Privacy Notice

As 1X TEKNOLOJİ SANAYİ VE DIŞ TİCARET A.Ş. (the “Company”), we process the personal data of people who visit the website we operate under the DEFEXSA brand and who contact us in accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and related legislation. This notice has been prepared to inform you in our capacity as data controller, pursuant to Article 10 of the KVKK.

Data controller

Company

1X TEKNOLOJİ SANAYİ VE DIŞ TİCARET A.Ş.

Address

Barbaros Mahallesi Al Zambak Sokak Varyap Meridian Sitesi Grand Tower İç Kapı No: 2 Daire: 9 Ataşehir/İstanbul, Türkiye

Tax office and number

GÖZTEPE VD / 0012728640

MERSIS number

0001272864000001

Email

info@1xteknoloji.com

Personal data we process

• Identity data: name and surname.
• Contact data: email address, phone number, organisation and title.
• Customer transaction data: the content of requests and messages you send through our contact channels.
• Transaction security data: IP address, browser and device information, visit dates and times.
• Marketing data: usage preferences obtained through cookies, only where you have given explicit consent.

Purposes of processing

• Receiving, evaluating and responding to your contact requests.
• Responding to information requests about our products and solutions.
• Ensuring the security of the website and maintaining its technical operation.
• Fulfilling legal obligations and informing authorised institutions.
• Analysing site usage and improving the user experience, where you have given explicit consent.

Legal grounds for processing

Your personal data is processed on the legal grounds set out in Article 5(2) of the KVKK, namely that processing is directly related to the establishment or performance of a contract, that it is necessary for the data controller to fulfil its legal obligations, and that it is necessary for the legitimate interests of the data controller, provided that it does not harm your fundamental rights and freedoms.

Processing related to optional cookies and marketing activities is carried out only on the basis of your explicit consent under Article 5(1) of the KVKK. You may withdraw your consent at any time.

Method of collection

Your personal data is collected through the contact channels on our website, email correspondence and cookies, by automated and manual means.

Transfer of personal data

Limited to the purposes above and in accordance with Articles 8 and 9 of the KVKK, your personal data may be transferred to 1X Group companies, our business partners, the hosting and IT service providers we work with, legally authorised public institutions and, upon request, legally authorised private persons.

Where a transfer abroad is required, the conditions set out in Article 9 of the KVKK will be complied with.

Your rights

Under Article 11 of the KVKK, you may apply to the Company to exercise the following rights:

• To learn whether your personal data is processed.
• To request information if your personal data has been processed.
• To learn the purpose of processing and whether the data is used in line with that purpose.
• To know the third parties in Türkiye or abroad to whom your personal data is transferred.
• To request correction if your personal data is incomplete or inaccurate.
• To request deletion or destruction of your personal data under the conditions in Article 7 of the KVKK.
• To request that corrections, deletions and destructions be notified to the third parties to whom the data was transferred.
• To object to a result against you arising from analysis exclusively by automated systems.
• To claim compensation for damages arising from unlawful processing of your personal data.

How to apply

You may submit your requests, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, in writing to the address above together with documents verifying your identity, or by email to info@1xteknoloji.com using an email address registered in our records.

Your application will be concluded free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. If the process requires an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.