Gizlilik Politikası
GRN TIBBİ MÜHENDİSLİK SAN. VE TİC. A.Ş
Clarification Text and Privacy Policy on Data Protection
Dear Members and Visitors,
Our practices regarding the processing of your personal data and GRN Medical Engineering San. as "Data Controller" within the scope of the Personal Data Protection Law No. 6698 ("Law"). and Tic. We would like to inform you about your personal data that we process as A.Ş. ("GRN" or "Company").
As GRN, we attach great importance to the processing, preservation and security of your personal data and to comply with the Constitution, the "Personal Data Protection Law" No. 6698 ("KVK Law") and other relevant legislative provisions in managing these processes. In this context, in accordance with the KVK Law, we take the necessary measures to ensure the appropriate level of security in the processes of processing and transferring your personal data to third parties, to prevent your personal data from being processed and accessed unlawfully and to ensure its preservation. Aware of this responsibility, we process your personal data within the framework specified below and in accordance with other legislation, as the Data Controller within the scope of the KVK Law and relevant legislation.
With this notification text, we aim to fulfill our obligation to inform you about the purposes of processing your personal data, legal basis and your rights arising from Article 10 of the KVK Law.
In this text:
You visit and use the GRNmuhendislik.com website (“Site”) or shop from the Site,
Becoming a GRN member (“Member”) on the site,
You agree to receive general and personalized campaign information through commercial communication channels,
We communicate mutually through GRN's communication channels,
Participating in campaigns, contests, sweepstakes and other events organized by GRN,
There is a clarification text regarding the use of your personal data.
Cookies etc. on the site. programs are used. You can access our cookie policy on the website eskimaya.com.tr.
What are the Purposes of Processing Your Personal Data and What Personal Data We Process?
Site Use and Shopping (shopping as a member or without membership) and Restaurant Visits
Carrying out the shopping process, order preparation, collection, packaging, delivery note preparation, shipping, updating delivery information, delivering your order to you or ensuring proper delivery at the branches if you want to receive your order from GRN branches, distinguishing the records belonging to you that we have created in our system from the records of other customers, In addition, identity (name and surname), contact (e-mail address, phone number, address) and customer transaction (shopping date, time, amount, shopping content, installment information, etc.) your information (payment method and payment details, campaign/discount/benefit information used),
In order to issue an invoice, your identity and billing information, and if you are a taxpayer, some additional billing information (TR ID number, tax number, sole proprietorship information),
If you want to make your payment by credit card, you must provide your credit card information in order to receive the payment (credit card information is transferred to the payment institution without being recorded by us), the first 6 and last 4 digits of your credit card information or the bank account to which the refund will be made in order to make a refund in case of a possible error / glitch. your knowledge,
Your Site usage information in order to detect and correct technical/software errors and deficiencies encountered during your visit and use of the Site,
During your visit to our restaurant branches, we process your image and picture data with a closed circuit camera system for security purposes.
GRN Site Membership
Your identity (name and surname), contact (e-mail address, telephone number) and password information for the purposes of ensuring the completion of membership transactions, fulfilling the requirements of the membership agreement we will conclude with you, logging in as a member, and providing membership information,
When you want to shop on the Site as a member, your identity (name and surname) and contact information (phone number, e-mail address, delivery and billing address information) in order to enable you to shop using your member information without having to re-enter information for each shopping transaction,
As a member, we provide you with your shopping information (shopping date, time, amount, shopping content, payment details) in order to provide you with the service of viewing your order history.
You can benefit from membership programs, create general or personalized personalized campaigns, advantages, promotions, advertisements, organize campaigns, contests, sweepstakes and other events, segmentation, reporting, profiling, marketing and analysis.
carrying out GRN's advertisements and marketing/communication activities (notifications on the Site, pop-up display, personalized offers, customization of user screens, advertisements, searches, surveys, etc.) on the Site or other 3rd party environments, In order to improve the user experience on the site and to send you catalogues, brochures and printed marketing materials, you can provide your marketing information (date of birth, gender, province, district, address, demographic information, attitudes towards in-site notifications/surveys/offers/campaigns, habits, favourites, likes, behaviors, preferences, search movements, segments, basket information, past purchases and the shopping amount related to these purchases, content, payment method, preferences and channels, bank information where the payment was made, cookie records, cookie and advertising identifier/ID information and device ID, usage period, communication preferences, browser information used, brand, model, technical specifications and operating system information regarding the device used, survey answers, etc.).
We are processing.
Commercial Communication Processes
If you give commercial communication permission/explicit consent, we can carry out general or personalized campaigns, advantages, promotions, advertisements, information, marketing activities and commercial communication activities (SMS, e-mail, call, etc.) aimed at you, campaigns, contests, sweepstakes. We process your identity (name and surname), contact (phone number, e-mail address) information for the purposes of delivering our invitations to , invitations, openings and other events.
Customer Relations Processes
If you contact us through our communication channels (phone, e-mail addresses, Site, social media, complaint portals, etc.), your identity (name and surname), contact (address, e-mail address, telephone number, social media account information), your financial information (IBAN number and the first 6 and last 4 digits of the credit card for control transactions when necessary), customer transactions (your requests and complaints, purchases, gift/discount/benefit usages). ) and if necessary, we process your legal transaction information.
Legal Processes and Internal Activities
To fulfill our obligations arising from the legislation, to fulfill our legal obligations towards authorized and authorized public institutions and organizations, to exercise all kinds of lawsuits, right of reply and objection against official institutions and organizations such as courts, enforcement offices and arbitral tribunals in disputes that may arise, to carry out negotiation and agreement processes regarding disputes. identity (name, surname, date of birth), contact (phone, e-mail address, address), customer transaction (shopping information, your feedback and related survey answers), for the purposes of carrying out the transaction, and providing you with the necessary information if you request information from us in accordance with your rights. your billing and transaction security information (IP port information, log records regarding Site usage and shopping, Membership, permission/explicit consent/contract approval and information updates within the scope of commercial communication), your camera images and legal transaction information (correspondence and file information regarding dispute processes). We are processing.
Within the scope of internal audit, customer satisfaction studies, reporting on services, testing, development and improvement studies, identity (name and surname), contact (phone number, e-mail address, address), invoice, customer transaction (shopping information, your feedback and etc.) We process your information regarding your survey answers), your information regarding transaction security (log records regarding Site usage and purchases, Membership, consent/explicit consent/contract approval within the scope of commercial communication, and information updates).
Your identity (name and surname), contact (phone, e-mail address, address), credit card information in order to prevent site membership agreements, legislation and immoral use, to detect suspicious transactions and illegal uses, to block and unblock transactions. We process your shopping and order information (only first 6 and last 4 digit information), and your transaction security information (IP address information, port information, connection details to the Site, access dates).
Event Processes
If you participate in campaigns, competitions, sweepstakes and other events organized/announced by GRN, you will be required to provide your identity (name and surname) and contact information (phone number, e-mail address, address) for the purposes of carrying out transactions related to the relevant event, concluding the events, and sending you prizes and products when necessary. ) we process your data.
To Whom and For What Purpose Can We Transfer Your Personal Data?
Your personal data;
Information technologies, marketing/advertising activities or consultancy requiring expertise, etc. GRN's domestic and international suppliers in order to receive product and service support on issues
with its services (collecting and responding to requests and complaints from social media, software development and support service, advertising, digital marketing/advertising and analysis service and product support providers, agencies, publishers, electronic messaging service providers, server service, independent audit service providers, warehouse service providers, online survey service providers, database management and maintenance services, cargo and courier companies, printing houses and printed material sending services, legal and financial consultancy, etc. service providers, money and payment institutions, e-invoice and e-invoice. -archive invoice service providers) or abroad due to the servers of our domestic suppliers being located abroad,
With payment institutions regarding the relevant transaction, when necessary, for the purposes of tracking and detecting suspicious transactions and preventing illegal transactions,
We share the information requested from us with these institutions, organizations and authorities in order to fulfill our obligations to provide information, documents and other related obligations to authorized and responsible public institutions and organizations and judicial authorities and to exercise our legal rights such as lawsuit and response rights.
If you save your credit cards in the relevant place on the Site in order to make your payment by credit card, your credit card information is transferred directly to the organization that provides the relevant credit card information storage infrastructure, without being recorded by us, in order to receive the payment. All credit card transactions and approvals you make with your registered credit cards are carried out online by the relevant banks or card institutions, independent of us, and information such as credit card "password" is not seen or recorded by our company.
What is the method and legal reason for collecting your personal data?
As GRN, we record your personal data, the information you share regarding your purchases or membership transactions on the Site, and the information update transactions you make, in our systems, recording the data created/obtained from your fixed-mobile internet and communication devices in our systems, all kinds of shopping, collection, delivery, transaction, updating information and commercial communication preferences, filling out surveys, recording registration and behavioral transactions in our systems, recording your requests and complaints you have forwarded to us through communication channels (phone, Mobile Application, Site, our e-mail addresses, social media, complaint portals and other communication channels). When you visit our restaurants, we collect it by automatic methods such as recording images with a closed circuit camera system, or by non-automatic methods by recording information/documents about you from official institutions, organizations and judicial/administrative authorities.
As GRN, your personal data;
Regarding the sales processes on the site, the legal reasons are "data processing is necessary for the establishment and execution of the contract", "fulfillment of legal obligation" and "data processing is mandatory for the legitimate interests of the data controller";
Your "explicit consent" regarding the personal data processing processes within the scope of marketing, segmentation and analysis studies within the scope of your GRN membership and the personal data processing processes within the scope of establishing your GRN membership and fulfilling our obligations in accordance with the membership agreement are "directly related to the establishment or execution of a contract" provided that it is necessary to process personal data of the parties to the contract",
Your "explicit consent" regarding commercial communication activities,
The legal reason "data processing is mandatory for the legitimate interests of the data controller" regarding the detection and prevention of suspicious transactions regarding the use of the site and studies on operational processes, event processes and customer relations processes;
"fulfillment of legal obligation" and "explicitly foreseen by law" regarding our obligations arising from the legislation and the legal reason
We also collect data regarding legal disputes, investigations and other judicial/official processes based on the legal reasons "data processing and transfer is mandatory for the establishment, exercise or protection of rights".
You can reject commercial electronic communication whenever you want and without giving any reason, and in cases where personal data is processed based on your explicit consent, you can stop personal data processing processes based on explicit consent by withdrawing your explicit consent.
What are your rights?
Relevant Persons have the following rights in accordance with Article 11 of the Law:
Learning whether personal data is being processed or not,
Requesting information if personal data has been processed,
Learning the purpose of processing personal data and whether it is used in accordance with its purpose,
Knowing the third parties to whom personal data are transferred domestically / abroad,
If personal data is missing/incorrectly processed,
do not want to be touched,
Requesting the deletion/destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law,
Requesting notification of transactions made in accordance with paragraphs (5) and (6) above to third parties to whom personal data has been transferred,
Object to adverse consequences arising from the analysis of personal data exclusively by automated systems,
Request compensation for the damage if they suffer damage due to unlawful processing of their personal data.
Relevant requests can be found on our website www.grnmuhendislik.com and sent to Yukarı Dudullu Mah Necip Fazıl Blv. Keyap St. By filling out the "Relevant Person Application Form", which can be obtained by applying in person at F1 Blok No: 44/95 Ümraniye / Istanbul;
With a wet signature and a photocopy of a valid ID document, Yukarı Dudullu Mah Necip Fazıl Blv. Keyap St. By sending to F1 Blok No:44/95 Ümraniye / Istanbul,
They can be submitted by applying in person with a valid ID document.
Information and documents regarding the subject must be added to the application. GRN has the right to request information and documents from the applicant in order to determine whether the applicant is the Relevant Person and to ask questions to the Relevant Person regarding his application in order to clarify the requests and information contained in the application. Requests will be answered and concluded as soon as possible, in any case within 30 days at the latest.
For detailed information, you can reach GRN via the contact information available on our website.