Cookie Privacy Policy

The purpose of this Privacy Policy ('Privacy Policy') is to determine the terms and conditions regarding the use of personal data shared with the Company by Platform users / members / visitors ('Data Owner') during the operation of the www.granada.com.tr website ('Site') and mobile application (collectively referred to as the 'Platform') operated by GRANADA.COM.TR ('Company') or generated by the Company during the use of the Platform by the Data Owner.

The Data Owner declares that he/she has been informed about the processing of his/her personal data with this Privacy Policy and that he/she consents to the use of his/her personal data as specified herein.

Which Data is Processed?

Under this heading, the data processed by the Company and considered as personal data in accordance with the Personal Data Protection Law No. 6698 are listed. Unless otherwise expressly stated, the term 'personal data' shall include the following information within the scope of the terms and conditions provided under this Privacy Policy:

Customer Information 
Device Information 
Behavior 
Demographic Information 
Marketing Knowledge 
Behavioral Advertising

Pursuant to Articles 3 and 7 of the Law on the Protection of Personal Data, data that are irreversibly anonymized will not be considered as personal data in accordance with the provisions of the aforementioned law and processing activities related to this data will be carried out without being bound by the provisions of this Privacy Policy.

For which purposes is the data used?

The Company may process personal data in order to recommend the products and services offered by the Company to the relevant persons by customizing them according to the tastes, usage habits and needs of the relevant persons; to use them within the scope of direct and indirect marketing activities and to transfer them to the Company's representatives, solution partners and third parties from whom the Company receives services for these purposes.

In accordance with Articles 5 and 8 of the Personal Data Protection Law and/or in the presence of exceptions in the relevant legislation, the Company may process and share personal data with third parties without obtaining the consent of the Data Owner. The main ones are set out below:

Explicitly stipulated in the law, 
It is mandatory for the protection of the life or bodily integrity of the person who is unable to disclose his/her consent due to actual impossibility or whose consent is not legally valid, 
It is necessary to process personal data, provided that it is directly related to the establishment or performance of any contract between the Data Subject and the Company, 
It is mandatory for the company to fulfill its legal obligations, 
It has been made public by the Data Subject himself/herself, 
Data processing is mandatory for the establishment, exercise or protection of a right, 
Data processing is mandatory for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the Data Owner.

Who Can Access the Data?                                     

The Company may transfer personal data and new data obtained by using this personal data to third parties from whom the Company benefits from its services in order to achieve the purposes specified in this Privacy Policy, limited to the purpose of providing such services. The Company may also transfer the data to the Company's business partners and suppliers and legally authorized institutions and organizations for the purposes specified in this Privacy Policy.

The Company may share the data with third parties such as outsourcing service providers, hosting service providers (hosting services), law offices, research companies, call centers, including those who send SMS in order to improve the data owner experience (including improvement and personalization), to ensure the security of the data owner, to detect fraudulent or unauthorized use, to investigate operational evaluation, to eliminate errors regarding Platform services and to achieve any of the purposes set out in this Privacy Policy.

The data subject agrees that the aforementioned third parties may store the personal data of the data subject on their servers anywhere in the world, provided that it is limited to the purposes stated above, and that he/she consents to this in advance.

On the Right of Access to Data and Correction Requests

Data subjects pursuant to Article 11 of the Law,

Learn whether personal data is being processed, 
Request information if their personal data has been processed, 
To learn the purpose of processing personal data and whether they are used for their intended purpose, 
To know the third parties to whom personal data are transferred domestically or abroad, 
To request correction of personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data is transferred, 
Law and other relevant laws