Personal Data Privacy Notice

Data Controller

Gerarco is operated by the company identified below. This notice informs users, buyer and supplier representatives and applicants under Turkish Personal Data Protection Law No. 6698.

Data, Purposes and Legal Grounds

Account and transaction management: identity and contact details, company and authority information, addresses and, where necessary, tax and bank details are processed for membership, quotes, proformas, sourcing, payment and delivery. Applicable grounds include establishing or performing a directly related contract, legal obligations and establishing, exercising or protecting a right (Article 5/2-c, ç and e).

Lot publication and applications: lot details, images, video, documents, buying requests and container applications are used to provide the service, evaluate requests and verify records. Contract and protection-of-rights grounds apply to data relating to individuals. Do not upload third-party data unnecessary for public publication.

Security and dispute handling: session, IP and transaction records are processed to prevent unauthorized access, investigate abuse and protect transaction integrity, on the grounds of legal obligations, protection of rights and legitimate interests that do not prejudice your fundamental rights (Article 5/2-ç, e and f).

Optional communications and measurement: contact details and channel preferences for selected product, price and marketing content, and technical data for optional usage measurement, are processed on consent (Article 5/1). Communications necessary for a requested transaction or account security are considered separately from marketing preferences.

Collection Methods

Data is collected electronically or manually through web and GerarcoAPP forms, profiles, lot entries, uploads, email, telephone, WhatsApp and direct business contact, and through session, notification-subscription and security technologies.

Recipients and Notification Infrastructure

Information necessary for an interaction may be shared as required with technical infrastructure providers, delivery and roasting partners, accounting and banking providers, legal advisers and competent public authorities. When roasting is requested for coffee bought through Gerarco, relevant production and delivery information is used in the Neroya process.

Push delivery may pass through Google, Apple, Microsoft or Mozilla infrastructure depending on your device. WhatsApp and other external services use their own infrastructure. These channels may involve processing abroad. Where an international transfer occurs, applicable transfer grounds and safeguards under Article 9 must separately be established; reading this page or pressing a notification button does not itself establish a transfer safeguard.

Your Rights and Requests

Under Article 11, you may learn whether your data is processed, request information, learn its purpose and appropriate use and domestic or foreign recipients, request correction, request deletion or destruction subject to Article 7 and notification of these actions to recipients. You may object to an adverse result based solely on automated analysis and seek compensation for damage from unlawful processing.

Submit a written request to the address below or email us from the address registered in your account. Verification of your identity and request may be required. Requests are handled under applicable law within thirty days at the latest.

Contact and Requests