Privacy Notice

1. Identity of the Data Controller

This Privacy Notice is provided under the Turkish Personal Data Protection Law No. 6698 ("KVKK") and related legislation by the company identified below, acting as data controller.

• Legal Name: ———
• Tax ID: ———
• MERSIS No: ———
• Registered Address: ———
• KEP Address: ———
• KVKK Contact Email: kvkk@nexovia.com.tr

This notice covers personal data processing carried out through the www.nexovia.com.tr website (the "Site"). It is general information only and should be reviewed by qualified legal counsel before publication.

2. Personal Data Processed and Purposes

When you use the contact or request forms or visit the Site, the following categories of personal data may be processed:

• Identity data (first name, last name)
• Contact data (email address, phone number, company/organisation where provided)
• Request and message content (information you submit via forms or email)
• Technical and usage data (IP address, browser/device information, visit logs, cookie data)

This data is processed for the following purposes:

• Responding to your inquiries, questions and applications
• Lead and business relationship management and maintaining communication
• Conducting pre-contractual discussions and delivering advisory/consulting services
• Fulfilling legal obligations and providing information to competent authorities
• Ensuring Site security, preventing misuse, and statistical analysis/improvement

3. Transfer of Personal Data

Your personal data may be transferred to the following recipient groups, only to the extent necessary to fulfil the purposes above and in accordance with Articles 8 and 9 of the KVKK:

• Our hosting provider: ———
• Our email and communication infrastructure provider: ———
• Our web analytics provider: Google Analytics (Google LLC, USA)
• Bot and abuse protection on contact forms (simple math verification, honeypot and rate limiting; no third-party cookies)
• Legally authorised public institutions and judicial/administrative authorities (upon request and as required by law)

Where an international transfer is involved, it is carried out in accordance with the conditions set out in the KVKK (explicit consent or the appropriate safeguards/exceptions specified by law).

4. Collection Method and Legal Basis

Your personal data is collected electronically through the contact and application forms on the Site, email correspondence, cookies and similar automated means.

Your data is processed on the following legal bases under Article 5 of the KVKK:

• Where directly related to the conclusion or performance of a contract (including pre-contractual discussions)
• Where necessary for the data controller to fulfil a legal obligation
• Where necessary for the legitimate interests of the data controller, provided it does not harm your fundamental rights and freedoms

Where none of these grounds apply (for example, marketing communications), your personal data is processed solely on the basis of your explicit consent.

5. Rights of the Data Subject (KVKK Article 11)

Under Article 11 of the KVKK, you may exercise the following rights by applying to the data controller:

• To learn whether your personal data is being processed
• To request information if your personal data has been processed
• To learn the purpose of processing and whether the data is used in accordance with that purpose
• To know the third parties, in Turkey or abroad, to whom your personal data is transferred
• To request rectification of incomplete or inaccurate personal data
• To request erasure or destruction of your personal data under the conditions of Article 7 of the KVKK
• To request that rectification, erasure or destruction be notified to third parties to whom the data was transferred
• To object to a result against you arising from analysis of your data solely by automated systems
• To claim compensation for damages suffered due to unlawful processing of your personal data

6. How to Exercise Your Rights

You may submit requests regarding the rights above, together with information verifying your identity, in writing to ——— or by email to kvkk@nexovia.com.tr.

Your request will be concluded as soon as possible and in any case within thirty (30) days, in accordance with the Communiqué on the Procedures and Principles for Application to the Data Controller. A fee from the tariff set by the Personal Data Protection Board may be charged where the process entails an additional cost.

If your application is rejected, the response is found insufficient, or no timely response is given, you have the right to file a complaint with the Personal Data Protection Board.