Privacy Policy
GÜRMEN PRIVACY POLICY
This information text has been prepared to share with you the security, privacy, and personal data protection policy of GÜRMEN GİYİM SANAYİ VE TİCARET ANONİM ŞİRKETİ (“GÜRMEN”), which acts as the “data controller”.
1. Security Measures
Gürmen takes all necessary legal, technical, and administrative measures to ensure the security of personal data and user information. Only authorized persons may access personal data, and our employees are regularly informed about data security and strictly adhere to confidentiality obligations.
Gürmen’s e-commerce infrastructure (“RAMSEY.com.tr”) has been developed in line with the principles of “secure shopping” and “privacy of personal information” and is protected by advanced communication protocols, primarily SSL technology. As a result, your credit card information used during shopping transactions is protected by a 128-bit encryption system, transmitted only between you and your bank, and is strictly never recorded or stored by our systems.
Gürmen works with infrastructure providers that possess security certifications compliant with international standards and regularly performs the necessary updates to maintain the highest level of data security.
Our users' personal information is stored in secure environments within the scope of the Personal Data Protection Law No. 6698 (“KVKK”) and relevant legislation, and measures such as encryption, access control, and log monitoring are applied to protect data against unauthorized access, loss, or misuse.
To ensure users have a secure shopping experience, Gürmen ensures that all transactions are carried out through secure connections where all activities are conducted only over the “https://” protocol. It is recommended that our customers ensure a secure connection is established by checking the padlock icon in the browser's address bar.
2. Protection of Personal Data
As Gürmen, we show maximum sensitivity regarding the security of your personal data. Your personal data is processed and stored in accordance with the Personal Data Protection Law No. 6698 and relevant legislation.
3. Method of Collection and Processing of Your Personal Data
Your personal data shared through RAMSEY.com.tr may be collected via automated means (e.g., website, cookies, membership form, order transactions, e-mail communication, etc.) or non-automated means (e.g., call center, written applications, etc.).
Your collected personal data may undergo processes such as recording, storage, updating, organization, transfer, or deletion and may be processed by the data controller, Gürmen, in accordance with the general principles specified in Articles 3 and 4 of the KVKK. Any operation performed within this scope is considered “processing of personal data”.
4. Personal Data Subject to Processing Activities
The data processed by us and considered personal data under the Law are listed below. Unless explicitly stated otherwise, the term “personal data” within the scope of the provisions and conditions presented in this Policy shall cover the following information:
- Identity Information
- Contact Information
- User Information
- User Transaction Information
- Transaction Security Information
- Financial Information
- Marketing Information
- Request/Complaint Management Information
In accordance with Articles 3 and 7 of the Personal Data Protection Law, data that has been irreversibly anonymized shall not be considered personal data under the provisions of the aforementioned law, and processing activities regarding such data will be carried out without being bound by the provisions of this Policy. Special categories of personal data are not processed by Gürmen; in mandatory cases, they are processed by obtaining explicit consent in accordance with Article 6 of the KVKK.
5. Purposes and Legal Grounds for Processing Your Personal Data
The personal data you share may be processed for the following purposes in accordance with the KVKK and relevant secondary regulations:
- Fulfilling services provided to our customers in accordance with the contract, legislation, and technological requirements, and improving products and services,
- Providing information to prosecutors' offices, courts, and relevant public institutions upon request and as required by legislation in matters concerning public security and legal disputes,
- Fulfilling obligations within the scope of tax laws, the Turkish Commercial Code No. 6102, the Tax Procedure Law No. 213, and relevant legislation,
- Fulfilling obligations regarding the protection of consumer rights within the scope of the Law on the Protection of the Consumer No. 6502,
- Receiving customer orders, selling products, ensuring delivery, collecting payments, and providing after-sales support services,
- Measuring customer satisfaction, collecting and evaluating complaints and suggestions,
- Executing distance sales contracts and identity verification processes in electronic commerce transactions,
- Increasing service quality and improving user experience,
- Conducting campaign, promotion, advertising, marketing, and information activities regarding products and services,
- Providing advantages such as points, discounts, or special offers on purchases,
- Performing necessary work by relevant business units to conduct commercial activities, planning and executing business processes,
- Ensuring the legal, technical, and commercial business security of persons and institutions with whom there is a business relationship, and determining and implementing commercial strategies.
Within the scope of the above purposes, your personal data will be processed according to the legal grounds specified in Articles 5/2 and 6 of the KVKK:
- Where it is expressly provided for by law,
- Where it is directly related to the establishment or performance of a contract,
- Where it is necessary for the data controller to fulfill its legal obligation,
- Where it is necessary for the establishment, exercise, or protection of a right,
- Where it is necessary for the legitimate interests of the data controller
In these cases, data will be processed without seeking explicit consent, while in other cases, it will be processed by obtaining the explicit consent of the data subject. Marketing and promotional activities are directed only to individuals who have given their explicit consent.
In accordance with the data minimization principle, Gürmen collects only the necessary data suitable for the purpose of processing. Your personal data is processed only to the extent limited to the specified purposes and is not used for other purposes.
6. Information Regarding Third Parties or Organizations to Whom Your Personal Data May Be Transferred
Personal data you share with RAMSEY.com.tr may be transferred to the persons and organizations specified below within the scope of realizing the purposes mentioned above and in accordance with the provisions of the KVKK and relevant legislation:
- Our business partners, suppliers, and group companies located domestically and abroad,
- Cargo, logistics, call center, customer service, marketing, and advertising service providers,
- Payment infrastructure providers, banks, and financial institutions,
- Information technology infrastructure service providers (hosting, data storage, maintenance, support, etc.),
- Advertising, analytics, and social media platforms (e.g., Google, Meta/Facebook, Instagram),
- Public institutions and organizations legally authorized to fulfill legal obligations,
- And, without being limited to these, third parties with whom we cooperate for the conduct of RAMSEY.com.tr activities or from whom we receive services in the capacity of “data processor”.
The transfer of your personal data within this scope is carried out in accordance with data security principles by taking the necessary administrative and technical measures. Data transfer abroad is performed only with the explicit consent of the data subject and is limited to firms that meet the safe country criteria in accordance with the KVKK.
Our regulations regarding cookies used for advertising, analysis, and user experience are included in the Gürmen Cookie Policy, and the Cookie Policy is an integral part of this Privacy Policy. By reviewing our Cookie Policy, you can obtain detailed information about the use of advertising cookies and how to manage your preferences.
7. Storage and Protection of Personal Data
Gürmen takes all necessary administrative and technical measures to ensure the security of your personal data. Within this scope, software measures such as hashing, encryption, access management, and keeping transaction logs, as well as physical security measures, are applied to prevent the unlawful processing of personal data, prevent unauthorized access, and ensure the secure storage of data.
Personal data is stored only for the duration required by the processing purposes and the periods stipulated in the relevant legislation; upon the expiration of the period, it is destroyed via deletion, destruction, or anonymization methods.
In the event that personal data is obtained by third parties through illegal means, Gürmen will immediately notify the Personal Data Protection Board and the relevant persons in accordance with legal timeframes.
Personal data is stored for a maximum period of 10 years, or for the periods stipulated in the relevant legislation or required by the purpose of processing.
8. Keeping Personal Data Accurate and Up-to-Date
In accordance with Article 4 of the KVKK, Gürmen is obliged to ensure that personal data is kept accurate and up-to-date. In this context, it is of great importance that our members share their personal data accurately, completely, and in an up-to-date manner in order for us to fulfill our legal obligations and provide you with the most accurate service.
In case of any changes to their personal data, our customers can update their information via the website or mobile application or share it with us through Gürmen’s communication channels.
9. Rights of the Personal Data Subject
Regarding the processing of your personal data, you have the following rights in accordance with Article 11 of the KVKK:
- To learn whether your personal data has been processed,
- To request information if your personal data has been processed,
- To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
- To know the third parties to whom your personal data is transferred domestically or abroad,
- To request the correction of your personal data if it has been processed incompletely or incorrectly,
- To request the deletion or destruction of your personal data,
- To request that the processes regarding the correction, deletion, or destruction of your personal data be notified to third parties to whom the data has been transferred,
- To object to an outcome against you arising from the analysis of processed data exclusively through automated systems,
- To request the compensation of damages in case you suffer loss due to the unlawful processing of personal data.
To exercise these rights, you can submit your requests to us via the channels included in the KVKK Application Form. Applications received by us will be concluded within 30 days at the latest in accordance with Article 13 of the KVKK. Requests are concluded free of charge; however, we reserve the right to demand a fee based on the tariff determined by the Board if the transaction requires additional costs.
10. Changes and Updates
This text has been prepared in accordance with the Personal Data Protection Law No. 6698, as well as the Regulations and Communiqués published within the scope of said Law, and our personal data processing purposes and policies. Necessary changes may be made to this text and our Clarification Text in line with changes in relevant legal legislation and/or our personal data processing purposes and policies. The current policy enters into force on the date it is published on RAMSEY.com.tr.