1. Identity of the Data Controller

Personal data related to this website (www.gorilla.com.tr) is processed by Gorilla Yazılım ve Teknoloji A.Ş. (“Gorilla”) as the data controller.

2. Purpose of This Notice

This notice has been prepared in accordance with Article 10 of the Law on the Protection of Personal Data (KVKK) to inform you about how your personal data is collected, processed, shared, and your rights regarding your data.

3. Processed Personal Data and Methods of Collection

  • Visitor data: IP address, device and browser information, site activity logs, cookie data

  • Contact information: Name, surname, email address, phone number (collected via contact forms, subscriptions, support requests)

  • Service usage data: Order, invoice, payment, and transaction history

  • Data collected with explicit consent: Marketing and campaign participation data, collected in compliance with KVKK Articles 5/2 and 6/3.

4. Purposes and Legal Grounds for Processing

Your personal data is processed for the following purposes:

  1. Managing communication and support processes (performance of contract)

  2. Site analytics, security, and improving user experience (legitimate interest)

  3. Processing orders, payments, and invoicing (legal obligations of the data controller)

  4. Marketing and campaign notifications (based on consent)

5. Data Sharing and Transfer

Your personal data may be shared:

  • With third parties such as payment providers, cargo companies, or e-invoicing systems when required for service delivery

  • With public institutions and authorities if legally required

  • For marketing purposes, only with your explicit consent

  • International data transfers are only made in compliance with Article 9 of KVKK, with your explicit consent and to countries deemed safe by the Turkish Data Protection Authority.

6. Data Retention Periods

Personal data will be stored only as long as necessary for the purposes for which they are processed and in accordance with legal retention periods. At the end of these periods, your data will be deleted, destroyed, or anonymized.

7. Data Security Measures

Gorilla takes all administrative and technical measures required to ensure the lawful, accurate, and up-to-date processing of your personal data and to prevent unauthorized access or data loss.

8. Data Subject Rights (KVKK Article 11)

As per KVKK, you have the right to:

  • Learn whether your personal data is being processed

  • Request information if your data has been processed

  • Learn the purpose of processing and whether it is used appropriately

  • Know the third parties to whom your data is transferred, domestically or internationally

  • Request correction if your data is incomplete or incorrect

  • Request deletion, destruction, or anonymization of your data as per Article 7 of KVKK

  • Request notification of correction or deletion to third parties with whom your data has been shared

  • Object to any outcome against you as a result of automatic data analysis

  • Claim compensation for damages arising from unlawful processing

How to Apply: Your requests will be answered within 30 days. You may submit your applications in writing, via notary, KEP (Registered Electronic Mail), e‑mail, or with a mobile/electronic signature using the contact details below:

Address: [Company Address]
KEP: [example@hs01.kep.tr]
E‑mail: kvkk@gorilla.com.tr
Phone: 0 ### ### ## ##

9. Cookie Policy

Cookies (session and persistent) are used for site performance, user experience, security, and analytics. You can refuse or delete cookies via your browser settings; however, some site features may not function properly if cookies are disabled.

10. Changes and Updates

This privacy notice may be updated due to legal or operational reasons. The current version is effective as of the date it is published on www.gorilla.com.tr.