Privacy Policy

1. General Information

GRC Teknoloji is committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit or interact with our website www.grctek.com.

It also explains your rights under applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law (KVKK No. 6698).

This Policy does not apply to third-party websites linked from our website.

2. Information We Collect

a) Automatically Collected Data — When you browse our website, certain technical data is automatically stored on our servers, including: your Internet Service Provider's name and IP address, browser type and version, operating system, referring and visited pages, and search terms used to find our website. This information is used only for system administration, statistical analysis, and security purposes. It does not personally identify you.

b) Data You Provide Voluntarily — We may collect personal information such as your name, email address, phone number, and company name (via contact forms or email communication), and any other information you choose to share with us. By providing this data, you consent to its collection and processing in accordance with this Privacy Policy.

3. Purpose and Legal Basis of Processing

Your personal data is processed for the following purposes: to respond to your inquiries and requests, to manage and improve our website, to ensure network and information security, and to comply with legal obligations.

Processing is based on your consent, contractual necessity, or legitimate interest, as applicable.

4. Data Sharing and Transfer

Your personal data may only be shared: with authorized employees of GRC Teknoloji, with service providers or partners under strict confidentiality obligations, or when required by law.

We do not sell or trade your personal data. Where data is transferred outside the EEA, appropriate safeguards are applied in accordance with the GDPR.

5. Data Retention

We retain personal information only as long as necessary to fulfill the described purposes or comply with legal obligations.

You may request deletion of your data at any time (see Section 8).

6. Data Security

We take all reasonable technical and organizational measures to protect your data from unauthorized access, alteration, loss, or misuse.

Any third parties processing your data on our behalf are contractually bound to ensure the same protection level.

7. Children's Privacy

Our website and services are not intended for children under 14.

We do not knowingly collect data from children.

If parents believe their child has provided data, they may contact us at info@grctek.com to request deletion.

8. Your Rights

Under GDPR and KVKK, you have the right to: access, correct, or delete your data; object to or restrict processing; withdraw consent at any time; and file a complaint with a supervisory authority.

9. Social Media Plugins

Our website may include plugins from Facebook and X (Twitter).

To protect your privacy, these plugins are deactivated by default ("double-click" principle).

Activating them allows direct data transfer to the provider.

10. Changes to This Policy

We may update this Policy periodically.

Updates will be posted with a revised "Effective Date."

11. Contact

Email: info@grctek.com

Website: www.grctek.com

Address: Altintepe mh. Istasyon Yolu sk. No 3/1 Maltepe 34840 Istanbul, Türkiye