GOMUR is a business-to-business manufacturer. The personal data we hold is almost entirely what brands choose to send us when they start a project conversation, and this page sets out exactly what happens to it.
GOMUR is a leather and shearling manufacturer based in İzmir, Türkiye, producing for fashion brands under OEM, ODM and CMT arrangements. For the purposes of data protection law we act as the data controller for the information described on this page.
We are a business-to-business manufacturer. We do not sell to consumers, we do not run advertising campaigns, and we do not build profiles of visitors. The information we hold is almost entirely information you have chosen to send us.
We do not collect special categories of personal data, and we ask that you do not send them to us.
Every use below is tied to a specific, stated purpose. We do not repurpose your information for anything else without telling you first.
Under the GDPR we rely on legitimate interests for responding to business enquiries, performance of a contract once we are working together, and legal obligation for statutory record keeping. Under KVKK we rely on the equivalent grounds in Article 5, including the establishment and performance of a contract and our legitimate interests as a business.
Your project information is commercially sensitive and we treat it that way. Access inside GOMUR is limited to the people who need it to answer you or to run your production.
We share information outside GOMUR only in these situations:
We do not sell personal data, and we do not share it for anyone else’s marketing.
GOMUR is established in Türkiye. If you contact us from the European Economic Area or the United Kingdom, your information will be transferred to and processed in Türkiye.
Where that transfer requires a safeguard, we put one in place — typically the European Commission’s Standard Contractual Clauses, or your explicit consent where clauses are not available. Under KVKK, transfers abroad are made on the grounds permitted by Article 9, including explicit consent and the undertakings foreseen by the Board.
You can ask us to show you what we hold, correct it, delete it, restrict what we do with it, or send it to you in a portable form. You can object to processing we base on legitimate interests. These rights come from the GDPR and, in Türkiye, from Article 11 of the KVKK.
Write to [email protected] and we will respond within 30 days. There is no charge unless a request is manifestly excessive.
If you are not satisfied with our answer you may complain to your local supervisory authority, or in Türkiye to the Personal Data Protection Authority (KVKK). The detailed procedure is set out on our GDPR & KVKK page.
Technical files and commercial terms are the most sensitive things we hold, and they are protected accordingly: access is restricted to named people, transfers use encrypted connections, and devices are secured. We ask production partners to hold the same line under confidentiality terms.
No system is absolute. If a breach occurs that is likely to affect your rights, we will notify you and the relevant authority within the periods the law requires.
When we change this policy we update the date at the top of the page. If a change materially affects how we use information you have already given us, we will tell you directly.
Write to [email protected] with “Data protection” in the subject line, or by post to GOMUR, Tuna Mah. 5501 Sk. No: 31/A, 35090 Çamdibi-Bornova, İzmir, Türkiye.
