GDPR Statement

Last updated: June 2026

---

This Personal Data Privacy Notice has been prepared to inform you about the collection, processing, transfer of your personal data, and your rights under the Turkish Personal Data Protection Law No. 6698 (“KVKK”).

As Glammel, located at Fulya Mah. Büyükdere Cad. 74/D Torun Center Floor:3 No:10, 34394 Şişli, Istanbul, Türkiye, we process your personal data as the data controller in accordance with KVKK and applicable legislation.

1. Personal Data We Process

In order to fulfill the purposes set out in this Privacy Notice, we may process the following personal data:

1.1 For Natural Persons

• Identity information including name and surname
• Contact information including email address, phone number, and mobile phone number
• Customer transaction information including sector information, document type, requests, and complaints
• Financial information including account number, IBAN, debit-credit information, and maturity details
• Professional experience information including CVs, resumes, job application forms, educational and professional background shared during interviews, vocational training, courses, certificates, diplomas, transcripts, references, military service status, and association or foundation memberships
• Marketing information including cookie records

1.2 For Legal Entities

• Identity information including name, surname, Turkish ID number, signature, tax number, place of birth, date of birth, registered place of residence, gender, marital status, and other information contained in identity documents or driver’s license copies
• Contact information including email address, phone number, mobile phone number, and social media accounts
• Location information including residence and address details
• Legal transaction information including enforcement records, contracts, and powers of attorney
• Visual and audio records including photographs, videos, and voice recordings
• Transaction security information including IP address, website and system browsing records, passwords, access logs, and security credentials
• Financial information including account number, IBAN, debit-credit information, and maturity details
• Marketing information including cookie records

2. Purposes of Processing Personal Data

We process your personal data for the following purposes:

• Providing our products and services and conducting sales processes
• Enabling users to access and use our products and services
• Conducting meetings to identify new business partners and third-party companies
• Managing procurement processes
• Updating, customizing, and improving our products and services according to your needs and requests
• Detecting and resolving problems, errors, bugs, and technical issues in our products and services
• Providing training and information about our products and services upon customer request
• Providing paid training upon customer request
• Managing customer relations
• Providing remote support services
• Managing cookies to improve website experience, identify requests and issues, and optimize search processes
• Updating contact information and sharing updated information with relevant institutions, group companies, contractors, and suppliers
• Fulfilling turnkey requests received by sales or support teams
• Analyzing business processes and adapting our products and services accordingly
• Reviewing and responding to complaints
• Conducting customer satisfaction activities
• Following up on collections
• Improving user experience
• Planning and conducting social media and corporate communication processes
• Conducting marketing, advertising, campaign, and promotion activities
• Informing users about new products, services, updates, campaigns, and promotions
• Sending newsletters to potential and existing customers
• Responding to information requests submitted through our website
• Providing product and service demos
• Supplying temporary employees through business partner companies
• Measuring business partner satisfaction
• Managing, executing, and auditing business activities and ensuring business continuity
• Conducting finance and accounting operations
• Ensuring the security of our software and systems and managing information security processes
• Evaluating job applications, conducting interviews, and contacting references
• Organizing events and business activities
• Complying with legal regulations and fulfilling legal obligations

3. Methods of Collecting Personal Data

We collect personal data through automatic and non-automatic channels, including:

• Email, SMS, and business cards
• Phone and fax
• Physical forms
• Our website
• Remote access platforms
• Mail, cargo, and courier services
• Face-to-face meetings
• Other physical and electronic environments

4. Legal Grounds for Processing

Your personal data is processed based on the legal grounds set out under Article 5 of KVKK, including:

• Processing being expressly provided for by law
• Processing being necessary for the establishment or performance of a contract
• Processing being necessary for fulfilling legal obligations
• Processing being necessary for the establishment, exercise, or protection of a right
• Processing being necessary for our legitimate interests
• Your explicit consent where required

Your sensitive personal data may be processed based on the legal grounds set out under Article 6 of KVKK, including your explicit consent, legal requirements, and, where applicable, processing by authorized persons or institutions under confidentiality obligations for healthcare-related purposes.

5. Transfer of Personal Data

Based on the legal grounds set out under Articles 8 and 9 of KVKK, your personal data may be transferred for the purposes stated above to:

• Domestic and international business partners for support, marketing, sales, and product development activities
• Authorized public institutions and organizations for fulfilling legal obligations, responding to judicial or administrative requests, audits, and legal disputes
• Group companies for sales operations
• Legally authorized natural persons or private legal entities for fulfilling legal obligations and managing legal processes

6. Your Rights Regarding Personal Data

Pursuant to Article 11 of KVKK, you have the following rights regarding your personal data:

• To learn whether your personal data is being processed
• To request information if your personal data has been processed
• To learn the purpose of processing and whether your data is being used in accordance with that purpose
• To know the third parties to whom your personal data has been transferred domestically or abroad
• To request correction of incomplete or inaccurate personal data
• To request notification of such corrections to third parties to whom your personal data has been transferred
• To request deletion or destruction of your personal data if the reasons for processing no longer exist, even if processed lawfully
• To request notification of such deletion or destruction to third parties to whom your personal data has been transferred
• To object to any result arising against you through the exclusive analysis of processed data by automated systems
• To request compensation if you suffer damage due to unlawful processing of your personal data

You may submit your requests regarding these rights by contacting us at [email protected].

Your application will be processed free of charge. However, if the requested action requires additional costs, fees determined by the Turkish Personal Data Protection Board may be charged.