Privacy Policy and Privacy Notice
Version: 1.1 | Last Updated: 15 September 2026
1. Data Controller
Günay Soğutma
E-mail: info@gunaysogutma.com.tr
Web: https://mygunay.gunaysogutma.com.tr
2. Personal Data We Collect
The following personal data is processed in order to provide our services:
| Data Category | Data | Purpose |
|---|---|---|
| Identity Information | First name, last name | Account management, communication |
| Contact Information | E-mail address, phone number | Authentication, notifications, communication |
| Company Information | Company name, address, tax details | Management of the commercial relationship |
| Transaction Data | Orders, quotes | Service delivery, order management |
| Technical Data | IP address, browser information (hashed), cookies | Security, service improvement |
| AI Chat Data | Chat messages, chat history and account-related order, quote, project and product/price information | GÜN.AI assistant service (answer generation) |
3. Purposes of Processing Personal Data
- Account creation and authentication
- Product selection, quote preparation and order management
- Providing customer support services
- AI-assisted product consultancy
- Fulfilling legal obligations
- Applying security measures (rate limiting, audit logging)
4. Legal Basis
- Performance of a contract: Account management, order processing, quote preparation
- Legitimate interest: Security measures, service improvement, audit logging
- Explicit consent: AI chat service (including the transfer of chat data to a third-party AI provider), marketing communications
- Legal obligation: Tax and accounting records, regulatory requirements
5. Transfer of Personal Data
Your personal data may be transferred to third parties in the following cases:
- AI Service Providers: When you use the GÜN.AI assistant, your chat messages, chat history and account-related order, quote, project and product/price information are transferred to Google Gemini, OpenAI or xAI (Grok) services in order to generate answers. This data is collected directly from your chat inputs and from the records associated with your account. The transfer takes place only if you have given explicit consent before using the AI assistant and only for this service; you can withdraw your consent at any time under Profile > Privacy. These providers process the data only to deliver the service, do not use it for model training, and provide protection equivalent to ours under data processing terms and standard contractual clauses compliant with GDPR and KVKK.
- E-mail Service Provider: Your name and e-mail address are transferred to our SMTP provider in order to send notification e-mails.
- Legal Requirements: Data may be transferred to competent authorities pursuant to a court order or legal regulation.
6. Data Retention Periods
| Data Type | Retention Period |
|---|---|
| Account information | For as long as the account is active + 1 year |
| Order data | 10 years (as required by tax legislation) |
| Audit logs | 2 years |
| Chat messages | 1 year or until the user requests deletion |
| Session data | Session duration (max. 7 days on web, 30 days on mobile) |
7. Your Rights
Under the Turkish Personal Data Protection Law No. 6698 (KVKK) and the GDPR, you have the following rights:
- To learn whether your personal data is being processed
- To request information if it has been processed
- To learn the purpose of processing and whether the data is used in accordance with that purpose
- To know the third parties to whom your personal data is transferred, domestically or abroad
- To request correction of personal data that is incomplete or inaccurately processed
- To request the deletion or destruction of your personal data (right to be forgotten)
- To request the portability of your data (GDPR)
- To object to a result arising against you through the analysis of your data exclusively by automated systems
To exercise your rights, you may apply through the "Privacy and Data" section of your profile settings or by sending an e-mail to info@gunaysogutma.com.tr.
8. Cookies
Our application uses the following cookies:
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| Session cookie | Strictly necessary | Authentication | 7 days |
| Language preference | Functional | Interface language | 1 year |
| Theme preference | Functional | Interface theme | 1 year |
9. Security Measures
The following technical and administrative measures are applied to ensure the security of your personal data:
- Passwords are hashed with an industry-standard algorithm
- Sensitive data is encrypted with AES-256-GCM
- All communication takes place over HTTPS (TLS 1.2+)
- Access controls and role-based authorization are applied
- Malicious access is blocked through rate limiting
- Security events are monitored through audit logs
10. Changes to This Policy
This privacy policy may be updated from time to time. In the event of significant changes, you will be notified via your registered e-mail address. You can always check the current version on this page.
11. Contact
For questions regarding your personal data:
E-mail: info@gunaysogutma.com.tr