Privacy Notice
This notice explains personal-data processing on Rexyon’s presentation website and your rights. A contact enquiry does not create marketing permission or a subscription order.
Last updated: 28 October 2026
1. Controller and contact
Controller: Baran Sert / Rexyon. Address: 1207 Street No. 1, 41400 Gebze / Kocaeli, Türkiye. Data-rights contact: baran@rexyon.com. This notice covers the presentation website. Separate notices must be provided for account, employee or customer data within individual software applications.
2. Data categories and collection methods
When the contact form is available, your name, phone, email, subject, message and any selected product/plan are collected directly from you electronically. Required fields are marked with an asterisk; using the form is optional. Do not provide passwords, identity numbers, payment-card details, health data or unnecessary third-party data. Hosting infrastructure may process IP addresses, request times and technical security records when you connect. Browser preference records are described in the Cookie Policy. The reading acknowledgement is optional; leaving it unticked does not prevent an enquiry. Its state and the displayed notice version are included with the message.
3. Purposes and specific legal bases
Identity, contact and enquiry details necessary to assess a quote or demo request for a contract you may enter are processed under Turkish Law No. 6698, Article 5(2)(c). Necessary and proportionate handling of general enquiries unrelated to a contract and website security relies on the enquiry-management/security legitimate interest under Article 5(2)(f), provided your fundamental rights are not harmed. Legally required records are considered under Article 5(2)(ç), and records necessary to establish, exercise or defend rights under Article 5(2)(e). These grounds do not permit unlimited processing. Optional consent-based theme storage depends on your separate cookie choice. Where GDPR applies, the corresponding purposes are assessed under Articles 6(1)(b), (f), (c) and, where relevant, (f); optional consent-based storage is assessed under Article 6(1)(a).
4. Recipients and form operation
The hosting service (Hostinger) processes technical information needed for access and security. Your contact-form message is relayed through a Supabase contact function to Rexyon’s Telegram bot and handled by the authorised business contact. This form does not create a separate customer database record. Information may be disclosed to competent authorities or authorised advisers only where necessary for legal duties or the protection of rights. Data is not sold or automatically added to marketing lists.
5. International transfers and delivery availability
Hosting and communications providers may involve cross-border processing. On an enabled form, the name, phone, email and message you send are relayed through Supabase to the business’s Telegram account. Preparations for provider data-processing and international-transfer arrangements have not yet been completed. Technical availability of the form does not mean that these arrangements are complete. Viewing this notice, ticking the reading acknowledgement or accepting cookies does not replace a transfer agreement or constitute consent. Email providers also require separate assessment.
6. Retention, deletion and security
The target maximum retention for closed enquiries that do not lead to a contract is 12 months after closure; information that becomes unnecessary earlier should be deleted. Contract, invoice, legal-duty and dispute records are retained separately according to the period and basis applicable to that record type. Providers’ technical logs require separate assessment against their documented terms. Browser preferences remain valid for up to 180 days. Access restrictions, server-side credential storage and security controls are used; absolute security is not guaranteed.
7. Rights and requests
To exercise rights under Article 11 of Law No. 6698, contact baran@rexyon.com with your request and reply details; do not send unnecessary identity-document copies. Any necessary identity verification uses a proportionate, secure method. Subject to statutory application procedures and fee exceptions, requests under Turkish law are resolved as soon as possible and within 30 days. Where GDPR applies, rights of access, rectification, erasure, restriction, objection and conditional portability, and the right to complain to the competent authority, also apply, with the relevant response deadlines. Consent for consent-based processing may be withdrawn prospectively.
8. Separate marketing and cookie choices
This website has no campaign subscription or automatic promotional-email registration. A contact form, quotation request or demo discussion is not marketing permission. Any future marketing activity requires the relevant separate permission, opt-out and record processes in advance. Cookie choices control only the relevant browser storage; they are not form-processing or advertising permission. Interface files and the font are served with the website; no font request is made to Google Fonts servers.
9. Updates and version
Notice version: 2026-10-28.4. Changes to purposes, providers, transfer arrangements or website functions require this notice and the related processes to be updated before use. This notice does not by itself authorise new registration, payment, analytics or advertising features.