This policy explains how Gemba Partner Mühendislik ve Yazılım A.Ş. ("Gemba Digital", "we", "us") processes personal data when you visit gembadigital.tr and its language versions and when you contact us.
1. Controller
Gemba Partner Mühendislik ve Yazılım A.Ş., Esentepe Mah. Milangaz Cd. Monumento Plaza No: 75/70, Kartal / İstanbul, Türkiye. Email: info@gembadigital.io · Phone: +90 216 212 08 77 · Website: gembadigital.tr
2. General information and legal bases
We process personal data only where this is permitted by law: on the basis of your consent (Art. 6(1)(a) GDPR), to perform a contract or take steps prior to entering into one (Art. 6(1)(b)), to comply with legal obligations (Art. 6(1)(c)) or on the basis of our legitimate interests in operating a secure and effective website and answering enquiries (Art. 6(1)(f)). Providing data is voluntary, but we cannot answer an enquiry without the data needed for it. For visitors in Türkiye, Law No. 6698 on the Protection of Personal Data (KVKK) also applies; see our KVKK notice (Turkish).
3. Hosting and server log files
Our website is hosted by a hosting provider that processes data on our behalf under a data processing agreement. When you visit the site, the server automatically records technical data in log files: IP address, browser and operating system, date and time, requested page, amount of data transferred and referrer. We use this data only to ensure stable and secure operation, to defend against attacks and to analyse errors. Logs are deleted after a short period.
4. Contact form, email and phone
If you use our contact form or write to us, we process the data you provide (name, email address, telephone number, subject, message, the page and language you used, and your confirmation of the privacy notice) to handle your enquiry. Form entries are stored in our website database and sent by email to our mailbox at info@gembadigital.io via our email service provider (GoDaddy Workspace Email). We keep the data until your enquiry is resolved, you ask us to delete it or you withdraw your consent, unless statutory retention periods apply.
5. Cookies and consent management
Strictly necessary cookies are always active. All other cookies are set only after you give your consent via our cookie banner (consent management with the Complianz plug-in). You can change or withdraw your consent at any time using the cookie settings link on this website. Currently this website uses only the following cookies:
- cmplz_… cookies (Complianz): store your cookie banner status and consent choices. Duration: up to 12 months.
- pll_language (Polylang): remembers your language choice. Duration: about 1 year.
We do not currently use analytics or marketing cookies. If we introduce them, they will only be activated with your consent and this policy will be updated.
6. Fonts
This website uses the typeface Plus Jakarta Sans, which is loaded from Google Fonts (Google Ireland Limited / Google LLC). When the page loads, your browser connects to Google servers, so your IP address and browser data may be transmitted to Google, including to the USA. This is based on our legitimate interest in a consistent presentation of the site.
7. Social media and external links
Links to LinkedIn, YouTube and Instagram only transfer data after you click on them. The respective platform is then responsible for processing your data; please see its privacy policy.
8. Recipients and international transfers
Recipients are service providers acting on our behalf (hosting, email service) who are bound by data processing agreements. Because we are based in Türkiye, data may be processed in Türkiye and in other countries where our providers operate. Where required, we rely on appropriate safeguards such as standard contractual clauses (Art. 46 GDPR).
9. Retention
We keep personal data only as long as needed for the purpose concerned. Contact enquiries are deleted once they are resolved and no retention duty applies. Commercial and tax records are kept for the statutory periods.
10. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR) and the right to withdraw consent at any time with effect for the future. To exercise your rights, write to info@gembadigital.io. You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence or place of work.
11. Security
This website uses TLS/HTTPS encryption to protect data in transit.
12. Changes
We update this policy when this is legally or factually necessary. Consents you have already given remain unaffected.
Last updated: 24 October 2026