Privacy Policy
This Privacy Policy explains how Sun Group Havuz & Jakuzi ("we", "us", "the Company") handles information in connection with Sun Group DHS (the "Application"), our internal operations platform. It describes in particular what Google user data the Application accesses, how that data is used, where and how long it is stored, and with whom it is shared.
Summary
- The Application is used only by authorised employees of the Company.
- It connects only to Google accounts owned and operated by the Company.
- It never sells Google user data and never shares it with third parties.
- It does not use Google user data for advertising, and does not use it to train machine-learning models.
- Google user data is stored only on infrastructure controlled by the Company, and access can be revoked by you at any time.
1. Who we are
The Application is developed, operated and published by Sun Group Havuz & Jakuzi, a company established in Türkiye. The Company is the data controller for the information processed by the Application.
Contact for all privacy matters: ali.emre.kaymanli@sungrouphavuzz.com
2. Scope of this policy
This policy covers the Application and its website. It applies to data obtained through Google APIs when an authorised Company account authorises the Application. It does not apply to any other website or service operated by the Company.
3. Google user data we access
The Application requests only the Google API scopes necessary for the functions described on our home page. Access is requested from, and granted by, a Google Account belonging to the Company. The scopes requested are:
| Scope | Google data accessed | Why it is needed |
|---|---|---|
.../auth/adwords |
Campaign, ad group, advertisement, keyword, search-term, budget, conversion and cost/performance data belonging to the Company's own Google Ads accounts. | To report on the Company's own advertising performance and to prepare and apply configuration changes (for example budgets, keywords, negative keyword lists and campaign status) on those same Company-owned accounts. |
.../auth/youtube |
The ability to upload video files to, and manage content on, the Company's own YouTube channel. | To upload video content produced by the Company to the Company's own YouTube channel for internal review and reference. |
.../auth/userinfo.email, openid |
The email address and account identifier of the Google Account that granted access. | To identify which authorised Company account is connected, so that data from one account is never attributed to another. |
The Application does not request and does not have access to Gmail content, Google Drive files, Calendar data, Contacts, Google Photos, or any Google data relating to consumers, customers or members of the public.
4. How we use Google user data
The Google user data listed above is used solely to:
- produce internal performance reports for the Company's own advertising activity;
- prepare, review and apply advertising configuration changes on the Company's own advertising accounts, under the review of Company staff;
- upload the Company's own video content to the Company's own YouTube channel;
- keep a record of which Company account authorised the Application, for security and audit purposes.
We do not use Google user data for any other purpose.
5. What we do not do
We do not:
- sell, rent or trade Google user data;
- transfer Google user data to third parties, except as required by law;
- use Google user data for advertising, marketing, retargeting or personalised content;
- use Google user data to determine creditworthiness or for lending purposes;
- use Google user data to train, fine-tune or improve machine-learning or artificial intelligence models;
- allow any human to read Google user data, except (i) where the Company's authorised staff require it for the internal purposes above, (ii) for security or abuse investigation, or (iii) where required by law.
6. How Google user data is stored and secured
Google user data is stored only on infrastructure owned or controlled by the Company, including the Company's own website hosting environment. Specifically:
- OAuth credentials (including refresh tokens issued by Google) are stored on Company-controlled servers in a restricted directory readable only by the account that runs the Application, with file permissions set to owner-only access.
- Access credentials are not committed to public source-code repositories and are not shared between environments.
- Advertising performance data retrieved from Google is held in the Application's local storage and in the Company's own reporting files; it is not uploaded to any third-party platform.
- Access to the infrastructure is limited to named personnel and protected by authentication.
No method of transmission or storage is completely secure, but we apply the measures above to protect the Google user data we hold.
7. Retention and deletion
OAuth tokens are retained for as long as the Application remains authorised to the relevant Company Google Account. When authorisation is revoked, the corresponding tokens become unusable and are deleted from our storage.
Aggregated advertising performance data and the internal reports derived from it are retained for the Company's ordinary business-record period, after which they are deleted.
You may request deletion of the Google user data we hold at any time by writing to ali.emre.kaymanli@sungrouphavuzz.com. We will respond within 30 days.
8. Revoking access
You can at any time review and revoke the Application's access to your Google Account at myaccount.google.com/permissions. Once revoked, the Application immediately loses the ability to read or change anything in the associated Google services.
9. Google API Services User Data Policy
Sun Group DHS's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
In particular, the Application's use of Google user data is limited to providing and improving the user-facing features described in this policy; the data is not transferred to others except as necessary to provide those features, to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to users; and the data is not used for advertising or for training machine-learning models.
10. Legal basis and your rights
We process the information described in this policy on the basis of the Company's legitimate interest in operating its own business systems and the authorisation granted by the account holder. Where the processing relates to individuals, applicable data protection law applies, including the Turkish Personal Data Protection Law (KVKK, Law No. 6698) and, where applicable, the EU General Data Protection Regulation (GDPR). You may request access to, correction of, or deletion of your information, and you may object to processing, by contacting us at the address above.
11. Children
The Application is an internal business tool and is not directed to children. We do not knowingly collect information from children.
12. Changes to this policy
We may update this policy from time to time. The current version is always published at this address, and the "Last updated" date above will be revised accordingly. Material changes will be reflected on the Application's OAuth consent screen configuration where required.
13. Contact
Sun Group Havuz & Jakuzi
Website: sungrouphavuzz.com
Email: ali.emre.kaymanli@sungrouphavuzz.com
Türkçe Özet (KVKK)
Sun Group DHS, Sun Group Havuz & Jakuzi'nin kendi bünyesinde geliştirdiği ve işlettiği dahili bir operasyon ve pazarlama verisi platformudur. Yalnızca şirket çalışanları tarafından kullanılır ve yalnızca şirketin kendi Google hesaplarına bağlanır.
Uygulama; şirketin kendi Google Ads hesaplarının performans verilerini okumak ve bu hesaplarda kampanya yapılandırmalarını yönetmek, şirketin kendi video içeriklerini şirketin kendi YouTube kanalına yüklemek ve hangi şirket hesabının yetki verdiğini belirlemek amacıyla yalnızca gerekli Google izinlerini (adwords, youtube, e-posta) talep eder.
Bu veriler satılmaz, üçüncü taraflarla paylaşılmaz, reklam amacıyla kullanılmaz ve yapay zekâ modeli eğitmek için kullanılmaz. Veriler yalnızca şirketin kendi altyapısında, erişimi kısıtlı olarak saklanır. Google API Hizmetleri Kullanıcı Verisi Politikası'na ve Limited Use şartlarına uyulur. Yetkinizi istediğiniz zaman myaccount.google.com/permissions adresinden kaldırabilirsiniz. Sorular için: ali.emre.kaymanli@sungrouphavuzz.com.