TervaX Privacy Policy
Last Updated: 28.07.2025
This Privacy Policy explains how TervaX Teknoloji ve Danışmanlık A.Ş. (“TervaX”, “We”, “Our”, or “Us”) collects, uses, and protects your personal data when you access our website or interact with our services. This policy aligns with ISO/IEC 27001 information security management principles and applicable Turkish data protection laws.
1. Who We Are
TervaX Teknoloji ve Danışmanlık Anonim Şirketi
Batı Mahallesi, Koruluk Sokak No:27/1
Pendik / İstanbul, Türkiye
Website: https://tervax.com
Email: [email protected]
2. What Personal Data We Collect
We may collect and process the following types of personal data:
-
Name, email address, and contact details (e.g., when filling out contact forms or leaving comments)
-
IP address and browser information (for security and spam protection)
-
Any additional data you voluntarily submit through forms, uploads, or interactions
We do not collect or transmit location metadata embedded in images or biometric information.
3. Purpose of Data Processing
We process personal data strictly for legitimate purposes, including:
-
Responding to contact requests
-
Managing user comments and interactions
-
Improving website functionality and security
-
Meeting contractual or legal obligations
-
Ensuring compliance with information security policies (as per ISO/IEC 27001)
4. Legal Basis for Processing
Your data is processed based on:
-
Your explicit consent (e.g., contact forms)
-
Our legitimate business interests (e.g., website security)
-
Legal and regulatory compliance obligations
5. Cookies and Tracking
We use only essential cookies for:
-
Remembering login sessions and preferences
-
Basic analytics for service improvement
-
Comment functionality (e.g., name/email autofill)
We do not use third-party advertising or marketing cookies.
You may configure your browser to reject non-essential cookies.
6. Data Retention
We retain your data only for as long as necessary to fulfill the purposes stated above or to comply with legal requirements.
-
Comments: stored indefinitely (unless manually deleted)
-
Contact submissions: retained for a maximum of 12 months unless further engagement occurs
-
Registered user data (if any): retained as long as the account remains active
7. Your Rights
In accordance with Turkish Personal Data Protection Law (KVKK) and ISO 27001 principles, you have the right to:
-
Request access to your personal data
-
Request correction or deletion of inaccurate or unnecessary data
-
Withdraw previously given consent
-
Request a copy of the data we hold about you
-
Object to the processing of your data under certain circumstances
To exercise these rights, contact us at [email protected]
8. Data Sharing and Transfers
We do not sell, rent, or transfer your personal data to third parties.
However, limited access may be granted to trusted third-party processors (e.g., hosting providers) strictly under contractual agreements with confidentiality and data protection obligations in line with ISO/IEC 27001 controls.
9. Data Security
TervaX operates under a formal Information Security Management System (ISMS) compliant with ISO/IEC 27001.
We implement technical and organisational measures such as:
-
Access control and encryption
-
Activity logging and monitoring
-
Regular vulnerability assessments
-
Secure data storage and disposal policies
-
Internal training and awareness programmes
10. Third-Party Links
Our website may contain links to third-party websites. These sites operate independently, and we are not responsible for their privacy practices. We encourage you to read their privacy policies before interacting.
11. Changes to This Policy
We reserve the right to revise this Privacy Policy at any time. Updates will be published on this page with the “Last Updated” date. Your continued use of our website constitutes acceptance of any changes.
12. Contact Us
If you have any questions regarding this Privacy Policy or your data, please contact us:
-
📧 Email: [email protected]
-
🌐 Website: https://tervax.com/contact-us