Skip to content

Privacy Notice

This privacy notice is provided by GÜNDÜZ ALÜMİNYUM CEPHE SİST.İML.VE İNŞ.SAN.TİC.LTD.ŞTİ. (“Gündüz Alüminyum”), as data controller, under Article 10 of Law No. 6698 on the Protection of Personal Data (the “Law”), for visitors to gunduzaluminyum.com and users of its contact form.

1. Data controller

  • Registered company name: GÜNDÜZ ALÜMİNYUM CEPHE SİST.İML.VE İNŞ.SAN.TİC.LTD.ŞTİ.
  • Address: Serhat Mah. 1485 Cad. Ak İş Merkezi No: 17/3, Yenimahalle / Ankara, Türkiye
  • E-mail: bilgi@gunduzaluminyum.com
  • Phone: +90 312 394 63 39

2. Data processed, purposes and legal grounds

Personal data are collected electronically via our website, either entered by you in the form or recorded automatically.

Contact and quotation form

Each form submission is saved as a request record in our website’s administration panel (WordPress, on our own server) and e-mailed to our company address.

  • Data: full name, phone, e-mail and message (required); company, service of interest and project location (optional); the form language, the submission date and your confirmation that you have read this notice.
  • Purpose: answering your request, preparing a quotation, communicating with you and taking steps prior to a contract.
  • Legal ground: processing directly related to establishing or performing a contract (Article 5(2)(c) of the Law); for requests not aimed at a contract or sent on behalf of a company, our legitimate interests (Article 5(2)(f)).
  • Retention: as long as needed to answer your request and for any business relationship that may follow. No fixed period applies; when this purpose ends, we delete or anonymise the record and related e-mails.

The form checkbox only confirms that you have read this notice; it is not explicit consent.

Security and spam prevention

When you send the form, your IP address is converted into a one-way hash that is used for 1 hour to limit the number of submissions and deleted within a day after it expires; the IP address itself is not stored by our website. If a field is missing or invalid, your entries are kept on our server for 10 minutes (deleted within a day after they expire, or immediately once the form is sent successfully) and linked to your browser by the gunduz_form cookie, so you can refill the form. Legal ground: our legitimate interests (Article 5(2)(f)).

Server access logs

Our hosting provider records the IP address, date and time, requested address and browser information of each access. These logs are kept for website security (Article 5(2)(f)) and to meet obligations under Law No. 5651 (Article 5(2)(ç)), for as long as the provider’s legal obligations require.

Google Maps

The Google Maps map showing our location on the Contact page loads without a click when the page opens (on small screens, as you scroll near it). Your browser then connects directly to Google (Google LLC / Google Ireland Limited), which receives your IP address, browser and device information and our website’s address, but not the full page address. Google may set or read its own cookies and processes these data under its own privacy policy. This processing and transfer abroad take place within the conditions of Articles 5 and 9 of the Law. Details: Google Privacy Policy and the Cookies section of our Terms of Use.

3. Transfers

Within the purposes and legal grounds above, your data may be transferred to:

  • Our hosting and e-mail provider (data processor): its servers are in Türkiye; no data are transferred abroad for hosting or e-mail.
  • Authorised public institutions and courts: where required by law and limited to what is requested (Article 5(2)(ç)).
  • Google: abroad, only for the map described above.

4. Your rights

Under Article 11 of the Law, you may apply to the data controller to:

  • learn whether your personal data are processed
  • request information if your data have been processed
  • learn the purpose of processing and whether data are used accordingly
  • know the third parties in Türkiye or abroad to whom data are transferred
  • request rectification of incomplete or inaccurate data
  • request erasure or destruction under the conditions of Article 7 of the Law
  • request that such rectification, erasure or destruction be notified to third parties who received the data
  • object to an adverse result arising from exclusively automated analysis of the data
  • claim compensation for damage caused by unlawful processing

5. How to apply

Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you can apply as follows, stating your full name, Turkish ID number (for foreign nationals, nationality and passport number), address for notifications and the subject of your request:

  • in writing with a wet-ink signature, in person or by post, to our address above
  • by e-mail to bilgi@gunduzaluminyum.com, either signed with a secure electronic or mobile signature or sent from an e-mail address previously given to us and registered in our system (such as the one used in the form)

Requests are concluded free of charge as soon as possible and within 30 days at the latest; if an additional cost arises, the fee set by the Personal Data Protection Board (the “Board”) may be charged. If your application is rejected, you find the response insufficient or no response is given in time, you may complain to the Board under Article 14 of the Law.

Last updated: 27 October 2026