Privacy Notice

In Accordance with Turkish Personal Data Protection Law No. 6698 (KVKK)

Company: GEMİYAP A.Ş.
Website: https://www.gemiyap.com.tr
Last Updated: 18 October 2026
Applicable Legislation: Turkish Personal Data Protection Law No. 6698 (KVKK)

1. Introduction and Scope

At GEMİYAP A.Ş. (“Gemiyap,” “Company,” “we,” “us,” or “our”), we recognize the importance of protecting personal information and respecting the privacy of our customers, suppliers, business partners, website visitors, and other individuals who interact with our organization.

We are committed to processing personal data lawfully, fairly, transparently, and securely in accordance with Turkish Personal Data Protection Law No. 6698 (“KVKK”) and applicable data protection regulations.

This Privacy Notice explains how we collect, process, store, protect, and, where necessary, share personal data obtained through our website, commercial operations, customer communications, and business relationships.

Gemiyap operates within the maritime industry, specializing in marine safety equipment, life-saving appliances, firefighting systems, marine pyrotechnics, technical equipment, ship supplies, and associated procurement and after-sales services.

This Privacy Notice applies to personal data collected during these activities.

2. Identity of the Data Controller

Under the KVKK, the data controller responsible for processing your personal data is:

Registered Company Name: GEMİYAP GEMİ GEREÇLERİ YAPIMI DONATIM BAKIM VE ONARIM A.Ş.
Website: https://www.gemiyap.com.tr
Registered Address: HACI MİMİ MH. KARABAŞ DERE SK.  Bina No:42  İç Kapı No:2 34425 TOPHANE  Beyoğlu/
İstanbul
Email: gemiyap@hs03.kep.tr - info@gemiyap.com.tr

Telephone: 0090 212 243 46 71

Gemiyap determines the purposes and means of processing personal data within the scope of its business activities.

3. Categories of Personal Data Collected

Depending on your relationship with Gemiyap and the services requested, we may collect and process the following categories of personal data.

3.1. Identity and Contact Information

  • Full name and surname.
  • Business or company affiliation.
  • Telephone and mobile phone numbers.
  • Email address.
  • Billing and delivery addresses.
  • Professional title or position, where relevant.

3.2. Customer and Commercial Transaction Information

  • Product inquiries and quotation requests.
  • Purchase orders and transaction records.
  • Product and service purchase history.
  • Invoice and payment-related information.
  • Delivery and shipping details.
  • Warranty, returns, and after-sales service records.

3.3. Website and Technical Information

  • IP address.
  • Browser type and operating system.
  • Device information.
  • Website access and security logs.
  • Cookie identifiers and preferences.
  • Website usage information, where permitted.

3.4. Communication Records

  • Email correspondence.
  • Telephone-related communication records, where applicable.
  • WhatsApp business communications.
  • Customer support requests.
  • Complaints, feedback, and technical inquiries.

3.5. Marketing Preferences

Where permitted by applicable legislation, we may process information concerning:

  • Newsletter subscriptions.
  • Marketing communication preferences.
  • Promotional campaign participation.
  • Advertising and analytical preferences.

4. Purposes of Processing Personal Data

Gemiyap processes personal data only where necessary for legitimate and clearly defined business purposes.

Such purposes may include:

  1. Responding to customer inquiries and quotation requests.
  2. Processing product orders and providing commercial services.
  3. Managing procurement, distribution, and delivery operations.
  4. Preparing invoices and maintaining accounting records.
  5. Managing customer relationships and after-sales support.
  6. Processing warranty claims, returns, and technical service requests.
  7. Coordinating import, export, and international maritime supply operations.
  8. Meeting contractual and statutory obligations.
  9. Ensuring website functionality, security, and operational continuity.
  10. Preventing unauthorized access, fraudulent transactions, and security incidents.
  11. Managing supplier and business partner relationships.
  12. Conducting marketing and promotional activities where legally permitted.
  13. Establishing, exercising, or defending legal claims.

Personal data will not be processed for purposes incompatible with the purposes for which it was originally collected unless an appropriate legal basis exists.

5. Methods and Legal Grounds for Data Collection

Personal data may be collected electronically, verbally, or in writing through the following channels:

  • Gemiyap's official website.
  • Online contact and quotation request forms.
  • Customer orders and commercial agreements.
  • Email correspondence.
  • Telephone and WhatsApp communications.
  • Supplier and customer registration procedures.
  • Invoicing, delivery, and financial documentation.

Personal data is processed in accordance with Article 5 of the KVKK, relying on the legal grounds applicable to the relevant processing activity.

5.1. Performance of a Contract

Processing may be necessary for establishing or fulfilling contractual obligations, including quotations, order management, delivery, invoicing, and after-sales services.

5.2. Compliance with Legal Obligations

Personal data may be processed to comply with applicable tax, accounting, commercial, customs, and other statutory requirements.

5.3. Establishment, Exercise, or Protection of Legal Rights

Processing may be necessary for handling disputes, managing outstanding payments, or pursuing or defending legal claims.

5.4. Legitimate Interests

Where permitted under the KVKK and provided that the fundamental rights and freedoms of the data subject are not adversely affected, personal data may be processed for legitimate business interests such as maintaining information security and managing business relationships.

5.5. Explicit Consent

Where required by law, Gemiyap will obtain explicit consent before conducting specific data processing activities, including certain marketing activities and the use of non-essential cookies.

6. Sharing and Transfer of Personal Data

Gemiyap may share personal data with authorized third parties where necessary and legally permitted.

These parties may include:

  • Shipping, freight forwarding, and logistics providers.
  • Payment service providers and financial institutions.
  • Accounting, auditing, and financial advisory service providers.
  • IT infrastructure and website hosting providers.
  • Technical service providers and authorized service partners.
  • Suppliers and manufacturers involved in fulfilling customer orders.
  • Legal advisers and professional consultants.
  • Government authorities, regulatory institutions, and judicial bodies.

Personal data is shared only to the extent necessary for the relevant processing purpose.

International Data Transfers

Due to the international nature of maritime trade, Gemiyap may need to transfer certain personal data outside Türkiye.

Any such transfer will be carried out in accordance with Article 9 of the KVKK and applicable legal requirements, including the use of appropriate safeguards or other legally permitted transfer mechanisms.

Gemiyap does not transfer personal data internationally without an applicable lawful basis or transfer mechanism.

7. Data Retention and Security

Gemiyap retains personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with applicable legal obligations.

Retention periods may vary depending on:

  • The type of personal data.
  • The nature of the commercial relationship.
  • Applicable accounting and tax legislation.
  • Contractual requirements.
  • Relevant legal limitation periods.

When personal data is no longer required and applicable retention obligations have expired, it will be deleted, destroyed, or anonymized in accordance with applicable legislation.

Gemiyap aims to implement appropriate technical and organizational measures to protect personal data against:

  • Unauthorized access.
  • Accidental loss or destruction.
  • Unauthorized modification.
  • Unlawful disclosure.
  • Cybersecurity threats and other security incidents.

While reasonable precautions are taken to safeguard information, no electronic storage or transmission system can be guaranteed to be completely secure.

8. Cookies and Website Technologies

Gemiyap may use cookies and similar technologies to ensure website functionality, maintain security, improve user experience, and analyze website performance where permitted.

8.1. Strictly Necessary Cookies

These cookies are essential for the website to function properly and support basic features such as security and navigation.

8.2. Performance and Analytics Cookies

These cookies may help us understand how visitors interact with our website, identify technical issues, and improve performance.

Where legally required, these cookies will be activated only after obtaining the visitor's consent.

8.3. Marketing and Advertising Cookies

Marketing cookies may be used to measure advertising effectiveness and deliver more relevant promotional content.

Such cookies will be used only where an appropriate legal basis exists and, where required, after obtaining explicit consent.

8.4. Cookie Preferences

Visitors may manage their cookie preferences through the website's cookie management interface, where available.

Users may also configure their browser settings to restrict or delete cookies.

For additional information, please refer to our separate Cookie Policy.

9. Rights of Data Subjects

Under Article 11 of the Turkish Personal Data Protection Law No. 6698, individuals whose personal data is processed have the right to:

  1. Learn whether their personal data is being processed.
  2. Request information regarding the processing of their personal data.
  3. Learn the purposes for which their personal data is processed and whether it is used accordingly.
  4. Obtain information about third parties to whom their personal data has been transferred, domestically or internationally.
  5. Request the correction of incomplete or inaccurate personal data.
  6. Request the deletion or destruction of personal data under the conditions established by applicable legislation.
  7. Request notification of relevant correction, deletion, or destruction operations to third parties to whom the personal data has been transferred.
  8. Object to results arising against them through the analysis of personal data exclusively by automated systems.
  9. Request compensation for damages resulting from unlawful processing of personal data.

These rights are subject to the conditions, limitations, and procedures established under the KVKK.

10. Exercising Your Data Protection Rights

Individuals wishing to exercise their rights under the KVKK may submit a request to Gemiyap in accordance with Article 13 of the KVKK and applicable application procedures.

Requests may be submitted through legally recognized communication methods, including written applications to the Company's registered business address.

Data Protection Contact: gemiyap@hs03.kep.tr
Registered Address: HACI MİMİ MH. KARABAŞ DERE SK.  Bina No:42  İç Kapı No:2 34425 TOPHANE  Beyoğlu/
İstanbul 
Website: https://www.gemiyap.com.tr

Gemiyap will evaluate applications and respond as soon as reasonably possible and, in any event, within the statutory period of 30 days.

Where applicable, requests will be handled free of charge unless a fee is permitted under the relevant legislation.

11. Third-Party Websites and External Services

Gemiyap's website may contain links to third-party websites, suppliers, manufacturers, certification bodies, or other external platforms.

These websites operate independently and may have their own privacy policies and data processing practices.

Gemiyap is not responsible for the privacy practices of independent third-party websites.

Visitors are encouraged to review the privacy notices of external websites before providing personal information.

12. Marketing Communications

Gemiyap may provide customers and business partners with information concerning:

  • Marine safety products and equipment.
  • New product availability.
  • Maritime industry developments.
  • Technical specifications and product updates.
  • Promotional campaigns and commercial offers.

Commercial electronic communications will be sent in accordance with applicable Turkish electronic communications and data protection legislation.

Where required, appropriate consent will be obtained before sending marketing communications.

Recipients may withdraw their marketing communication consent using the unsubscribe mechanism provided or other applicable methods.

Withdrawal of marketing consent will not affect processing activities based on other valid legal grounds.

13. Updates to This Privacy Notice

Gemiyap reserves the right to update this Privacy Notice to reflect changes in applicable legislation, business operations, technological developments, or personal data processing activities.

Any updated version will be published on our official website.

Visitors are encouraged to review this page periodically.


Contact via WhatsApp (new tab)