Privacy Notice (KVKK)

Last updated: 06 September 2026

1. Data controller

Your personal data is processed by OXXI Digital Performance Agency (Saray Dijital Medya Hizmetleri) acting as data controller, within the scope described below.

2. What data do we process?

Through this site we collect only the data you send us yourself:

• Identity and contact: full name, company name, email, telephone
• Content of your enquiry: the message and budget range you write in the form
• Transaction security: IP address, browser information, time of form submission
• Cookie data: only with your explicit consent (see the Cookie Policy)

3. For what purposes?

• To respond to your quote and service enquiries
• To communicate with you and manage the process
• To establish and perform a contract
• To meet our legal obligations
• To prevent misuse of our forms (transaction security)

4. Legal basis

Your data is processed under article 5 of the KVKK on the following grounds:

• 5/2-c: necessary for the establishment or performance of a contract
• 5/2-ç: fulfilment of a legal obligation
• 5/2-f: legitimate interest (transaction security, record keeping)
• 5/1: explicit consent (for cookies and commercial electronic messages only)

5. Who do we share it with?

Your data is never sold or transferred to third parties for marketing purposes. It is shared only where strictly necessary to deliver the service, with:

• Our hosting and email infrastructure providers
• Measurement providers (Google, Meta), only if you have given explicit consent
• Authorised public institutions, where legally required

6. How long do we keep it?

• Enquiries that do not proceed: 2 years
• Client records: 10 years from the end of the contract (commercial legislation)
• Cookie preference: 1 year
• Log records: 2 years

7. Your rights

Under article 11 of the KVKK you have the right to:

• Learn whether your personal data is being processed
• Request information about it if it has been processed
• Learn the purpose of processing and whether it is used in line with that purpose
• Know the third parties, in Turkey or abroad, to whom it has been transferred
• Request correction if it has been processed incompletely or incorrectly
• Request its erasure or destruction
• Request that correction, erasure and destruction be notified to the third parties it was transferred to
• Object to a result reached against you through analysis by automated systems
• Claim compensation if you suffer loss because of unlawful processing

8. Making a request

You can send requests relating to your rights to hello@oxxidigital.com. Requests are concluded within 30 days at the latest. So that we can verify your identity, your request must include your name, surname and contact details.