Last updated: 20 October 2026
1. Data controller
This privacy notice is issued by Girne Su Dağıtım ve Ticaret Ltd. ("Girne Su", "the Company") under the Personal Data Protection Law No. 89/2007 in force in the Turkish Republic of Northern Cyprus and related legislation. For individuals resident in the Republic of Türkiye we also observe the principles of Law No. 6698, and for individuals in the European Union, where applicable, the principles of the General Data Protection Regulation (GDPR).
- Company: Girne Su Dağıtım ve Ticaret Ltd.
- Address: Karaoğlanoğlu Industrial Zone, No: 1, Kyrenia (Girne), North Cyprus
- Email: info@girnesu.com.tr
2. What personal data we process
Through our website, phone and WhatsApp lines, dealers and delivery teams we may process the following categories of data:
- Identity and contact: name, phone number, email address, company name and tax number (for corporate customers).
- Delivery details: address, directions, delivery area, preferred day and time slot.
- Order and subscription data: products, quantities, amounts, payment method, empty bottle returns, subscription frequency and order history.
- Quote and dealership applications: company details, headcount, estimated consumption, city/area, vehicle and storage availability, experience.
- Job applications: your CV and the information you provide in the application form.
- Contact form: the subject and content of your message.
- Transaction security: IP address, browser information and submission time (to prevent abuse and spam).
3. Purposes of processing
We process your data to receive, confirm by phone and deliver your orders; manage scheduled delivery subscriptions; track deposits and empty bottle returns; prepare corporate quotes; assess dealership and job applications; answer your questions and complaints; meet invoicing and accounting obligations; keep our website secure; and comply with legal obligations.
4. Legal grounds
Your data is processed because it is necessary to enter into or perform a contract, to comply with the Company's legal obligations, for the Company's legitimate interests provided that your fundamental rights are not harmed, and, where required, on the basis of your explicit consent. Marketing communications such as our newsletter are sent only with your consent and you may unsubscribe at any time.
5. Sharing of data
Your data may be shared, only as far as necessary for the purposes above, with:
- Our delivery staff and authorised dealers who deliver your order,
- Accounting and financial advisory providers for invoicing and financial records,
- Service providers for hosting, email and IT infrastructure,
- Competent public authorities and courts where legally required.
We do not sell or rent your personal data to third parties for marketing purposes.
6. Retention periods
Order, invoice and accounting records are kept for the periods required by law; contact messages and quote requests for a reasonable period after the request is concluded; job applications for at most two years after the assessment. Data whose retention period has expired is deleted, destroyed or anonymised.
7. Your rights
Under applicable law you have the right to learn whether your personal data is processed, to request information about it, to learn the purpose of processing and the parties it is shared with, to have incomplete or inaccurate data corrected, to request erasure where the conditions are met and to object to processing.
8. How to apply
You can send your requests by email to info@girnesu.com.tr or in writing to the address above. Please include information that helps us verify your identity (such as your name and the phone number used when ordering). Requests are answered free of charge within thirty days at the latest.
---
This text is an informational template; it should be reviewed by your legal counsel before publication.