This privacy notice has been prepared by Xen Bilişim Danışmanlık Hizmetleri Ltd. Şti. ("Xen Bilişim", "we") as a data controller under Law 6698 on the Protection of Personal Data ("KVKK") and related secondary legislation, to inform visitors of our website and those who contact us. The Turkish-language version of this notice (KVKK Aydınlatma Metni) is the authoritative version under Turkish law.
01Data Controller
The data controller is Xen Bilişim Danışmanlık Hizmetleri Ltd. Şti., registered at Göztepe Mh. İstoç Oto Ticaret Merkezi, Burak Plaza No:1 Kat:7, Bağcılar/İstanbul, contactable at [email protected] and 0850 259 5949.
02Personal Data Processed
We process the following categories of personal data: identity information (name and surname), contact information (e-mail, phone, postal address, social media handles where provided), customer transaction information (correspondence, quote/contract data), and technical information when you visit our website (IP address, browser, device, cookies and similar identifiers).
03Purposes of Processing
Personal data is processed for the following purposes: responding to your enquiry and providing the requested quote or service, fulfilling contractual obligations, providing customer support, conducting marketing communications (subject to your explicit consent under ETK), site analytics (subject to your consent under cookie management), and complying with our legal obligations (tax, accounting, KVKK-mandated reporting).
04Legal Bases
The legal bases under KVKK Article 5 are: (i) explicit consent where required (e.g. commercial marketing), (ii) necessity for the conclusion or performance of a contract, (iii) necessity for the data controller's legitimate interests where they do not override your fundamental rights, and (iv) explicit consent for special category data under Article 6.
05Transfers
Personal data may be transferred to our business partners and service providers strictly as necessary for the purposes above (e.g. e-mail delivery, hosting, CRM, accounting). Cross-border transfers are made subject to KVKK Article 9 requirements (explicit consent or KVKK Authority approval, as applicable). We do not sell personal data to third parties.
06Retention Periods
Personal data is retained for the period necessary to fulfil the purposes of processing, plus any retention required by law (e.g. Tax Procedure Law retention periods). At the end of the retention period, data is deleted, destroyed or anonymized in accordance with our personal data destruction policy.
07Your Rights
Under KVKK Article 11, you have the right to: learn whether your personal data is being processed; request information about how it has been processed; learn the purpose and whether it is used in accordance with that purpose; know the recipients in Türkiye or abroad; request correction or deletion of incomplete or incorrect data; request notification to recipients about correction or deletion; object to results derived solely by automated systems where they produce an adverse outcome; and request compensation for damage caused by unlawful processing.
08How to Exercise Your Rights
To exercise these rights, please use the Data Subject Request Form (linked at /en/data-subject-request/) and submit it via the channels described therein. We will respond within 30 days as required by KVKK.
09Changes
We may update this notice from time to time. The latest version is always available on this page; the "Last updated" date above reflects the most recent revision.
For questions about this notice, please reach us at [email protected] / 0850 259 5949