EVRENIXTECHNOLOGIES

Privacy Policy & Personal Data Protection Notice

Last updated: 10 July 2026

Evrenix Bilişim ve Yazılım Teknolojileri Limited Şirketi ("Evrenix", the "Company", "we") is committed to protecting your personal data. Acting as data controller, we have prepared this Privacy Policy & Notice in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK") and, to the extent applicable, the EU General Data Protection Regulation ("GDPR"). It explains which personal data we collect through the evrenixtech.com website (the "Site"), for which purposes and on which legal bases it is processed, to whom it may be transferred, and the rights you have in relation to it.

This notice is provided in fulfilment of the information obligation set out in Article 10 of the KVKK and Articles 13 and 14 of the GDPR.

1. Data Controller

The data controller with respect to your personal data under the KVKK and the GDPR is:

  • Legal name: Evrenix Bilişim ve Yazılım Teknolojileri Limited Şirketi
  • Address: Atatürk Mah. Ertuğrul Gazi Sk. Metropol İstanbul C1 Blok No: 2B İç Kapı No: 376, Ataşehir / İstanbul
  • Email: mert.evrensel@evrenixtech.com
  • Website: https://evrenixtech.com

2. Personal Data We Process

The following categories of personal data are processed through the Site:

  • Identity data: your first and last name as submitted through the contact form.
  • Contact data: your email address and, if provided, your company name.
  • Inquiry content: the subject you select and the message you share in the contact form.
  • Technical and security data: server logs such as IP address, browser type and version, operating system, pages visited and date/time of visit, as well as similar technical data processed by our hosting and analytics providers.

We do not request special categories of personal data (such as health, religion or ethnic origin) through the Site; please do not share such data via the contact form.

3. Purposes of Processing

Your personal data is processed for the following purposes:

  • Receiving, assessing and responding to the inquiries you submit through the contact form;
  • Carrying out communication activities and establishing potential business relationships;
  • Preparing proposals and conducting contract processes for our services upon your request;
  • Operating the Site securely, reliably and in compliance with applicable law, and detecting errors and security incidents;
  • Analysing the use of the Site through anonymous statistics and improving the Site;
  • Complying with our legal obligations and protecting our rights in potential disputes.

4. Legal Bases for Processing

Your personal data is processed on the following legal bases set out in Article 5 of the KVKK and Article 6 of the GDPR:

  • Processing being directly related to the establishment or performance of a contract (KVKK Art. 5/2-c; GDPR Art. 6/1-b) — assessing your requests for proposals and carrying out service processes;
  • The legitimate interests of the data controller (KVKK Art. 5/2-f; GDPR Art. 6/1-f) — securing the Site, responding to contact requests and improving our services;
  • Compliance with a legal obligation (KVKK Art. 5/2-ç; GDPR Art. 6/1-c) — retention, disclosure and notification obligations arising from applicable law;
  • Explicit consent (KVKK Art. 5/1; GDPR Art. 6/1-a) — where none of the above applies, for example the consent you give via the checkbox in the contact form.

5. How We Collect Personal Data

Your personal data is collected electronically, by fully or partly automated means, through the contact form on the Site, email correspondence, server logs, and cookies and similar technologies. For details on cookies, please see our Cookie Policy.

6. Transfers and International Transfers

Your personal data may be transferred — solely for the purposes stated above and to the extent necessary — to the service providers from which we receive hosting, form delivery, email and analytics services, to public authorities legally entitled to receive it, and to private parties authorised under our legal obligations.

The Site's hosting and form delivery services are provided by suppliers whose servers are located abroad (in particular in the United States). Data you submit through the contact form and technical data are therefore transferred internationally. International transfers are carried out in accordance with the conditions set out in Article 9 of the KVKK and, under the GDPR, subject to appropriate safeguards such as standard contractual clauses (SCCs).

We do not sell your personal data and do not share it with third parties for marketing purposes.

7. Retention Periods

Your personal data is retained for as long as required by the purposes of processing and, in any case, for the maximum retention and statutory limitation periods prescribed by applicable law. Contact form records are kept for as long as necessary to resolve your inquiry and to conduct any follow-up correspondence. At the end of the retention period, your personal data is deleted, destroyed or anonymised.

8. Your Rights as a Data Subject

Under Article 11 of the KVKK, you may apply to the data controller to exercise the following rights:

  • To learn whether your personal data is being processed;
  • To request information about the processing, if any;
  • To learn the purpose of processing and whether the data is used in line with that purpose;
  • To know the third parties to whom your data is transferred, in Turkey or abroad;
  • To request rectification of incomplete or inaccurate data;
  • To request erasure or destruction of your data under the conditions set out in Article 7 of the KVKK;
  • To request that rectification, erasure or destruction be notified to third parties to whom the data has been transferred;
  • To object to a result arising to your detriment from the analysis of your data exclusively by automated systems;
  • To claim compensation for damages arising from unlawful processing.

Where the GDPR applies, you additionally have the rights of access (Art. 15), rectification (Art. 16), erasure — the right to be forgotten (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). Where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before the withdrawal.

You also have the right to lodge a complaint with the Turkish Personal Data Protection Board and, for processing subject to the GDPR, with the supervisory authority of the EU member state in which you reside.

9. How to Exercise Your Rights

You may submit requests regarding the rights listed above in writing to our address stated above or by email to mert.evrensel@evrenixtech.com, in accordance with the Turkish Communiqué on the Principles and Procedures for Application to the Data Controller, or through the contact channels on the Site. Your application will be concluded free of charge as soon as possible and within thirty (30) days at the latest, depending on its nature; if the process requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be charged.

10. Data Security

Pursuant to Article 12 of the KVKK and Article 32 of the GDPR, Evrenix takes the necessary technical and organisational measures to ensure an appropriate level of security, to prevent unlawful processing of and unlawful access to personal data, and to safeguard its retention. Data transmission on the Site is encrypted via TLS/SSL; access to data is limited on a need-to-know basis and the principle of data minimisation is observed.

11. Changes to This Notice

This notice may be revised from time to time to reflect changes in legislation or in our data processing activities. The current version is always published on this page, and the update date above is revised for material changes.