GDPR Disclosure

1. Introduction

As Nexlead, we commit to protecting your personal data at the highest level as a data controller under the Personal Data Protection Law No. 6698 ("KVKK") and GDPR. This policy explains how your personal data is collected, processed, stored and protected.

2. Data Controller

Company Name: Nexlead Information Technologies Inc.
Address: Istanbul, Turkey
Email: gdpr@nexlead.com
Phone: +90 850 308 16 81

3. Processed Personal Data

3.1. Identity Information

Name, surname, national ID number (when required), date of birth

3.2. Contact Information

Email address, phone number, address information, IP address

3.3. Financial Information

Invoice information, payment information (credit card information is not processed, transactions are made through payment gateway)

3.4. Transaction Security Information

IP address, cookie records, browser information, operating system information

3.5. Marketing Information

Purchase history, product preferences, platform usage data

4. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

• Providing services and enabling platform use
• Customer relationship management and support services
• Billing and payment transactions
• Fulfilling legal obligations
• Statistical analysis and research activities
• Marketing and advertising activities (with your explicit consent)
• Information security processes
• Resolution of legal disputes

5. Transfer of Personal Data

Your personal data may be transferred to third parties in the following cases:

• To public institutions and organizations for fulfilling legal obligations
• With our service providers (server service, payment systems, etc.)
• With our business partners (with your explicit consent)
• To competent authorities in legal claims and litigation processes

6. Storage of Personal Data

Your personal data is stored for the period required by the processing purpose and our legal storage obligations. When this period expires, your data is deleted, destroyed or anonymized.

7. Your Rights

Under Article 11 of KVKK and GDPR, you have the following rights:

• Learning whether your personal data is processed
• Requesting information if processed
• Learning the purpose of processing and whether they are used in accordance with the purpose
• Knowing third parties to whom personal data is transferred
• Requesting correction if processed incompletely or incorrectly
• Requesting deletion or destruction within the framework of conditions set forth in KVKK
• Requesting notification of the above operations to third parties to whom your data has been transferred
• Objecting to the emergence of a result against you due to analysis by automated systems
• Claiming damages in case of damage due to unlawful processing

8. Application Method

To exercise your rights mentioned above, you can apply in writing to gdpr@nexlead.com email address or our company address with documents identifying you. Your applications will be evaluated and responded to within 30 days at the latest.

9. Security Measures

We take technical and administrative measures to ensure the security of your personal data. These include encryption, firewalls, access controls and regular security audits.

10. Policy Changes

This policy may be revised from time to time due to changes in legal regulations or updates to our company policies. We will inform you about significant changes.

11. Contact

For questions about this policy, you can contact us at gdpr@nexlead.com.