GDPR & Privacy Notice

Last Updated: December 1, 2024

1. Data Controller

In accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws, your personal data is processed by CLOUDRUX INFORMATION COMMUNICATION SERVICES INDUSTRY AND TRADE LIMITED COMPANY ("CloudRUX" or "Company") as the data controller within the scope explained below.

Address: Atatürk Mah. Alemdağ Cad. No: 140-144 Inner Door No: 19, Ümraniye/Istanbul, Turkey
Email: info​@​cloudrux.com

2. Purpose of Processing Personal Data

Your collected personal data may be processed for the following purposes under the data processing conditions specified in applicable data protection regulations:

• Conducting necessary work by our business units to provide you with products and services offered by our Company
• Customizing and recommending products and services according to your preferences, usage habits, and needs
• Determining and implementing the commercial and business strategies of our Company
• Planning and executing customer relationship management processes
• Following up on contractual processes or legal claims
• Ensuring company security
• Conducting communication activities
• Managing finance and accounting operations
• Fulfilling legal obligations
• Ensuring compliance with legal regulations as required or mandated by law

3. Categories of Personal Data Processed

The categories of personal data processed by our Company are as follows:

• Identity Information: Name, surname, national ID number, date of birth, signature
• Contact Information: Phone number, email address, address
• Customer Transaction Information: Order and request information, invoice information
• Financial Information: Bank account information, invoice and payment information
• Marketing Information: Cookie records, targeting information
• Legal Process Information: Information related to lawsuits and enforcement files
• Transaction Security Information: IP address, log records, device information

4. Transfer of Personal Data

Your collected personal data may be transferred to the following parties within the framework of personal data processing conditions and purposes specified in applicable data protection regulations:

• Business partners and suppliers
• Legally authorized public institutions and private persons
• Shareholders and group companies
• Audit companies and legal advisors

In case of transfer of your personal data abroad, appropriate safeguards will be implemented in accordance with GDPR Article 46 requirements.

5. Method and Legal Basis of Personal Data Collection

Your personal data is collected through all verbal, written, or electronic means for the purposes stated above, in order to provide the products and services offered by our Company and to fulfill our contractual and legal obligations completely and accurately.

Personal data collected for these legal reasons may also be processed and transferred for the purposes specified in this Privacy Notice under the conditions specified in applicable data protection regulations.

6. Retention Period of Personal Data

Our Company retains personal data for the periods prescribed by relevant legislation or required for the processing purpose. After the expiration of the retention period, personal data is deleted, destroyed, or anonymized by our Company.

7. Data Subject Rights

Under GDPR and applicable data protection laws, as a data subject, you have the following rights:

• Right to access - to learn whether your personal data is being processed
• Right to request information if your personal data has been processed
• Right to learn the purpose of processing your personal data and whether they are used in accordance with their purpose
• Right to know the third parties to whom your personal data is transferred domestically or abroad
• Right to request correction if your personal data is incomplete or incorrectly processed
• Right to request deletion or destruction of your personal data under the conditions prescribed by law
• Right to request notification of correction, deletion, or destruction operations to third parties to whom personal data has been transferred
• Right to object to a result against you arising from the analysis of processed data exclusively through automated systems
• Right to claim compensation for damages if you suffer damage due to unlawful processing of your personal data
• Right to data portability - to receive your personal data in a structured, commonly used format
• Right to withdraw consent at any time where processing is based on consent
• Right to lodge a complaint with a supervisory authority

8. Application Method

To exercise the rights mentioned above, you can submit your request with necessary information to verify your identity and your explanations regarding the right you wish to exercise through one of the following methods:

• Written Application: In person or through notary public to the address: Atatürk Mah. Alemdağ Cad. No: 140-144 Inner Door No: 19, Ümraniye/Istanbul
• Email: To info​@​cloudrux.com with a secure electronic signature or mobile signature

Our Company will conclude the request free of charge within the shortest time possible and within 30 (thirty) days at the latest, depending on the nature of the request. However, if the transaction requires additional costs, a fee may be charged according to the applicable tariff.

9. Changes to Privacy Notice

Our Company may make changes to this Privacy Notice at any time. These changes will become effective immediately upon publication of the amended Privacy Notice. You will be informed of changes to this Privacy Notice as necessary.