Privacy Notice (GDPR)

Last updated: 25 October 2026

In accordance with Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”, the Turkish counterpart of the EU General Data Protection Regulation, GDPR) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform, we would like to inform you about the personal data processed through our website, our WhatsApp order line, our contact form, and our telephone and e-mail channels.

1. Data Controller

PEXa Teknoloji (“PEXa”)
Address: Şenlikköy, Tezgel Sokağı No:8, 34153 Bakırköy/Istanbul, Türkiye
E-mail: pexa@pexa.com.tr

2. Personal Data We Process

  • Identity: first name, last name
  • Contact: telephone number, e-mail address, delivery and billing address
  • Customer transaction: company name, order details (product, quantity, amount), request and correspondence content
  • Finance: invoice and payment records (tax ID / Turkish ID number only where required for invoicing)
  • Transaction security: IP address and access logs kept by the server when you visit our website

3. Purposes of Processing

  • Receiving, confirming, preparing, delivering and invoicing your order
  • Responding to your price, product, technical support and project requests
  • Carrying out after-sales support and warranty processes
  • Fulfilling obligations arising from financial and commercial legislation
  • Ensuring website security and responding to requests from competent authorities

4. Method of Collection and Legal Grounds

Your personal data is collected directly from you, partly by automated (electronic) means, when you write to our WhatsApp order line, fill in the order form on the price list page, submit the contact form, call us or send us an e-mail. It is processed on the following legal grounds under Article 5(2) KVKK:

  • (c) Processing is directly related to the conclusion or performance of a contract: order and delivery processes
  • (ç) Compliance with a legal obligation of the data controller: invoicing, retention of commercial books and records
  • (e) Establishment, exercise or protection of a right
  • (f) Our legitimate interest, provided that it does not harm your fundamental rights and freedoms: responding to your requests, website security

Your explicit consent is not requested separately for order and request processes.

5. Transfer of Personal Data

Limited to the purposes above, your personal data may be transferred to cargo and logistics companies for delivery, to persons providing us accounting and financial advisory services, to our product suppliers (only to the extent necessary), to our website hosting and e-mail service providers, and to competent public authorities where required by law.

About WhatsApp: When you use our WhatsApp order line, your messages and telephone number are processed on servers outside Türkiye by WhatsApp (Meta Platforms), the provider of the service. If you prefer not to use WhatsApp, you can send your order or request by e-mail (pexa@pexa.com.tr), by telephone or through the contact form on our website.

6. Retention Period

Your personal data is retained for as long as required by the purpose of processing and for the periods set out in the applicable legislation (e.g. 10 years for commercial books and records under the Turkish Commercial Code and the Tax Procedure Law); at the end of that period it is erased, destroyed or anonymised.

7. Your Rights under Article 11 KVKK

By applying to the data controller, you have the right to: learn whether your personal data is processed; request information if it has been processed; learn the purpose of processing and whether it is used in line with that purpose; know the third parties to whom it is transferred in Türkiye or abroad; request rectification if it is incomplete or inaccurate, and erasure or destruction within the framework of Article 7 KVKK; request that these actions be notified to third parties to whom the data was transferred; object to a result to your detriment arising from analysis exclusively by automated systems; and claim compensation for damages arising from unlawful processing.

8. How to Apply

You may submit your requests in writing to our address above, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, or to pexa@pexa.com.tr in a manner that allows us to verify your identity. Your application will be concluded free of charge within 30 days at the latest; if the action requires an additional cost, the fee set by the Personal Data Protection Board may apply.

This English version is provided for information; in case of any discrepancy, the Turkish version prevails.

Scroll to Top