Privacy Policy

This Privacy and Personal Data Protection Policy has been prepared by REXE Teknoloji A.Ş. ("REXE"), which operates the website at the domain rexe.tr, in accordance with the Law on Protection of Personal Data No. 6698 ("KVKK").

This policy applies to personal data of site visitors, prospective customers and existing customers. By using our services, you accept that your data will be processed as described in this policy. REXE undertakes to process the minimum amount of personal data that is limited, proportionate and necessary for the provision of services.

Within the scope of KVKK, your personal data is processed by REXE Teknoloji A.Ş. in its capacity as data controller.

Regarding data belonging to third parties that you process on our services as a Customer, REXE acts in the capacity of "data processor"; the lawfulness of such data is the Customer's responsibility.

Depending on the type of service provided, the following personal data may be processed: name and surname, phone number, e-mail address, address information, national ID number, billing information, and IP address and transaction security information.

Provided it complies with legislation, additional information and documents may be requested where deemed necessary; the User is obliged to provide the requested information within the specified period.

The national ID number is processed for the purposes of carrying out billing operations, fulfilling legal obligations, and meeting obligations toward authorized public institutions and organizations.

This data is stored only for purposes permitted by legislation, with necessary technical and administrative security measures, and without being shared with third parties except for legal obligations.

During your use of the site, information such as IP address, browser and usage data may be collected automatically through cookies and similar technologies.

Cookies are used to improve the user experience. You can block the use of cookies through your browser settings; however, in this case you may not be able to fully benefit from some functions of the site.

We process your personal data for the purposes of providing services completely and securely, carrying out billing and accounting operations, contacting you, fulfilling legal obligations, ensuring system and transaction security, and improving service quality.

If you consent, we may inform you by e-mail about our new products, services and campaigns; you can withdraw this consent at any time.

For payments made by credit and debit card, card information is not stored on REXE systems; payment transactions are carried out through authorized payment service providers.

Card information entered during payment is transmitted encrypted with the 256-bit SSL security protocol; REXE does not access or view users' card information.

Personal data is not shared with third parties without your explicit consent. Within the scope of legal obligations such as issuing e-invoices, your data may be shared on a limited basis with authorized service providers; and for statistical purposes it may be shared after being anonymized.

In case of a legal request from courts, prosecutors and authorized public institutions, your personal data may be shared with the relevant authorities in accordance with legislation. This usually relates to an investigation regarding a crime committed on the servers.

In line with technical requirements, REXE may host its e-mail server, website, customer panel and the personal data processed within this scope (excluding server contents and data hosted by the customer) on the infrastructures of secure service providers, or provide these services through overseas proxy, CDN and security services, for the purposes of performing support services, improving performance and taking measures against cyber threats such as DDoS.

Such overseas data transfers are carried out within the framework of the performance of the service and technical necessities, taking into account Article 9 of KVKK and the principles determined by the Personal Data Protection Board, and by taking the necessary technical and administrative security measures.

Personal data is stored for the periods stipulated in the relevant legislation and limited to the period required by the processing purpose. Records of IP addresses and servers assigned to your name are kept together with identity information for at least 5 years due to legal obligations.

When the retention period ends, personal data is deleted, destroyed or anonymized in accordance with KVKK and the relevant legislation.

REXE takes the necessary technical and administrative measures to ensure the security of personal data. Nevertheless, we remind you that the internet environment is not completely secure and that 100% security of any data transmission cannot be guaranteed.

In the event of a data breach as a result of cyberattacks or unauthorized access, the necessary notifications are made within the scope of legislation.

REXE does not knowingly collect personal data from children under the age of 13 and does not provide services to this age group. If such data is detected, we kindly ask you to contact us via support.

Pursuant to Article 11 of KVKK, you have the right to learn whether your personal data is being processed, request information if it has been processed, learn whether it is used in accordance with its purpose, request its correction if it has been processed incompletely or incorrectly, request its deletion or destruction within the framework of legislation, and request the remedy of damages due to unlawful processing.

You can submit your requests through the support system or via info@rexe.tr.

REXE reserves the right to make changes to this Policy whenever it deems necessary; the updated text becomes effective from the date it is published on rexe.tr.

For all kinds of requests and applications regarding your personal data, you can reach us at info@rexe.tr or through our support system.