PROTECTION OF PERSONAL DATA (KVKK NOTICE)
1. Data Controller
This Disclosure Notice has been prepared by Grup İmaj Aydınlatma San. ve Tic. A.Ş. (“Company”), acting in the capacity of data controller within the scope of the Law on the Protection of Personal Data No. 6698 (“KVKK”).
Data Controller:
Grup İmaj Aydınlatma San. ve Tic. A.Ş.
Address: Marmara Mahallesi, Hurriyet Bulvarı 100 A Beylikdüzü / Istanbul
E-mail: info@grupimaj.com
Telephone: (0 (212) 689 93 09)
This Notice is valid for personal data collected through the Company’s website (grupimaj.com).
2. Purposes of Processing Personal Data
Your personal data are processed for the following purposes:
- Evaluating the requests you submit through the website,
- Establishing communication within the scope of initiating or executing a contract (KVKK Art. 5/2-c),
- Fulfilling our legal obligations (KVKK Art. 5/2-ç),
- Protecting our legitimate interests (KVKK Art. 5/2-f),
- Conducting marketing activities where explicit consent is required (KVKK Art. 5/1),
- Improving the Company’s products, services, business processes, and overall service quality.
3. Categories of Processed Personal Data
The following categories of personal data are processed:
| Data Category | Example Data | Legal Basis |
|---|---|---|
| Identity Information | Name, surname | KVKK Art. 5/2-c (performance of a contract) |
| Contact Information | E-mail, telephone, address | KVKK Art. 5/2-c |
| Transaction Security | IP address, log records | KVKK Art. 5/2-ç (legal obligation) |
| Visual / Audio Data | Profile and event photographs | KVKK Art. 5/1 (explicit consent) |
| Marketing Data | Cookie data, communication preferences | KVKK Art. 5/1 (explicit consent) |
4. Recipients of Personal Data and Purposes of Transfer
Your personal data may be transferred to the following recipient groups, in accordance with the relevant legislation:
| Recipient Group | Purpose of Transfer | Legal Basis |
|---|---|---|
| Authorized Public Institutions | Fulfillment of legal obligations | KVKK Art. 5/2-ç |
| Business Partners and Service Providers | Technical support, IT infrastructure, call center services | KVKK Art. 5/2-f |
| Financial Institutions | Collection and payment transactions | KVKK Art. 5/2-c |
| Overseas Service Providers (Google, Meta, Microsoft, etc.) | Hosting, analytics, and advertising services | KVKK Art. 9 (explicit consent) |
(*) Transfer of personal data abroad is carried out only upon explicit consent or through adequacy decisions approved by the Personal Data Protection Authority and/or standard contractual clauses. (Legal Basis: KVKK Art. 8–9.)
5. Method and Legal Basis of Collecting Personal Data
Your personal data are collected:
- Through forms on our website in electronic form,
- Through communication via customer service call center or e-mail,
- During service agreement processes, either in physical or digital environments,
- Through relevant social media platforms where communication is established.
They are collected based on one or more of the following legal grounds:
- Where necessary for the establishment or performance of a contract (KVKK Art. 5/2-c),
- Where the data controller must fulfill its legal obligations (KVKK Art. 5/2-ç),
- Where processing is necessary for the legitimate interests of the data controller (KVKK Art. 5/2-f),
- Where explicit consent has been provided (KVKK Art. 5/1).
6. Retention Period of Personal Data
| Data Category | Retention Period | Legal Basis |
|---|---|---|
| Customer communication records | 3 years | Turkish Commercial Code Art. 82; KVKK Art. 5/2-c, Art. 5/2-ç |
| Financial data / Invoice records | 10 years | Tax Procedure Law; KVKK Art. 5/2-ç |
| Application / complaint forms | 2 years | KVKK Art. 5/2-f |
| Human resources / job applications | 1 year (unsuccessful applications) | KVKK Art. 5/1 (explicit consent) |
| Cookie records | 6 months – 2 years | KVKK Art. 5/1 (explicit consent) |
At the end of these periods, personal data are destroyed in accordance with the “Data Retention and Destruction Policy.”
7. Circumstances Requiring Explicit Consent
The Company requests explicit consent in the following circumstances:
- Sending commercial electronic communications,
- Conducting marketing-related analyses, campaigns, and promotional activities,
- Transfer of data to third parties within the scope of website cookies,
- Processing of special categories of personal data in job applications.
You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of prior processing activities.
8. Data Security Measures
The Company implements necessary technical and administrative measures within the scope of KVKK Art. 12 to prevent unlawful processing, access, or disclosure of personal data.
- Access logs are regularly maintained,
- The principle of authorization is applied within the systems,
- Data are stored in encrypted environments,
- Confidentiality clauses are included in agreements with third parties,
- Periodic KVKK awareness training is provided.
Your data are not transferred unlawfully to any third parties.
9. Rights of the Data Subject and Application Procedure
Pursuant to Article 11 of the KVKK, you have the following rights:
- To learn whether personal data are processed,
- To request information regarding such processing,
- To learn the purpose of processing and whether data are used accordingly,
- To know the third parties to whom personal data are transferred, domestically or abroad,
- To request correction of incomplete or inaccurate personal data,
- To request deletion or destruction of personal data within the scope of KVKK Art. 7,
- To request notification of such actions to third parties to whom the data have been transferred,
- To object to results arising solely from automated processing,
- To claim compensation for damages arising from unlawful processing.
Application Procedure:
- In person, with a wet-signed petition, at the Company Address: Marmara Mahallesi, Hürriyet Bulvarı 100 A Beylikdüzü / Istanbul,
- Via e-mail to: info@grupimaj.com
Your applications will be answered within 30 days. Additional fees may apply depending on the nature of the request.
10. Updates and Entry into Force
This Disclosure Notice may be updated in line with legislative amendments, Board decisions, or changes in our processing activities.
The current version is available at: www.grupimaj.com/privacy-policy-kvkk
This Notice entered into force on 02.12.2025.
Get in Touch
For inquiries about our products, technical support, or partnership opportunities, please click the button below to access our contact form. Let’s illuminate your projects together!
Get in Touch
For inquiries about our products, technical support, or partnership opportunities, please click the button below to access our contact form. Let’s illuminate your projects together!