PRIVACY
NOTICE
In accordance with Turkish Personal Data Protection Law No. 6698 (KVKK), this notice explains how we process the personal data you submit through the forms on this website.
Data Controller
Your personal data is processed by GP Automatic Otomatik Yapı Teknolojileri Ltd. Şti. acting as the data controller.
Address: Mehmet Akif Mah. Bahariye Cad. No:161, Eşbah İpekyolu, Floor 5, Unit No:178, Küçükçekmece / Istanbul 34283, Türkiye
E-mail: info@gpautomatic.com
Personal Data We Process
Through the quotation form: your name and surname, telephone number, e-mail address, province and district, the system you are interested in, and the message you submit.
Through the dealership application form: company name, the name and surname of the authorised contact, telephone number, e-mail address, province and target region, field of activity, and your application message.
In both forms, your IP address and the time of submission are also recorded for security purposes and to prevent misuse.
We do not request special categories of personal data. Please do not enter health information, identification numbers, religious beliefs or similar sensitive data into the message field.
Purposes of Processing
Responding to your enquiry, scheduling a site survey and measurement appointment, and preparing and sending your quotation.
Where a contract is concluded, carrying out production, installation and after-sales service processes.
Evaluating dealership applications and contacting the applicant.
Maintaining the security of the form infrastructure and preventing automated submissions and misuse.
Fulfilling the retention and disclosure obligations arising from applicable legislation.
Legal Grounds
In quotation and site survey processes, your data is processed under Article 5(2)(c) of the Law, as it is directly related to the conclusion or performance of a contract.
Records are retained under Article 5(2)(ç) of the Law, for compliance with our legal obligations.
IP address and submission time are processed under Article 5(2)(f) of the Law, based on our legitimate interest in system security, provided this does not harm your fundamental rights and freedoms.
If promotional or campaign messages are sent to you, such processing is carried out solely on the basis of your explicit consent, which you may withdraw at any time.
Method of Collection
Your personal data is collected electronically and by automated means when you complete the quotation or dealership forms on our website. The form content is delivered to our corporate e-mail address.
Data Transfers
Your personal data is processed on the systems of the suppliers from which we obtain corporate e-mail and hosting services; these providers act as data processors.
If your enquiry is to be handled by our authorised dealer in your region, your contact details may be transferred to that dealer, limited strictly to this purpose.
Transfers may be made to legally authorised public institutions and organisations upon request, within the limits prescribed by legislation.
Apart from these cases, your personal data is not shared with third parties, sold, or transferred for marketing purposes.
Retention Periods
Quotation and contact enquiries are retained for a maximum of two years following the conclusion of the enquiry. Where a contract is concluded, your data is retained for the limitation and retention periods prescribed by the applicable legislation.
Dealership applications are retained for a maximum of two years following the conclusion of the application.
Once these periods expire, your personal data is deleted, destroyed or anonymised.
Cookies
Our website uses strictly necessary cookies required for it to function. These cookies are needed for session security and your site preferences and cannot be disabled.
Where analytics cookies are used to measure visit statistics, they are activated only with your consent. You may delete or block cookies at any time through your browser settings.
Your Rights
Under Article 11 of the Law, you have the right to learn whether your personal data is being processed, to request information if it has been processed, and to learn the purpose of processing and whether it is used in accordance with that purpose.
You have the right to know the third parties in Türkiye or abroad to whom your data has been transferred, and to request the correction of data that has been processed incompletely or inaccurately.
Within the conditions set out in the Law, you may request the erasure or destruction of your personal data, and that such actions be notified to the third parties to whom your data has been transferred.
You retain the right to object to an adverse outcome arising from the analysis of your data solely by automated systems, and to claim compensation if you suffer damage due to unlawful processing.
How to Apply
You may submit requests regarding your rights in writing to the address above, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, or by e-mail to info@gpautomatic.com from the address registered in our records.
Your application will be concluded free of charge as soon as possible and in any case within thirty days, depending on the nature of the request. Where the process incurs an additional cost, the fee set out in the tariff determined by the Board may be charged.
If your application is rejected or you find the response insufficient, you may lodge a complaint with the Personal Data Protection Board within thirty days of learning of the response and in any case within sixty days of the date of application.
LAST UPDATED: AUGUST 2026
GP Cephe mobile app — privacy notice
The GP Cephe app (iOS and Android) is published by GP Automatic Otomatik Yapı Teknolojileri Ltd. Şti. The design tools need no account; the Account section is only for customers, dealers and staff whose accounts GP Automatic has created. The app does not use advertising or tracking technologies or third-party analytics tools; it only makes the anonymous usage count described below, on our own server.
- Camera and photos: Camera and photo-library access is used only to take or choose the facade photo. Camera measurement (ARKit, LiDAR) runs entirely on your device.
- Data kept on your device: Your language preference and the projects you create stay on your device and are not sent to us.
- Account (optional): Accounts are created by GP Automatic for its customers and dealers; you can’t sign up in the app. When you sign in, your username and password are sent over an encrypted connection to our server (gpautomatic.com). The server returns the name or company name on your account and the orders linked to it (tracking code, production stages, estimated delivery date); your device model and app version are recorded with the session so that signed-in devices can be identified. The session key — and, for dealers, the username and password used to sign in to the price tool automatically — are kept encrypted in your device’s secure storage (iOS Keychain, Android Keystore) and deleted when you sign out. Account data is kept until your account is deleted. You can delete your account at any time in the app (Account ▸ Delete account) or ask us to delete it at info@gpautomatic.com. Deleting it removes your sign-in details, your sessions on all devices and your notification registrations, removes the link between your account and your orders and clears the account data on the device; business records of orders (orders, quotes, invoices) are kept for the legally required period. Once a dealer account is deleted, the same details no longer sign in to the Dealer Login on our website. For dealer accounts, the discount rate used in the price tool is also stored with the account. Changes made to your account (for example a password reset or linking an order) are written to an activity log with the name of the GP Automatic staff member who made them, and the deletion of an account with the account’s name and username; the log is kept for 1 year.
- Notifications, Lock Screen and widget: If you allow order notifications or follow an order with “Follow on Lock Screen”, your device’s push token (issued by Apple) is stored on our server with your account. When your order’s stage changes, our server uses it to send a notification or Lock Screen update through the Apple Push Notification service (APNs). The notification token is deleted when you sign out and the Lock Screen token when following ends; you can turn notifications off at any time in your device settings. The Home Screen widget reads your orders from our server with the same session and shows them only on your device.
- Anonymous usage count: While the app is open and on screen, it sends a short signal to our server (gpautomatic.com) once a minute. The signal contains only a random number that your device generates anew every day, the device type (iPhone, iPad, Android or Apple Vision Pro), the app version and the app language; no device identifier, advertising identifier, location or other personal data is sent. This count is not linked to your name, your account or your IP address: our server stores the random number only as a one-way hash, deletes the detailed records within 2 days and keeps only daily totals (how many devices opened the app that day, the busiest moment, the split by device type). The purpose is to see how many people use the app at the same time and to plan the service accordingly. If you are signed in, the same signal also updates the time your session was last active, so GP Automatic staff can see which accounts are in the app at that moment. This is kept with the session and deleted when you sign out.
- Smart Design (optional): Smart Design on our website and in the app shows the long-term climate summary for a place you choose and system recommendations based on it; if you wish, it creates a design from a photo of your space and a short description you write.
- Location: You choose the place by typing a city or town, from a list, or with “Use my location”. If you use “Use my location”, your device’s location is rounded to about 1 km and sent to our server (gpautomatic.com) only to find the nearest place; it is not stored. The climate summary uses the coordinates of the chosen place; climate averages are retrieved from NASA POWER for a grid point of about 25 km. No information about you is sent to NASA.
- Photo and description: When you tap “Create design” and have given permission, the photo you chose, your description and the climate summary of the chosen place are sent via the GP Automatic server to our AI service provider Anthropic PBC (Claude, USA). The photo and description are used only for this design and are not stored on our server; only the design (openings, products, notes) comes back to the app. You can withdraw permission in the Info tab; if you don’t give permission, your photo never leaves your device.
- Kept on your device: The place you chose, your description, the last photo and the design are kept only on your device (app or browser storage).
- Request a quote: A summary of the design is prepared as a WhatsApp message for you to send; sending it is up to you.
- Realistic image: If you ask for a realistic image of the design, the terms in the “Realistic image” item apply.
- Dealer branding: The logo, company name, phone and website that dealers add to PDFs and videos stay on the device and are not sent to us.
- AI features (optional): The two features below run only after you give explicit consent in the app. If you don’t, your photo never leaves your device.
- Automatic detection (“Detect”): The photo you choose is sent over an encrypted connection, via our server (gpautomatic.com), to our AI service provider Anthropic PBC (Claude, USA). Only the corner coordinates of the openings are returned to the app.
- Realistic image: The preview prepared by the app (your photo and a short description of the systems you placed) is sent the same way to Google LLC’s Gemini API; the generated image is returned to the app.
- Retention: Images are not stored on our server and are not linked to your identity. Under their commercial API terms, these providers do not use the data to train AI models; they may keep it for a limited time only to prevent abuse and to meet legal obligations (Anthropic’s default is up to 30 days).
- International transfer: These providers’ servers are outside Türkiye, so using the AI features transfers your photo abroad. The transfer is based on the explicit consent you give on the in-app consent screen.
- Withdrawing consent: You can withdraw your consent at any time in the app’s Info tab, under “AI permission”.
- Sharing: PDF/PNG files, videos and generated images are sent only when you choose an app from the share sheet.
Questions: info@gpautomatic.com · +90 536 736 13 61