Privacy Notice

1. Who we are

The data controller is Phexum Yazılım A.Ş. (Phexum Yazılım Anonim Şirketi), registered with the Istanbul Trade Registry under number 69601-5, MERSİS number 0729112977500001.

Address: İçerenköy Mah., Üsküdar-İçerenköy Yolu Cad., Bodur İş Merkezi, No: 8, Kat: 3, Daire: 11, 34752 Ataşehir, İstanbul, Türkiye. Email: [email protected]. Phone: +90 216 577 69 21.

2. What we collect and why

Contact form

Company name, email address, the service you are interested in and your message. We use them to answer your request and, if you ask for it, to prepare an offer.

Workshop booking

Name and surname, company, work email, phone (optional), preferred date, format, city for on-site workshops, approximate number of participants and your note. We use them to check the date, confirm or decline your request or propose another date, prepare the workshop and send you the emails that let you manage your booking.

Job and internship applications

Name, email, phone, the CV or portfolio you share, profile links and what you write about yourself. We use them only to evaluate your application.

Site visits

IP address, browser and device type, the pages you visit and the page that referred you, and an approximate location (country and city) derived from the IP address. We use them to keep the site secure and to understand which pages are useful.

3. Legal basis

We process this data because it is necessary to take the steps you ask for before entering into a contract with us and to perform that contract (KVKK Article 5(2), item c), to comply with our legal obligations (Article 5(2), item ç), and for our legitimate interests in running and securing the site, as long as this does not harm your fundamental rights (Article 5(2), item f). Where the law requires your explicit consent, we ask for it separately.

4. Who we share it with

We do not sell your personal data. We share it only with the service providers we need to run the site and answer you, and with public authorities when the law requires it.

Our servers are hosted in Germany. Traffic to the site passes through Cloudflare (United States) for delivery and security, our emails are sent and stored with Google Workspace (Google, United States), and for site visits the IP address is sent to the location service ip-api.com, which is also outside Türkiye. These are transfers abroad, made under KVKK Article 9.

5. How long we keep it

We keep personal data only as long as needed for the purpose it was collected for and for the periods required by law, then delete, destroy or anonymize it.

Contact messages: 2 years after our last correspondence. Workshop bookings: 2 years after the workshop date; if the work is invoiced, the related records are kept for 10 years as commercial records required by the Turkish Commercial Code. Job and internship applications: 1 year after the decision. Site visit records (IP address and related data): 1 year.

6. Cookies

We do not use advertising or third party analytics cookies. Some forms use a technical session cookie that is needed for them to work and is deleted when you close your browser.

7. Your rights

Under KVKK Article 11 you have the right to learn whether your personal data is processed, to request information about it, to learn the purpose of processing and whether it is used for that purpose, to know the third parties in Türkiye or abroad to whom it is transferred, to ask for incomplete or inaccurate data to be corrected, to ask for it to be deleted or destroyed under the conditions of Article 7, to ask that corrections and deletions be notified to those it was transferred to, to object to a result against you that arises only from automated analysis, and to claim compensation for damage caused by unlawful processing.

To use these rights, write to us at the address above or email [email protected], following the Communiqué on the Procedures and Principles of Application to the Data Controller. We answer within 30 days at the latest, free of charge unless the request requires a separate cost.