Privacy Notice on the Processing of Personal Data

Last updated: 12 March 2026

1. Data Controller

Under Turkey's Personal Data Protection Law No. 6698 ("PDPL/KVKK"), your personal data is processed by VEXI Technology and Information Services Ltd. ("Company") acting as the data controller, within the scope explained below. For visitors in the EU/EEA, applicable GDPR principles also govern this processing.

2. Personal Data We Process

The following personal data is processed via our website (vex-i.com):

a) Data Collected via the Contact Form

• Your name and surname
• Your email address
• Your phone number
• The contents of your contact form message

b) Data Collected Automatically

• IP address
• Browser type and version
• Operating system information
• Page view data and on-site navigation information
• Cookie data (see Cookie Policy for details)

3. Purposes of Processing

Your personal data is processed for the following purposes:

• To assess your inquiries, requests and suggestions submitted via the contact form and to respond to you
• To provide information and offers about our services
• To deliver, measure and improve the technical functionality and performance of our website
• To carry out information security processes
• To fulfill our legal obligations
• To improve service quality through statistical analyses

4. Legal Bases for Processing

Your personal data is processed based on the following legal grounds (KVKK Article 5(2) / GDPR Article 6 where applicable):

• Necessary for the performance of a contract or pre-contractual measures (KVKK m.5/2-c, GDPR Art. 6(1)(b))
• Legitimate interests of the controller, e.g. site security and fraud prevention (KVKK m.5/2-f, GDPR Art. 6(1)(f))
• Your explicit consent for analytics and marketing cookies (KVKK m.5/1, GDPR Art. 6(1)(a))
• Compliance with a legal obligation (KVKK m.5/2-a, GDPR Art. 6(1)(c))
• Establishment, exercise or defense of legal claims (KVKK m.5/2-e, GDPR Art. 6(1)(f))

5. How Your Personal Data Is Collected

• Directly: Information explicitly provided by you via the contact form on our website
• Automatically: Through cookies and similar technologies during your visit (Google Analytics 4)

6. Data Sharing and International Transfers

Your personal data may be shared, limited to the purposes above, with: (i) public authorities and courts where required by law; (ii) legal counsel and accountants; and (iii) the following service providers based outside Turkey, with appropriate safeguards (EU-US Data Privacy Framework, Standard Contractual Clauses).

7. Retention Periods

Your personal data is retained for as long as the processing purposes require and for the limitation periods set out in applicable legislation. After the retention period, your personal data will be deleted, destroyed or anonymized in line with applicable regulations.

8. Security Measures

• SSL/TLS encryption to secure data transmission
• Access permission and control matrices to prevent unauthorized access
• Regular security updates and vulnerability scans
• Awareness training for employees on personal data protection
• Maintaining and updating a data processing inventory

9. Your Rights

Under KVKK Article 11 (and, where applicable, GDPR Articles 15-22) you have the right to: confirm whether your personal data is being processed; request information regarding such processing; learn the purposes of processing and whether the data is used in line with those purposes; learn the third parties to whom data is transferred domestically or internationally; request correction of incomplete or inaccurate data; request deletion or destruction; request that the corrections, deletions and destructions be communicated to third parties to whom data has been transferred; object to outcomes resulting solely from automated processing; and seek compensation for damages arising from unlawful processing.

10. How to Exercise Your Rights

To exercise your rights you may contact us using the methods below:

Your application will be concluded free of charge as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request.

11. Updates

This Privacy Notice may be updated to comply with legal changes and our policies. The current version is always available at vex-i.com/en/privacy-notice.