address: Şeyhli Mah. Hızır Reis Cad. No:6 Pendik/İstanbul
- E-mail: info@gpkompozit.com
- Phone: 0850 305 5547