Personal Data Notice
Last updated: 06.06.2026
This Personal Data Notice has been prepared under Turkey’s Law No. 6698 on the Protection of Personal Data (KVKK) and related secondary regulations by Golinbo Pazarlama Ve Yazılım Çözümleri Ltd. Şti. under the Golinbo brand, in relation to personal data processed through the website.
Golinbo is the brand name operated by Golinbo Pazarlama Ve Yazılım Çözümleri Ltd. Şti..
Data controller
Your personal data is processed by Golinbo Pazarlama Ve Yazılım Çözümleri Ltd. Şti. as data controller.
Türkiye contact address: Next Level Loft Ofis, Kızılırmak, Dumlupınar Blv. No:4, 06520 Çankaya, Ankara
Email: contact@golinbo.com
In this notice, “Company”, “Golinbo”, “we” or “us” refer to Golinbo Pazarlama Ve Yazılım Çözümleri Ltd. Şti..
Scope
This notice covers:
People who visit our website
People who use the contact or preliminary-evaluation form
People who contact us by email or phone
People who contact us on behalf of their organisations in a current or potential business relationship
Separate notices may be prepared for job candidates, employees, suppliers or contracted business partners.
This notice primarily relates to www.golinbo.com and Golinbo communication channels used for external communication and business development.
Categories of personal data processed
Depending on the nature of our activity and the scope of contact with you, the following categories of personal data may be processed:
Identity data
First name and last name.
Contact details
Email address, phone number, work address and communication preferences.
Professional and organisational information
Organisation name, title, role, represented party, sector and organisation type.
Request and transaction information
Subject of the request, message content, project or partnership descriptions, meeting notes, and records of proposal and evaluation processes.
Contract and business-relationship information
Service scope, proposal, contract, meeting, process tracking, delivery and reporting information.
Financial and commercial information
Information limited to invoice, payment, accounting and legal record processes.
Digital transaction and technical information
IP address, browser and device information, pages visited, date-time information, form submission records and logs.
Cookie and preference information
Cookie preferences, explicit consent or refusal records, and site-use preferences.
Legal process and security information
Dispute, request, application, audit, legal-obligation and information-security records.
Please do not share special categories of personal data via the contact form or free-text fields. If such data is sent without an explicit request, it may be assessed only as needed to understand and respond to the request, to meet legal obligations, or to delete or destroy it where required.
Purposes of processing personal data
Your personal data may be processed for the following purposes:
Operating the website in a secure, orderly and functional way.
Receiving, responding to and following up contact and preliminary-evaluation requests.
Conducting corporate communication processes.
Assessing submitted requests for scope, subject, party, risk, feasibility and communication need.
Establishing potential or current business relationships, preparing proposals, conducting contract talks, and managing service scope and deliverables.
Establishing authority, role, decision flow, delivery tracking, reporting and audit trail in work processes.
Assessing compliance requirements.
Conducting business continuity, information security, systems management and technical support processes.
Meeting legal obligations, responding to official requests, and establishing, exercising or protecting rights.
Where explicit consent is required, conducting cookie, analytics, marketing or commercial electronic-message processes according to your preferences.
Measuring service quality, site performance and communication processes.
Your personal data is not used in solely automated decision processes that produce legal effects, or similarly significant effects, concerning visitors or data subjects.
Legal grounds for processing personal data
Depending on the processing activity, your personal data may be processed on the following legal grounds under Article 5 of KVKK and, where required, Article 6:
Explicit consent
Use of non-essential cookies, optional commercial communications, and marketing or analytics processes that require explicit consent.
Explicitly provided for by law
Records and obligations arising from tax, commercial, accounting, internet, information-security and official-authority requests.
Necessary for the establishment or performance of a contract
Proposal, contract, service scope, business relationship, meeting and process management.
Fulfilment of the data controller’s legal obligation
Keeping legal records, responding to official requests, and answering applications.
Establishment, exercise or protection of a right
Dispute management, request and defence processes, audit trail and evidential records.
Legitimate interest, provided it does not harm the data subject’s fundamental rights and freedoms
Site security, business-development communication, management of corporate contacts, request follow-up and improvement of service quality.
Where processing must rest on explicit consent, that consent is obtained separately. The disclosure obligation and explicit-consent processes are conducted independently.
Methods of collecting personal data
Your personal data may be obtained by the following methods:
Contact or preliminary-evaluation forms on the website.
Email, phone, meeting, online call and similar communication channels.
Contract, proposal, meeting-note, business-development and process-management records.
Cookies, logs, site-usage records and similar automated technical means.
Organisation websites, public sources, professional networks, and information shared by the data subject or the organisation they represent.
Information lawfully shared via competent public authorities, suppliers, service providers or business partners.
These data may be processed fully or partly by automated means, or by non-automated means as part of a data filing system.
Transfer of personal data
Your personal data may be transferred, limited and proportionate to the processing purpose, to the following recipient groups:
Hosting, cloud infrastructure, form, email, security, backup, technical support and software service providers.
Website infrastructure, content-management, performance and analytics service providers.
Accountants, legal advisers, auditors and similar professional advisers.
Banks, payment and financial-transaction parties.
Relevant persons, organisations and representatives where necessary in a contractual or potential business relationship.
Competent public authorities and judicial bodies.
Relevant third parties and service providers where you have given explicit consent or other legal grounds under KVKK apply.
Where personal data must be transferred abroad, the transfer is carried out in line with Article 9 of KVKK and related secondary regulations. Adequacy decisions, appropriate safeguards, standard contractual clauses, binding corporate rules, occasional transfer cases or explicit consent are assessed as relevant legal mechanisms.
Retention and destruction
Your personal data is stored for as long as needed for the purpose of processing, taking into account limitation, retention, evidential and obligation periods in the relevant legislation.
In general:
Contact and preliminary-evaluation requests are stored for the time needed to conclude the request and for a reasonable follow-up period.
Contract, proposal, accounting, tax and commercial-relationship records are stored for the periods in the relevant legislation and limitation periods.
Site-security, log and technical records are stored for a period limited to the relevant legislation, security and evidential needs.
Cookie retention periods may vary by cookie category and provider. For non-essential cookies, your preferences apply.
If the processing purpose and legal ground no longer apply, your personal data is deleted, destroyed or anonymised.
Data security
Appropriate technical and organisational measures are taken for the security of your personal data. These may include restricting access rights, setting confidentiality and security obligations with service providers, system security, backup, logging, authorisation control and data minimisation to the extent needed by work processes.
Information shared in communication processes is assessed only within the relevant request, process or business relationship.
Rights of the data subject
Under Article 11 of KVKK, you have the following rights regarding your personal data:
To learn whether your personal data is processed.
To request information if your personal data has been processed.
To learn the purpose of processing and whether it is used in line with that purpose.
To know the third parties to whom your personal data is transferred in Türkiye or abroad.
To request correction if your personal data is processed incompletely or inaccurately.
To request deletion or destruction of your personal data within the conditions set out in KVKK.
To request that correction, deletion or destruction be notified to third parties to whom your personal data was transferred.
To object to a result against you arising from analysis of your processed data exclusively by automated systems.
To request compensation if you suffer damage due to unlawful processing of your personal data.
How to apply
You can send personal-data requests, together with information and documents suitable for verifying your identity, through the following channels:
Email: contact@golinbo.com
Written application address: Next Level Loft Ofis, Kızılırmak, Dumlupınar Blv. No:4, 06520 Çankaya, Ankara
Your application should include name, surname, contact details, the subject of the request and information needed for identity verification. Requests are concluded as soon as possible and within 30 days at the latest, according to their nature. If the process requires an additional cost, the fees set out in the relevant legislation may apply.
Updates to this notice
This notice may be updated for changes in legislation, the website’s technical structure, cookie preferences, service scope, data-processing processes or communication channels.
The current notice is published on www.golinbo.com.