Last Updated: 01.08.2025

Data Controller Identity:

Greenstep

Contact address: info@greenstep.com.tr

This privacy notice concerns the personal data of individuals who visit the website www.greenstep.com.tr.

Purpose for Which Personal Data Will Be Processed:

Your personal data is processed via the www.greenstep.com.tr address for the following purposes:

• Service Provision and Management: Purpose: To provide services offered through the website, manage membership processes, and provide user support services. Legal Reason: KVKK Article 5/2 (c) – “Processing personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract.” Communication and Information: Purpose: To communicate with users, provide feedback, and provide important information. Legal Reason: KVKK Article 5/2 (a) – “The data subject has obtained explicit consent.” and KVKK Article 5/2 (f) – “Data processing is necessary for the legitimate interests of the data controller.” Improving User Experience: Purpose: To optimize website performance, to improve users’ experiences by monitoring their interactions on the site. Legal Reason: KVKK Article 5/2 (f) – “Data processing is necessary for the legitimate interests of the data controller.” Marketing Activities: Purpose: To make product or service recommendations tailored to users’ interests, to inform them about promotions. Legal Reason: KVKK Article 5/2 (a) – “Data subject’s explicit consent is required.” Compliance with Legal Obligations: Purpose: To fulfill obligations arising from laws and regulations, and to share legal requirements with official institutions and organizations. Legal Reason: KVKK Article 5/2 (ç) – “It is mandatory for the data controller to fulfill its legal obligations.” Security and Abuse Prevention: Purpose: To ensure the security of the website, to prevent abuses such as fraud and unauthorized access. Legal Reason: KVKK Article 5/2 (f) – “Data processing is mandatory for the legitimate interests of the data controller.” Analysis and Reporting: Purpose: To analyze the use of the website, create reports, and make statistical evaluations. Legal Reason: KVKK Article 5/2 (f) – “Data processing is mandatory for the legitimate interests of the data controller.” Payment Transactions and Billing: Purpose: To process payments made through the website and carry out billing transactions. Legal Reason: KVKK Article 5/2(c) – “Provided that it is directly related to the establishment or performance of a contract, the processing of personal data of the parties to the contract is necessary.” and KVKK Article 5/2(ç) – “It is mandatory for the data controller to fulfil its legal obligation.” Content Management and Publishing: Purpose: Management of content provided by users and publication on the website. Legal Reason: KVKK Article 5/2(a) – “The data subject has obtained explicit consent.” and KVKK Article 5/2(c) – “Processing of personal data of the parties to the contract is necessary, provided that it is directly related to the establishment or performance of a contract.” Management of User Accounts: Purpose: Creating and managing user accounts and enabling users to update their profile settings. Legal Reason: KVKK Article 5/2(c) – “Processing of personal data of the parties to the contract is necessary, provided that it is directly related to the establishment or performance of a contract.” and KVKK Article 5/2 (f) – “Data processing is mandatory for the legitimate interests of the data controller.”

To Whom and for What Purpose Personal Data May Be Transferred:

The non-transfer and non-disclosure of personal data is our priority.

Method and Legal Basis for Collecting Personal Data:

Your data is processed by the relevant fields at the address mentioned and uploaded to the web address interface when you click the send button.

When processing your data, we rely on the legal basis that it is explicitly provided for by law, that it is necessary for the establishment or performance of a contract to which the parties are a party, and that it is necessary for the data controller to fulfil its legal obligations.

Other Rights of the Data Subject Listed in Article 11 of the Law:

The relevant persons may exercise their rights under Law No. 6698 at any time by submitting a request to the above correspondence address.