Privacy Policy
1. Who we are
This website (gmctechlabs.com, the "Site") is operated by GMC Teknoloji Yazılım Limited Şirketi, trading in Europe as GMC Tech Labs ("GMC", "we", "us"). We are the data controller for personal data processed through the Site.
Address: [ADRES] · E-mail: [E-POSTA]
2. What data we collect
- When you visit the Site: IP address, browser and device information, date and time of visit, pages viewed, referring URL and — only with your consent — usage data collected through analytics cookies (Google Analytics 4).
- When you use the contact form: name, e-mail address, phone number (optional), company and the content of your message.
- When you contact us by e-mail or phone: the contact details and correspondence you share with us.
3. Why we process it and on what legal basis (Art. 6 GDPR)
| Purpose | Legal basis |
|---|---|
| Responding to enquiries, preparing proposals, pre-contractual steps | Art. 6(1)(b) — contract / pre-contractual measures |
| Operating, securing and maintaining the Site | Art. 6(1)(f) — legitimate interest |
| Measuring and improving Site usage (analytics) | Art. 6(1)(a) — consent (via the cookie banner) |
| Compliance with legal obligations | Art. 6(1)(c) — legal obligation |
4. Cookies and analytics
We use Google Analytics 4 with Google Consent Mode. Analytics cookies are set only after you click "Accept" in the cookie banner. You can change or withdraw your choice at any time via "Cookie settings" in the footer. Details in our Cookie Policy.
5. Recipients and international transfers
We share personal data only with service providers acting on our behalf — web hosting and content delivery (Cloudflare), e-mail services and analytics (Google) — and with authorities where legally required. Some providers process data outside the EEA (e.g. in the United States). Such transfers rely on the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses (Art. 46 GDPR).
6. Retention
Contact-form data: up to 2 years after your enquiry is closed, or for the duration of the business relationship and statutory retention periods thereafter. Server logs: up to 2 years. Analytics data: according to the cookie lifetimes stated in the Cookie Policy (GA4 retention set to 14 months).
7. Your rights (Art. 15–22 GDPR)
You have the right to access, rectify or erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting the lawfulness of processing before withdrawal. You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence or place of work.
8. How to exercise your rights
Write to [E-POSTA] or to the postal address above. We respond within one month.
9. Security
We apply appropriate technical and organisational measures, including transport encryption (HTTPS), access controls and data minimisation.
10. Changes
We may update this policy; the current version is always published on this page.