Privacy Policy

Last updated: 06 March 2026

1. Data Controller

This Privacy Policy explains how Vurthex Technology Inc. ("Vurthex", "Company", "we", "us") collects, uses, stores, and protects personal data obtained through our website vurthex.com and related digital services.

Vurthex acts as a data controller under the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the European Union General Data Protection Regulation ("GDPR").

2. Personal Data We Collect

When you visit our website and use our services, we may collect the following categories of personal data:

2.1 Identity and Contact Information

Full name
Email address
Phone number
Company name and title
Postal address

2.2 Digital Identity Information

IP address
Browser type and version
Operating system information
Device identifiers
Cookie data and unique session identifiers

2.3 Usage Data

Pages visited and click data
Site entry and exit times
Referrer URL information
Search queries
Page view durations

2.4 Communication Data

Message content submitted through contact forms
Email correspondence
Proposal requests and project details

3. How We Collect Personal Data

Your personal data is collected through the following methods:

Directly: Information you provide through contact forms, email, phone calls, or face-to-face meetings
Automatically: Data collected automatically when you visit our website through cookies, server logs, and analytics tools
Third parties: Data obtained from business partners, social media platforms, and publicly available sources

4. Purposes of Processing

Your personal data is processed for the following purposes:

Providing, operating, and improving our services
Preparing proposals and managing contractual processes
Responding to your communication requests
Customer relationship management (CRM)
Analyzing and improving website performance
Complying with legal obligations
Ensuring information security
Marketing and promotional activities (with your explicit consent)
Statistical analysis and reporting
Resolution of legal disputes

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

Consent: Where you have given explicit consent for specific processing activities
Contractual necessity: Where processing is necessary for the performance of a contract
Legal obligation: Where processing is required to comply with applicable laws
Legitimate interests: Where processing is necessary for our legitimate business interests, provided it does not override your fundamental rights and freedoms

6. Data Sharing

Your personal data may be shared with the following parties, limited to the purposes of processing:

Service providers: Our business partners providing hosting, cloud infrastructure, email services, analytics, and payment processing
Legal authorities: Courts, prosecutors, and regulatory bodies (when legally required)
Business partners: Third-party companies we collaborate with within the scope of projects (under confidentiality agreements)

When transferring personal data internationally, we ensure compliance with applicable data protection laws, including adequate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions.

7. Data Retention

Your personal data is retained for the duration required by the processing purposes and within the statute of limitations prescribed by applicable legislation. When the processing purpose ceases, your data is deleted, destroyed, or anonymized.

Contact forms: 2 years from the date the request is fulfilled
Contractual data: Duration of the contract plus 10 years (as required by Turkish Commercial Code)
Cookie data: Session duration to 2 years, depending on cookie type
Analytics data: May be retained indefinitely after anonymization

8. Data Security

Vurthex implements the following technical and organizational measures to ensure the security of your personal data:

SSL/TLS encryption for secure data transmission
Firewalls and intrusion detection/prevention systems
Access control and authorization mechanisms
Regular security scans and penetration testing
Data backup and disaster recovery plans
Employee training on data security
Confidentiality agreements and data processing agreements

9. Your Rights

Under applicable data protection legislation (including KVKK Article 11 and GDPR Articles 15–22), you have the following rights:

Right to know whether your personal data is being processed
Right to request information about the processing of your personal data
Right to learn the purpose of processing and whether data is used in accordance with its purpose
Right to know the third parties to whom your personal data has been transferred
Right to request rectification of incomplete or inaccurate personal data
Right to request deletion or destruction of personal data under the conditions set forth by law
Right to request notification of rectification and deletion to third parties to whom data has been transferred
Right to object to any result arising from the exclusive analysis of processed data through automated systems that is to your detriment
Right to claim compensation for damages arising from unlawful processing of personal data
Right to data portability (where technically feasible)

10. How to Exercise Your Rights

To exercise the rights listed above, you may contact us through the following channels:

Email: privacy@vurthex.com
Website: Contact form at vurthex.com/en/contact

Your request will be processed free of charge within 30 days at the latest. If the process requires an additional cost, fees may be charged in accordance with the tariff determined by the Personal Data Protection Board.

11. Policy Changes

This Privacy Policy may be updated in line with legal regulations or changes in our services. Updates are published on this page, and registered users are notified of significant changes.

12. Contact

If you have any questions about our privacy policy, please contact us:

Company: Vurthex Technology Inc.
Email: info@vurthex.com
Website: vurthex.com

Last updated: March 2026