| Before | After | ||
|---|---|---|---|
| 1 | Google Cloud Privacy Notice Effective Date: September 28, 2026 For translations of this Google Cloud Privacy Notice into other languages, please click on the appropriate link: Bahasa Indonesia, Deutsch, Español (Latinoamérica), Français, Italiano, Nederlands, Português, 한국어, 日本語 This Google Cloud Privacy Notice describes how we collect and process your personal information in relation to Google Workspace (including Google Workspace for Education), Google Cloud Platform, Google Cloud Marketplace, Cloud Identity (when sold separately), Implementation Services and Google Cloud Training (together, "Cloud Services"). | 1 | Google Cloud Privacy Notice Effective Date: October 15, 2026 For translations of this Google Cloud Privacy Notice into other languages, please click on the appropriate link: Bahasa Indonesia, Deutsch, Español (Latinoamérica), Français, Italiano, Nederlands, Português, 한국어, 日本語 This Google Cloud Privacy Notice describes how we collect and process your personal information in relation to Google Workspace (including Google Workspace for Education), Google Cloud Platform, Google Cloud Marketplace, Cloud Identity (when sold separately), Implementation Services and Google Cloud Training (together, "Cloud Services"). |
| 258 | If Turkish Personal Data Protection Law No. 6698 ("KVKK") applies to the processing of Service Data relating to you, the following additional disclosures and country-specific terms apply together with this Privacy Notice. | ||
| 259 | Data Controller. | ||
| 260 | Google Cloud EMEA Ltd acts as the data controller under the KVKK with respect to the Service Data processed in connection with Cloud Services. | ||
| 261 | Categories of Personal Data and Purposes of Processing. | ||
| 262 | As a data controller, Google processes the categories of personal data described in the "Service Data We Collect" section of this Privacy Notice. | ||
| 263 | In accordance with the fundamental principles set forth under the KVKK, such categories of personal data are processed exclusively for the purposes described in the "Why We Process Service Data" section of this Privacy Notice. | ||
| 264 | Methods of Data Collection and Legal Grounds. | ||
| 265 | Methods of Collection Your personal data is collected through automated or partially automated means during the provision, administration and technical support of Cloud Services. | ||
| 266 | This includes personal data directly provided by you, your organization, your administrator, authorized resellers or partners, as well as personal data generated automatically through your use of Cloud Services, including configuration information, usage logs, authentication details, device identifiers, cookies or token identifiers, IP addresses and technical support interactions. | ||
| 267 | Legal Grounds for Processing Google processes Service Data on the basis of one or more of the legal grounds set forth under Articles 5 and 6 of the KVKK, including the following: Compliance with Legal Obligations: processing is necessary for Google to comply with its legal obligations under applicable legislation, including accounting, tax, financial reporting and responding to lawful governmental requests; Establishment, Exercise or Protection of Rights: processing is necessary for the establishment, exercise or protection of legal rights, including dispute resolution, enforcement activities and the management of claims; Legitimate Interests: processing is necessary for the legitimate interests pursued by Google or third parties, provided that such processing does not harm the fundamental rights and freedoms of the relevant individual. | ||
| 268 | This legal basis includes, among others, maintaining and improving Cloud Services, ensuring service reliability, preventing fraud, abuse and unauthorized access, and maintaining information security. | ||
| 269 | If special categories of personal data are processed, Google processes such data only in accordance with the conditions and safeguards set forth under Article 6 of the KVKK. | ||
| 270 | That said, Google does not intentionally collect special categories of personal data as part of Service Data and does not require such information for the provision of Cloud Services. | ||
| 271 | Transfers of Personal Data (Domestic and Cross-Border) Domestic Transfers Google may transfer Service Data to its affiliates, trusted service providers, authorized resellers, professional advisers and competent public authorities located in Türkiye where such transfers are necessary for the purposes described in this Privacy Notice and are carried out in accordance with the KVKK. | ||
| 272 | Cross-Border Transfers Due to Google's global infrastructure and centralized operational model, Service Data may be transferred to and processed in countries where Google, its affiliates, and third party providers operate. | ||
| 273 | Such international transfers are carried out in accordance with the KVKK and may rely on transfer mechanisms available under applicable Turkish data protection legislation, including for example: adequacy decisions or standard contractual clauses issued by the Personal Data Protection Board; or other safeguards or derogations permitted under the KVKK including, where none of the foregoing transfer mechanisms is available, the exceptional transfer grounds set forth under Article 9 of the KVKK. | ||
| 274 | Retention Periods In accordance with the KVKK, Google retains Service Data only for as long as necessary to fulfil the purposes described in this Privacy Notice or for the period required under applicable legislation. | ||
| 275 | Most categories of operational Service Data are retained for periods of up to 180 days, depending on the nature of the data and the relevant processing activity. | ||
| 276 | Certain categories of Service Data may be retained for longer periods where required for legal, regulatory, tax, accounting, financial reporting, fraud prevention, security or dispute resolution purposes. | ||
| 277 | Upon expiration of the applicable retention period or the disappearance of the legal grounds requiring processing, personal data is deleted, destroyed or anonymized in accordance with the KVKK. | ||
| 278 | Your Rights Under Article 11 of the KVKK Pursuant to the KVKK, you have the right to: learn whether your personal data is processed; request information regarding the processing of your personal data if your personal data has been processed; learn the purpose of processing and whether your personal data is used in accordance with such purpose; learn the third parties to whom your personal data is transferred within Türkiye or abroad; request correction of incomplete or inaccurate personal data; request deletion or destruction of personal data under the conditions set forth under Article 7 of the KVKK; request notification of correction, deletion or destruction requests to third parties to whom personal data has been transferred; object to any result arising against you through the exclusive analysis of processed data by automated means; and request compensation for damages arising from the unlawful processing of personal data. | ||
| 279 | If you want to exercise your data protection rights with regard to Service Data we process in accordance with this Privacy Notice, and you are not able to do so via the tools available to you or your organization's administrator, you can contact Google via our Privacy Help Center. | ||
| 261 | Previous versions (Last modified September 28, 2026) April 8, 2026 December 18, 2025 October 13, 2025 February 6, 2025 July 10, 2024 January 18, 2024 August 21, 2023 June 30, 2023 January 25, 2023 December 14, 2022 November 15, 2022 April 20, 2022 December 7, 2021 May 30, 2021 December 7, 2020 November 12, 2020 | 283 | Previous versions (Last modified October 15, 2026) September 28, 2026 April 8, 2026 December 18, 2025 October 13, 2025 February 6, 2025 July 10, 2024 January 18, 2024 August 21, 2023 June 30, 2023 January 25, 2023 December 14, 2022 November 15, 2022 April 20, 2022 December 7, 2021 May 30, 2021 December 7, 2020 November 12, 2020 |
Follow unlimited companies, monitor the clauses that matter across every platform, and get the full institutional analysis on what each change obligates you to do.