Privacy Notice (KVKK)

Under Law No. 6698 on the Protection of Personal Data (the “Law”), your personal data is processed by GFlight Simülatör Teknoloji Yazılım Donanım Ticaret Limited Şirketi (“GFlight”) as the data controller, within the scope described below.

• Address: Atakent Mh. Mithatpaşa Cd. No:116 Çağla Plaza Kat:3, Ümraniye/İstanbul, Türkiye
• Email: [email protected]
• Registered electronic mail (KEP): [email protected]

When you visit our website and contact us, the following data may be processed:

• Contact and request details: the name, contact details and message content you share with us through the contact or quote form, email or phone,
• Technical data: server logs such as your IP address, browser and device type, pages visited, and the date and time of access,
• Cookie data: the cookies we use are described in the Cookie Policy.

This data is collected automatically through server logs and cookies, and by non-automated or partly automated means through forms, email and phone.

Your personal data is processed for the following purposes:

• Receiving, evaluating and answering the information, support and quote requests you send us,
• Handling communication about products, compatibility, warranty and technical support,
• Keeping our website secure and technically operational,
• Fulfilling our legal obligations and establishing, exercising or protecting legal rights in case of disputes,
• Ensuring the legal, technical and commercial security of GFlight and the parties it has business relations with.

Your personal data is processed on the following legal grounds under Article 5(2) of the Law:

• (c) Processing is directly related to the establishment or performance of a contract (e.g. evaluating your quote request),
• (ç) Processing is necessary for the controller to fulfil a legal obligation,
• (e) Processing is necessary for the establishment, exercise or protection of a right,
• (f) Processing is necessary for GFlight's legitimate interests, provided it does not harm your fundamental rights and freedoms (e.g. website security).

We do not carry out any processing that requires explicit consent. If we start such an activity in the future, we will obtain your explicit consent separately.

Your personal data may be transferred, limited to the purposes above and in line with Articles 8 and 9 of the Law, to our hosting, infrastructure and email service providers, our legal advisors, and public authorities authorised by law. If our service providers' servers are located abroad, the transfer is made in accordance with the conditions set out in Article 9 of the Law.

Your personal data is not sold and is not shared with third parties for marketing purposes.

Under Article 11 of the Law, you may apply to GFlight to exercise the following rights regarding your personal data:

• To learn whether your personal data is processed,
• To request information if it has been processed,
• To learn the purpose of processing and whether it is used accordingly,
• To know the third parties to whom it is transferred, in Türkiye or abroad,
• To request correction if it is incomplete or inaccurate,
• To request deletion or destruction under the conditions set out in Article 7 of the Law,
• To request that such correction, deletion or destruction be notified to the third parties to whom the data was transferred,
• To object to an adverse result arising from analysis of the data exclusively by automated systems,
• To claim compensation for damage suffered due to unlawful processing.

You may submit your requests regarding your rights, in accordance with the Communiqué on Procedures and Principles of Application to the Data Controller, through the following channels:

• In writing to Atakent Mh. Mithatpaşa Cd. No:116 Çağla Plaza Kat:3, Ümraniye/İstanbul, Türkiye,
• By registered electronic mail (KEP) to [email protected],
• From your email address registered in our systems to [email protected].

Your application is concluded as soon as possible and within thirty days at the latest, depending on the nature of the request. If the process requires an additional cost, a fee may be charged based on the tariff set by the Personal Data Protection Board.

If your application is rejected, the response is found insufficient, or no response is given in time, you have the right to lodge a complaint with the Personal Data Protection Board within thirty days of receiving the response and in any case within sixty days of the application date.