Personal Data Protection Policy (PDPL / KVKK)

GEZO TRANSPORT Logistics Industry and Trade Ltd. Co. (“Company” or “GEZO TRANSPORT”) considers the protection of personal data as a fundamental corporate responsibility. In accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and other applicable legislation, we implement all necessary technical and administrative measures to ensure that personal data is processed lawfully, stored securely, and adequately protected.

This Personal Data Protection Policy has been prepared to outline the principles regarding the collection, processing, storage, transfer, and destruction of personal data.

1. Purpose

The purpose of this Policy is to ensure transparency regarding the processing of personal data obtained within the scope of logistics, transportation, warehousing, and related commercial activities carried out by GEZO TRANSPORT, and to guarantee full compliance with applicable legal regulations.

2. Scope

This Policy applies to our customers, prospective customers, employees, job applicants, suppliers, business partners, visitors, and all third-party individuals who have a relationship with the Company.

3. Purposes of Collecting and Processing Personal Data

GEZO TRANSPORT processes personal data for the following purposes:

Execution and management of logistics and transportation services,
Management of quotations, contracts, and customer relations,
Execution of invoicing, accounting, and financial processes,
Human resources, recruitment, and payroll management,
Customs, insurance, and international transportation procedures,
Ensuring physical security (CCTV systems and access control),
Fulfillment of legal obligations,
Marketing, communication, and customer satisfaction activities.

4. Categories of Personal Data

Identity information (name, surname, national ID number, etc.),
Contact information (phone number, email address, postal address, etc.),
Financial information (IBAN, bank account details, invoice information, etc.),
Professional and employment information (CV, performance data, etc.),
Visual and audio records (CCTV footage, etc.).

5. Transfer of Personal Data

Personal data may be transferred in accordance with Articles 8 and 9 of the KVKK to:

Legally authorized public institutions and authorities,
Customs brokers, insurance companies, and logistics service providers,
Suppliers and business partners,
Financial institutions and accounting service providers,
Domestic or international IT infrastructure and cloud service providers (where legally required or based on explicit consent).

6. Retention Period of Personal Data

Personal data is retained for the period stipulated by relevant legislation or as long as required for the purpose of processing. Upon expiration of the retention period or when the purpose ceases to exist, personal data is securely deleted, destroyed, or anonymized in accordance with applicable regulations.

7. Data Security Measures

GEZO TRANSPORT implements the following technical and administrative measures to protect personal data:

Secure server infrastructure and encryption systems,
Restricted access authorization and role-based access controls,
Confidentiality agreements and awareness training for employees,
Cybersecurity software, antivirus protection, and firewall systems,
Regular internal audits and risk assessments.

8. Rights of Data Subjects

Pursuant to Article 11 of the KVKK, data subjects have the right to:

Learn whether their personal data is processed,
Request information if their data has been processed,
Learn the purpose of processing and whether it is used accordingly,
Know the third parties to whom data is transferred domestically or abroad,
Request correction of incomplete or inaccurate data,
Request deletion or destruction under the conditions set forth in the law,
Object to unfavorable outcomes resulting from automated data processing,
Request compensation for damages arising from unlawful processing.

9. Application Procedure

Data subjects may submit their requests in writing or via registered electronic mail (KEP). Applications will be processed within a maximum of thirty (30) days following identity verification.

Website: www.gezotransprot.com.tr
Email: info@gezotransprot.com.tr

10. Policy Updates

This Policy is periodically reviewed in line with applicable legislation and company practices and updated when necessary. The most current version is always available at www.gezotransprot.com.tr.

Data Protection Policy