Last updated: 06.06.2026This Personal Data Notice has been prepared under Turkey’s Law No. 6698 on the Protection of Personal Data (KVKK) and related secondary regulations by Golinbo Pazarlama Ve Yazılım Çözümleri Ltd. Şti. under the Golinbo brand and has been prepared in relation to personal data processed through the website.Golinbo is the brand name operated by Golinbo Pazarlama Ve Yazılım Çözümleri Ltd. Şti.Data controllerYour personal data is processed by Golinbo Pazarlama Ve Yazılım Çözümleri Ltd. Şti. as data controller.• Contact details• Türkiye contact address: Next Level Loft Ofis, Kızılırmak, Dumlupınar Blv. No:4, 06520 Çankaya, Ankara• Email: contact@golinbo.com• Email: contact@golinbo.comIn this notice, “Company”, “Golinbo”, “we” or “us” refer to Golinbo Pazarlama Ve Yazılım Çözümleri Ltd. Şti.ScopeThis notice covers people who visit our website, people who use the contact or preliminary-evaluation form, people who contact us by email or phone, and people who contact us on behalf of their organisations in a current or potential business relationship.Separate notices may be prepared for job candidates, employees, suppliers or contracted business partners. This notice primarily relates to www.golinbo.com and Golinbo communication channels used for external communication and business development.Categories of personal data processedDepending on the nature of our activity and the scope of contact with you, the following categories of personal data may be processed:Personal data processed may be assessed in the following categories:• Identity data: first name and last name.• Contact details: email address, phone number, work address and communication preferences.• Professional and organisational information: organisation name, title, role, represented party, sector and organisation type.• Request and transaction information: subject of the request, message content, project or partnership descriptions, meeting notes, and records of proposal and evaluation processes.• Contract and business-relationship information: service scope, proposal, contract, meeting, process tracking, delivery and reporting information.• Financial and commercial information: information limited to invoice, payment, accounting and legal record processes.• Digital transaction and technical information: IP address, browser and device information, pages visited, date-time information, form submission records and logs.• Cookie and preference information: cookie preferences, explicit consent or refusal records, and site-use preferences.• Legal process and security information: dispute, request, application, audit, legal-obligation and information-security records.Please do not share special categories of personal data via the contact form or free-text fields. If such data is sent without an explicit request, it may be assessed only as needed to understand and respond to the request, to meet legal obligations, or to delete/destroy it where required.Purposes of processing personal dataYour personal data may be processed for the following purposes:• Operating the website in a secure, orderly and functional way.• Receiving, responding to and following up contact and preliminary-evaluation requests.• Conducting corporate communication processes.• Assessing submitted requests for scope, subject, party, risk, feasibility and communication need.• Establishing potential or current business relationships, preparing proposals, conducting contract talks, and managing service scope and deliverables.• Establishing authority, role, decision flow, delivery tracking, reporting and audit trail in work processes.• Assessing compliance requirements.• Conducting business continuity, information security, systems management and technical support processes.• Meeting legal obligations, responding to official requests, and establishing, exercising or protecting rights.• Where explicit consent is required, conducting cookie, analytics, marketing or commercial electronic-message processes according to your preferences.• Measuring service quality, site performance and communication processes.Your personal data is not used in solely automated decision processes that produce legal effects, or similarly significant effects, concerning visitors or data subjects.Legal grounds for processing personal dataDepending on the processing activity, your personal data may be processed on the following legal grounds under Article 5 of KVKK and, where required, Article 6:• Explicit consent: use of non-essential cookies, optional commercial communications, and marketing or analytics processes that require explicit consent.• Explicitly provided for by law: records and obligations arising from tax, commercial, accounting, internet, information-security and official-authority requests.• Necessary for the establishment or performance of a contract: proposal, contract, service scope, business relationship, meeting and process management.• Fulfilment of the data controller’s legal obligation: keeping legal records, responding to official requests, and answering applications.• Establishment, exercise or protection of a right: dispute management, request and defence processes, audit trail and evidential records.• Legitimate interest, provided it does not harm the data subject’s fundamental rights and freedoms: site security, business-development communication, management of corporate contacts, request follow-up and improvement of service quality.Where processing must rest on explicit consent, that consent is obtained separately. The disclosure obligation and explicit-consent processes are conducted independently.Methods of collecting personal dataYour personal data may be obtained by the following methods:• Contact or preliminary-evaluation forms on the website.• Email, phone, meeting, online call and similar communication channels.• Contract, proposal, meeting-note, business-development and process-management records.• Cookies, logs, site-usage records and similar automated technical means.• Organisation websites, public sources, professional networks, and information shared by the data subject or the organisation they represent.• Information lawfully shared via competent public authorities, suppliers, service providers or business partners.These data may be processed fully or partly by automated means, or by non-automated means as part of a data filing system.Transfer of personal dataYour personal data may be transferred, limited and proportionate to the processing purpose, to the following recipient groups:• Hosting, cloud infrastructure, form, email, security, backup, technical support and software service providers.• Website infrastructure, content-management, performance and analytics service providers.• Accountants, legal advisers, auditors and similar professional advisers.• Banks, payment and financial-transaction parties.• Relevant persons, organisations and representatives where necessary in a contractual or potential business relationship.• Competent public authorities and judicial bodies.• Relevant third parties and service providers where you have given explicit consent or other legal grounds under KVKK apply.Where personal data must be transferred abroad, the transfer is carried out in line with Article 9 of KVKK and related secondary regulations. Adequacy decisions, appropriate safeguards, standard contractual clauses, binding corporate rules, occasional transfer cases or explicit consent are assessed as relevant legal mechanisms.Retention and destructionYour personal data is stored for as long as needed for the purpose of processing, taking into account limitation, retention, evidential and obligation periods in the relevant legislation.In general:• Contact and preliminary-evaluation requests are stored for the time needed to conclude the request and for a reasonable follow-up period.• Contract, proposal, accounting, tax and commercial-relationship records are stored for the periods in the relevant legislation and limitation periods.• Site-security, log and technical records are stored for a period limited to the relevant legislation, security and evidential needs.• Cookie retention periods may vary by cookie category and provider. For non-essential cookies, your preferences apply.If the processing purpose and legal ground no longer apply, your personal data is deleted, destroyed or anonymised.Data securityAppropriate technical and organisational measures are taken for the security of your personal data. These may include restricting access rights, setting confidentiality and security obligations with service providers, system security, backup, logging, authorisation control and data minimisation to the extent needed by work processes.Information shared in communication processes is assessed only within the relevant request, process or business relationship.Rights of the data subjectUnder Article 11 of KVKK, you have the following rights regarding your personal data:• To learn whether your personal data is processed.• To request information if your personal data has been processed.• To learn the purpose of processing and whether it is used in line with that purpose.• To know the third parties to whom your personal data is transferred in Türkiye or abroad.• To request correction if your personal data is processed incompletely or inaccurately.• To request deletion or destruction of your personal data within the conditions set out in KVKK.• To request that correction, deletion or destruction be notified to third parties to whom your personal data was transferred.• To object to a result against you arising from analysis of your processed data exclusively by automated systems.• To request compensation if you suffer damage due to unlawful processing of your personal data.How to applyYou can send personal-data requests, together with information and documents suitable for verifying your identity, through the following channels:• Email: contact@golinbo.com• Email: contact@golinbo.com• Written application address: Next Level Loft Ofis, Kızılırmak, Dumlupınar Blv. No:4, 06520 Çankaya, AnkaraYour application should include name, surname, contact details, the subject of the request and information needed for identity verification. Requests are concluded as soon as possible and within 30 days at the latest, according to their nature. If the process requires an additional cost, the fees set out in the relevant legislation may apply.Updates to this noticeThis notice may be updated for changes in legislation, the website’s technical structure, cookie preferences, service scope, data-processing processes or communication channels. The current notice is published on www.golinbo.com.