At Gema Oil, the security and confidentiality of our users’ personal information are our highest priority. This Security Policy explains the measures taken to protect and securely process the data you share while using our Site.
1. Our Data Security Approach
To protect the confidentiality of users’ personal and payment information, we implement technical and administrative measures that comply with international security standards.
All data processing activities are based on the principles of confidentiality and data minimization — only the necessary data are collected and protected against unauthorized access.
2. Secure Communication and Data Transmission
All data transmitted through the Site is encrypted using the SSL (Secure Socket Layer) protocol. This ensures that user information cannot be intercepted by third parties.
Credit card and payment details are transmitted over secure infrastructure and never shared with unauthorized individuals.
3. Prevention of Unauthorized Access
Our system infrastructure is protected with strong firewalls, monitoring tools, and authentication systems.
Access permissions are limited to personnel who require access based on their job responsibilities and are regularly reviewed.
4. Data Retention and Protection Process
Personal data are stored only for the duration necessary and are securely deleted or anonymized once this period ends.
Stored data are regularly backed up and protected against physical and digital threats.
5. Third-Party System Security
Third-party service providers used on the Site are selected based on compliance with security standards.
Data transfers to these providers occur only when necessary and through secure communication protocols.
6. User Responsibility
Users are responsible for protecting their account and session information.
It is recommended to store passwords securely, avoid sharing them with third parties, and prefer secure devices when accessing the Site.
7. Security Breaches and Notification
In the event of any detected security breach or data leak, the incident will be assessed in accordance with applicable regulations, and users and official authorities will be notified when necessary.
8. Policy Updates
This Security Policy may be updated in line with technological developments or legal requirements.
The updated policy becomes effective once published on the Site. Users are encouraged to review the policy periodically.
