Privacy Policy

This Privacy Policy explains how Gustae Oriental collects, uses, shares and protects personal data through our website, newsletter and client portal, in line with Turkey's Personal Data Protection Law No. 6698 (KVKK). It complements our KVKK Clarification Text and Cookie Policy.

1. Data controller

The data controller is {{COMPANY_LEGAL_NAME}}, registered at {{REGISTERED_ADDRESS}}. For any matter relating to your personal data you may reach us at hello@gusta-e.com or +90 507 220 81 93 (Gustae Oriental, Çamlık Mah. Gönülden Sok. No:25/B, Ümraniye, İstanbul).

2. What we collect and when

Newsletter: when you subscribe we collect your optional first name, your email address, and a consent record (the consent flags you ticked plus a timestamp). Client portal: when a trade client logs in we set a strictly-necessary session cookie (gusto_session) to keep you signed in. Trade orders: when you place an order through the portal we collect the order details you submit. Server logs: our hosting provider records basic access logs (such as IP address, timestamp and requested page) for security and reliability.

3. Purposes of processing

To send and manage the newsletter you asked for; to authenticate portal sessions and let trade clients place and track orders; to operate, secure and troubleshoot the website; and to comply with our legal obligations.

4. Legal bases (KVKK Art. 5)

Newsletter: your explicit consent (Art. 5/1), which you may withdraw at any time. Portal login and trade orders: performance of a contract and our legitimate interests in providing the service you requested (Art. 5/2). Server/access logs: our legitimate interest in the security and continuity of the service, and compliance with legal obligations.

5. Recipients and processors

We use trusted service providers as data processors acting on our behalf: Supabase (database), Resend (transactional and newsletter email delivery) and Vercel (website hosting). They process data only to provide these services to us. Because these providers may operate servers outside Türkiye, your data may be transferred abroad; such transfers are carried out on the basis of {{TRANSFER_BASIS}}.

6. Retention

We keep newsletter data until you unsubscribe or request deletion; portal and order records for the periods required to run the trade relationship and to meet legal obligations; and server logs for a limited period. Specific retention periods: {{RETENTION_PERIODS}}.

7. Your rights (KVKK Art. 11)

You have the right to learn whether your personal data is processed; to request information about the processing; to learn its purpose and whether it is used accordingly; to know any third parties to whom data is transferred at home or abroad; to request correction of incomplete or inaccurate data; to request deletion or destruction; to request that corrections and deletions be notified to third parties; to object to results arising from automated analysis; and to claim compensation for damage caused by unlawful processing.

8. How to exercise your rights

You may exercise these rights by contacting us at hello@gusta-e.com or +90 507 220 81 93, or by writing to {{KVK_CONTACT}}. We will respond within the period required by the KVKK.

9. VERBİS registration

Our status in the Data Controllers' Registry (VERBİS): {{VERBIS_STATUS}}.

Related notices

See also our KVKK Clarification Text (/kvkk) and Cookie Policy (/cookies).