KVKK Disclosure Notice
Last updated: May 28, 2026 · v2026.05.28.2
This English page is a support translation. The Turkish legal text prevails in case of inconsistency.
1. Data controller and scope
The data controller is POIEX TEKNOLOJİ LİMİTED ŞİRKETİ. Contact details are available on the Company Information page.
This notice covers only the poiex.com marketing site. POIEX’s brands, CaterDeck and IngrideX, have their own KVKK notices on their respective sites. When you use one of those products, that product’s notice applies.
2. Data we process
poiex.com collects a limited set of data:
- Language preference cookie (
lang). Set when you choose TR or EN; kept for 1 year. It is functional only and serves the page in the correct language. - Server logs. Standard Cloudflare logs: IP address, browser information, request path, status code.
- Web analytics (Cloudflare Web Analytics). No cookies, no person-identifying data. It processes only aggregate visitor counts (page views, referrer, country, device type).
- Email contact contents. When you write to
hello@poiex.comorprivacy@poiex.com, the email content (message, sender address, optional name) is stored on Google Workspace.
There are no accounts, forms, or payments. The data surface is the four items above.
3. Purposes and legal basis
| Activity | Legal basis (KVKK Article 5) |
|---|---|
| Serving the website in the correct language, maintaining session consistency | Legitimate interest in service operation |
| Responding to contact requests | Pre-contractual request + legitimate interest in customer support |
| Aggregate visitor analytics (Cloudflare Web Analytics) | Legitimate interest in operational improvement (no person-identifying data) |
| Security, error diagnostics, abuse detection | Legitimate interest in service security |
| Recording and responding to KVKK requests | Legal obligation |
4. Transfers
poiex.com uses two processors:
- Cloudflare. We use it for hosting, CDN, server logs, and cookieless web analytics. It is based in the United States.
- Google Workspace. We use it for email storage. It is based in the United States.
Both processors operate outside Türkiye, which constitutes a cross-border transfer. The KVKK Article 9 safeguards (Board adequacy decision, Standard Contractual Clauses notified to the Board within 5 business days, written undertaking, or Binding Corporate Rules) are currently being put in place for the affected processors. This notice will be updated as each safeguard is recorded.
5. Retention
| Data | Retention period |
|---|---|
Language cookie (lang) | 1 year (you can delete it any time) |
| Server logs | 30-90 days (Cloudflare standard) |
| Cloudflare Web Analytics | Aggregate only; no person-level records |
| Contact emails | 2 years |
If a dispute, security incident, or legal obligation requires it, relevant records may be kept for the required period.
6. Cookies
poiex.com uses a single cookie: lang. It is not person-identifying; it only stores whether to show TR or EN. The cookie persists for 1 year in your browser. You can delete it from your browser settings; if deleted, the language is detected automatically from your browser’s language preference on each visit.
Cloudflare Web Analytics uses no cookies. No third-party tracking cookies are used.
7. KVKK Article 11 rights
KVKK Article 11 rights, including access, rectification, erasure, notification to third parties, objection, and compensation, can be exercised at privacy@poiex.com or via KEP. KEP address and written application details are on the Company Information page.
Your request will be answered within 30 days under KVKK Article 13. If you are not satisfied with the response, you retain the right to file a complaint with the Personal Data Protection Authority of Türkiye.