This notice is prepared under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform. It explains how the personal data of visitors to authexai.com and of people who contact us is processed.
1. Identity of the data controller
Your personal data is processed by Piksel Bayt Teknoloji Limited Şirketi, owner of Authex, a solution offered under the Spectrace brand, as data controller, within the scope described below.
- Address: Medeniyet Teknopark Üsküdar Campus, Ünalan Mahallesi, Ünalan Caddesi No:1, Block A D: 2-D, Üsküdar / İstanbul, Türkiye
- Email: info@spectracerd.com
- Phone: +90 216 606 45 55
- Website: authexai.com
2. Personal data we process
We process only the data you share with us and the technical data that arises from your use of the site. What we process depends on which form you complete:
| Channel | Data category | Data processed |
|---|---|---|
| Contact form (/en/contact) | Identity, contact, professional experience | Full name, company, email, phone, subject, message content |
| Meeting request (/en/request-a-meeting) | Identity, contact, professional experience | Full name, job title, company, company size, email, phone, subject, industry, message content |
| Brochure request | Identity, contact, professional experience | Full name, company, email |
| Site usage | Transaction security | IP address, browser and device information, pages visited, referring address, cookie identifiers |
3. Purposes of processing
- Receiving, assessing and concluding your applications, requests and questions
- Contacting you and providing the information your request calls for
- Introducing our solutions and services and conducting pre-contractual discussions
- Keeping the site secure and preventing automated or malicious form submissions
- Measuring site usage and improving content (only with your explicit consent)
- Meeting legal obligations and responding to requests from authorised public bodies
4. Legal grounds for processing
Your personal data is processed on the following legal grounds set out in Article 5 of the KVKK:
| Processing | Legal ground (KVKK Art. 5) |
|---|---|
| Handling contact, meeting and brochure requests | 5/2-c: directly related to the conclusion or performance of a contract; 5/2-f: legitimate interest |
| Keeping the site and forms secure | 5/2-f: legitimate interest of the data controller |
| Analytics cookies and visit measurement | 5/1: explicit consent (given through the cookie banner, withdrawable at any time) |
| Promotional and marketing messages | 5/1: explicit consent |
| Statutory retention and responding to authorities | 5/2-a: expressly provided for by law; 5/2-ç: legal obligation |
5. Method of collection
Your data is obtained directly from you when you complete a form on authexai.com, send us an email or call us; technical data is obtained automatically through cookies and server logs while you use the site.
6. Transfer of personal data
Your personal data is not sold or rented to third parties. It is shared only within the scope below, in line with Articles 8 and 9 of the KVKK.
Transfers within Türkiye
- Our lawyers in the event of a legal dispute, and the firms from which we receive independent audit or financial advisory services
- Public authorities and judicial or administrative bodies authorised by law
Transfers abroad
The service providers below, which we use to run the site, may host their servers outside Türkiye; your technical data may therefore be processed abroad by them. Transfers abroad are carried out in line with the procedures and conditions set out in Article 9 of the KVKK.
| Service provider | Purpose | Data transferred | Processing ground (Art. 5) |
|---|---|---|---|
| Hosting and security service provider (abroad) | Hosting, delivery and security of the site; form security verification | IP address, browser and device information, request logs | Legitimate interest (Art. 5/2-f) |
| Visit measurement service provider (abroad) | Measuring visit statistics | Cookie identifier, truncated IP address, device and usage data | Explicit consent (Art. 5/1) |
| Error monitoring service provider (EU) | Detecting and fixing site errors | IP address, browser and device information, error logs | Legitimate interest (Art. 5/2-f) |
| Map service provider (abroad) | Office location map on the contact page | IP address, browser and device information | Only if you consent to cookies or open the map yourself; explicit consent (Art. 5/1) |
All photographs on the site are served from our own servers; no third-party server is contacted to load an image. If you do not consent to analytics cookies, the visit measurement tool is not loaded and no transfer abroad takes place on that basis. You can withdraw your consent at any time through the Cookie preferences link in the footer. See our Cookie policy for details.
7. Retention periods
Your personal data is kept for as long as the purpose of processing requires and for the limitation periods set out in the relevant legislation; at the end of that period it is deleted, destroyed or anonymised.
| Data | Retention period |
|---|---|
| Contact, meeting and brochure requests | 2 years from conclusion of the request |
| Records of discussions that lead to a commercial relationship | 10 years from the end of the relationship (limitation period under the Turkish Code of Obligations) |
| Cookie consent record | 1 year |
| Server and security logs | 12 months at most |
| Analytics data | 14 months at most |
8. Data security
Under Article 12 of the KVKK we apply administrative and technical measures to protect your personal data against unauthorised access, loss and unlawful processing: encrypted communication over HTTPS across the site, bot verification on forms, access limited to team members who need it for their role, confidentiality undertakings with our service providers, and access logging.
9. Your rights as a data subject
Under Article 11 of the KVKK you may apply to the data controller to exercise the following rights:
- To learn whether your personal data is processed
- To request information if it has been processed
- To learn the purpose of processing and whether the data is used in accordance with that purpose
- To know the third parties to whom your data is transferred, in Türkiye or abroad
- To request correction if the data is incomplete or inaccurate
- To request deletion or destruction within the conditions set out in the law
- To request that correction, deletion and destruction be notified to the third parties to whom the data was transferred
- To object to a result reached against you solely through automated analysis
- To claim compensation if you suffer damage because of unlawful processing
10. How to apply
Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit requests regarding your rights through the channels below. Your application must state your full name, your signature (for written applications), your Turkish ID number (nationality and passport number for foreign nationals), your address for notification, your email and phone if any, and the subject of your request.
- In writing: by wet-signed petition delivered in person or through a notary to Medeniyet Teknopark Üsküdar Campus, Ünalan Mahallesi, Ünalan Caddesi No:1, Block A D: 2-D, Üsküdar / İstanbul, Türkiye
- By email: from the email address registered in our systems to info@spectracerd.com
- With a secure electronic signature or mobile signature: send your signed application to info@spectracerd.com
Your application is concluded free of charge as soon as possible and in any case within thirty days, depending on the nature of the request. If the process requires an additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged. If your application is rejected, you find the response insufficient or no response is given in time, you may lodge a complaint with the Personal Data Protection Board within thirty days of learning the response and in any case within sixty days of the application date.
11. Cookies
The cookies used on the site, their types, durations and how to manage your consent are explained in detail on the Cookie policy page. For the general principles on processing your personal data, see the Privacy policy page.
12. Changes to this notice
This notice may change in line with amendments to legislation or updates to our processing activities. The current version is always published on this page; the date at the top of the page shows when it was last updated.