Personal Data Protection Disclosure Statement

This disclosure statement has been prepared by the data controller to inform you about which of your personal data are processed, for what purposes, how and on what grounds, with whom they are shared, and the retention periods. This information is provided in accordance with Article 10 of the Personal Data Protection Law No. 6698 (KVKK).


As www.gland.com.tr , we provide this disclosure to inform the public and relevant individuals about the processing of personal data across all data categories and subject groups.


ARTICLE 1 – DATA CONTROLLER


Your personal data may be processed by www.gland.com.tr as the data controller within the scope described below.


The data controller is defined as the real or legal person who determines the purposes and means of processing personal data, and is responsible for the establishment and management of the data recording system.


You can contact the data controller via the following channels:

E-mail: info@gland.com.tr


ARTICLE 2 – PERSONAL DATA PROCESSED AND PURPOSE OF PROCESSING


The following categories of personal data of website visitors are processed, with the purposes indicated:

  • Identity Data: For conducting identity/communication activities
  • Contact Data: For conducting communication activities
  • Transaction Security Data: To provide information to authorized persons, institutions, and organizations


ARTICLE 3 – PARTIES TO WHOM PERSONAL DATA MAY BE TRANSFERRED AND PURPOSES OF TRANSFER


Personal data covered by this disclosure may be transferred to the following parties for the purpose of fulfilling legal obligations:

  • Identity Data: Authorized public institutions and organizations
  • Contact Data: Authorized public institutions and organizations
  • Transaction Security Data: Authorized public institutions and organizations


ARTICLE 4 – METHODS OF COLLECTION AND LEGAL BASIS


Identity and contact information of visitors is collected only when a visitor manually enters this information into a comment form on the website.


Another automatically collected piece of information is the visitor’s IP address, recorded by the server.


Identity and contact information are limited to the visitor’s name and e-mail address, processed with the visitor’s explicit consent during comment submission. The recording of IP addresses is carried out under Article 5/2-f of the Personal Data Protection Law No. 6698.


Contact for data inquiries: info@gland.com.tr


ARTICLE 5 – RETENTION PERIOD OF PERSONAL DATA


The retention periods for personal data categories described in this disclosure statement are as follows. After this period, personal data will be deleted:

  • Identity Data: 10 years from the date of collection
  • Contact Data: 10 years from the date of collection
  • Transaction Security Data: 10 years from the date of processing


ARTICLE 6 – RIGHTS OF THE DATA SUBJECT


Individuals whose personal data are processed have the following rights under KVKK:

  • To learn whether personal data are being processed
  • To request information if personal data have been processed
  • To learn the purpose of processing and whether the data are used in accordance with that purpose
  • To know the third parties in the country or abroad to whom personal data are transferred
  • To request correction of incomplete or inaccurate personal data
  • To request deletion or destruction of personal data
  • To request notification of third parties to whom personal data have been transferred regarding actions taken under the above rights
  • To object to outcomes against the individual generated exclusively by automated systems
  • To claim compensation if personal data are processed unlawfully and cause damage


Respectfully,

Gland Aromatherapy Herbal Products Ltd. Co.