Privacy Policy

1. Veri Sorumlusu

Vexaris is the data controller in terms of personal data processing activities carried out through the website ("Site") accessed under the domain name www.vexaris.net. All natural persons who visit, review, use or interact with the Site ("Relevant Person") are considered within the scope of this Privacy Policy.

This Privacy Policy; It regulates the procedures and principles regarding the processing of all personal data shared by the Relevant Person through the Site or obtained automatically during the use of the Site. Unless otherwise stated in the Policy, all transactions made on the Site are subject to this Policy.

2. Processed Personal Data

Your personal data categorized below may be processed on the site:

• Kimlik Bilgileri:Name, surname, username.
• Contact Information:Email address, telephone number, residence/delivery address.
• Membership and Account Information:Username, password (hashed), account preferences, membership date.
• Transaction Security Information:IP address, session information, login and logout times, device and browser information used.
• Finansal Bilgiler:Invoice information and payment information regarding purchases (without prejudice to special legal regulations).
• Legal Transaction Information:Information regarding legal requests, complaints, and processes carried out with judicial and administrative authorities.
• Request/Complaint Management Information:Information you submit through contact forms and support requests.

Processing of the above information that is not mandatory for the operation of the Site is subject to your express consent. If mandatory information is not provided, you may not be able to benefit from some services of the Site.

3. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

• Creating membership registration, account management and carrying out identity verification processes,
• Performance of the products and services offered by the Site, management of orders and payments,
• Carrying out invoicing and accounting processes, fulfilling legal obligations,
• Receiving, evaluating and finalizing your requests and complaints,
• Monitoring the use of the Site and performing performance and security analyses,
• Carrying out communication and marketing activities (only with your explicit consent),
• Resolving legal disputes and providing information to the competent authorities,
• Performing software updates, license verification and technical support activities.

4. Conditions of Processing of Personal Data and Legal Reasons

Your personal data is processed based on one or more of the following legal reasons listed in Article 5 of the KVKK:

• It is clearly stipulated in the law,
• The obligation to protect the life or physical integrity of the person or another person who is unable to express his/her consent due to actual impossibility or whose consent is not legally valid,
• It is necessary to process personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract,
• It is mandatory for the data controller to fulfill its legal obligation,
• The data has been made public by the relevant person,
• Data processing is mandatory for the establishment, exercise or protection of a right,
• It is mandatory to process data for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned.

In cases where none of the above legal reasons exist, your personal data will be processed only with your explicit consent. You can withdraw your express consent at any time; Withdrawal of consent does not affect the legality of previously performed transactions.

5. Methods of Collection of Personal Data

Your personal data; Registration forms, contact forms, cookies and similar technical mechanisms on the site are collected electronically through automatic registration systems and third-party service providers.

Collected data; As long as it is up-to-date, accurate and complete, it is processed in accordance with the relevant legislation. The Relevant Person is obliged to ensure that the information he shares is up to date.

6. Transfer of Personal Data

Your personal data; In accordance with the conditions stipulated in Articles 8 and 9 of the KVKK, it can be transferred to the following persons and organizations:

• Business partners and suppliers for the purpose of providing services,
• Software hosting and server service providers,
• Payment institutions and banks (within the scope of purchasing transactions),
• Authorized public institutions, administrative authorities and courts (in cases of legal obligation),
• Companies providing audit, legal and consultancy services.

Data transfer abroad; It is carried out only if you have your explicit consent, in countries with an adequate level of protection, or if one of the conditions of obtaining a written commitment is met.

7. Storage and Deletion of Personal Data

Your personal data; It is stored for the period necessary for the purposes of processing and within the framework of the retention periods stipulated in the legal legislation. If the storage period expires or the purpose of processing no longer exists, your data will be deleted, destroyed or anonymized.

The periods determined within the scope of legal retention obligations (tax, trade, accounting legislation, etc.) are subject to the provisions of the relevant legislation.

8. Data Security

Vexaris, in order to protect your personal data; It takes the necessary technical and administrative measures in accordance with Article 12 of the KVKK to prevent unauthorized access, unlawful processing, disclosure, alteration or destruction.

In this context; Measures such as encrypting data, applying access controls, keeping log records, using firewalls and intrusion detection systems, and imposing confidentiality obligations on personnel and service providers are implemented.

Data transmission over the Internet cannot be guaranteed to be completely secure. However, Vexaris takes all reasonable technical measures to protect your data and constantly updates these measures.

9. Cookies

Cookies and similar technologies are used on the site to improve your usage experience and increase service quality. Detailed information on the use of cookiesOur Cookie PolicyYou can reach via .

10. Rights of the Relevant Person

In accordance with Article 11 of the KVKK, you have the following rights as a Relevant Person:

• Learning whether your personal data is being processed or not,
• If it has been processed, requesting information about it,
• Learning the purpose of processing your personal data and whether it is used in accordance with its purpose,
• Knowing the third parties to whom your personal data is transferred at home or abroad,
• Request correction of your personal data if it is incomplete or incorrectly processed,
• Requesting the deletion or destruction of your personal data within the framework of the conditions stipulated in Article 7 of the KVKK,
• Requesting correction and/or deletion to be notified to third parties to whom personal data has been transferred,
• Object to the emergence of a result against you due to the analysis of the processed data exclusively by automatic systems,
• Request compensation for the damage if you suffer damage due to unlawful processing of your personal data.

11. Application Methods

You can submit your applications regarding your rights listed above in writing or by other methods determined by the Board in accordance with Article 13 of the KVKK.[email protected]address or on the Site.contact formYou can send it via .

Your application will be finalized free of charge within thirty (30) days at the latest, depending on the nature of the request. If the application incurs processing costs, a fee may be charged based on the tariff determined by the Board. Your application must be clear and understandable and include your identity and authority information.

12. Changes

This Privacy Policy may be updated by Vexaris at any time in line with legal regulations and technological developments. The updated policy comes into force as soon as it is published on the Site. You can always access the current version on the Site.

13. Logging and Forensic Sharing

In order to ensure system and network security and to fulfill legal obligations; IP addresses, entry-exit timestamps and system logs from which users access the system are recorded and stored for the periods stipulated in the legislation.

In case of an official and duly request from legal authorities (courts, prosecutor's offices, BTK and relevant administrative units), the relevant logs and records may be shared with judicial authorities in accordance with legal obligation. Logs are not shared with third parties without official request.

14. Third Party Infrastructure and DNS Deployment

Cloudflare infrastructure is used for customers' private domain redirects and Site traffic. In this process, data passes through the Cloudflare network for network security, attack prevention and traffic optimization purposes.

Data passing through Cloudflare may also be subject to the relevant third party's own privacy policies. Vexaris does not share your data with third parties except for mandatory infrastructure transfers.

15. Data Ownership and End User Data

Vexaris; does not sell, market or process for its own benefit the end user data (including end user emails, order histories and similar store data) collected by its customers in its stores.

The store owner (customer) is solely responsible for the security of this database, its legality and obtaining the necessary permissions from the relevant persons. Vexaris only accesses store data to the extent necessary for technical maintenance, security and legal obligations.

16. Data Transfer Abroad

Since SaaS infrastructure servers are hosted abroad, your personal data may be transferred abroad. These transfers are within the scope of Article 9 of Law No. 6698. Transfers are carried out based on your express consent and/or adequate protection commitments and appropriate assurances prescribed by the Board.

By using the Site, you agree to hosting on overseas servers and transferring through infrastructure providers such as Cloudflare. Technical and administrative measures are taken to protect the transferred data; You can submit your requests using the application methods specified in Article 11.