KVKK Disclosure Notice
Last updated: 9 juillet 2026
Contents
Purpose
This notice is prepared under art. 10 of Turkey's Personal Data Protection Law No. 6698 (KVKK) to inform you how your personal data is processed by the data controller.
Data controller
Under Law No. 6698 on the Protection of Personal Data, the data controller is PAX GROUP DOO. You can reach the controller at contact@paxgroupglobal.com; the full contact details are in the block at the end of this page.
Personal data processed
The following categories of personal data are processed, with the scope and retention periods shown.
| Data | Scope | Retention |
|---|---|---|
| Account data | Name, email, password hash, language preference, consent timestamp | Until the account is deleted |
| Phone | Phone number and verification status (anti-bot / real-user check) | Until the account is deleted |
| Chart images | Screenshots you upload (private, access-restricted storage) | Until account deletion; rejected/inappropriate uploads deleted immediately |
| Analysis reports | AI-generated technical-outlook reports | Until the account is deleted |
| Audit and log data | Security events (register, login, analysis), IP address, device/browser info | Limited period for security |
| Quota counters | Monthly analysis usage counts | Per month; until account deletion |
Purposes of processing
Your personal data is processed for, and limited to, the following purposes.
| Purpose | Detail |
|---|---|
| Providing the Service | Creating and managing your account and access |
| Producing analyses | Generating technical-outlook reports from your charts |
| Security | Preventing abuse and running quota and fraud checks |
| Communication | Sending transactional email/SMS (verification, key notices) |
| Legal obligation | Meeting statutory retention and reporting duties |
Legal grounds
Processing relies on the following legal grounds set out in KVKK art. 5 and 6.
| Legal basis | Applied to |
|---|---|
| Performance of a contract | Compte et analyse (KVKK 5/2-c ; RGPD 6/1-b) |
| Explicit consent | Risk consent and international transfers (KVKK 5/1, 9; GDPR 6/1-a) |
| Legitimate interest | Security, logging and abuse prevention (KVKK 5/2-f; GDPR 6/1-f) |
| Legal obligation | Statutory retention duties (KVKK 5/2-ç; GDPR 6/1-c) |
Domestic and international transfers
Your personal data may be transferred to sub-processors necessary to run the Service, some located abroad. International transfers rely on your explicit consent and/or appropriate safeguards under KVKK art. 9.
Your rights under KVKK art. 11
You have the right to: learn whether your data is processed; request information if it is; learn the purpose of processing; know the third parties to whom it is transferred at home or abroad; request correction of incomplete/incorrect data; request deletion/destruction where conditions are met; request that these actions be notified to third parties; object to a result against you arising solely from automated analysis; and claim compensation for damage due to unlawful processing.
How to apply
You can submit requests via the contact details below. Your application is resolved within 30 days under KVKK art. 13. You retain the right to complain to the Personal Data Protection Authority where appropriate.
Contact
For KVKK requests, use the data controller's contact details below.
Business and data-controller details
- Legal name
- Mert Gül
- Address
- Tekirdağ, Türkiye
- Data controller
- PAX GROUP DOO
- Controller address
- Zrtava Fasizma 46, Montenegro (PIB 03800709)
- Support
- contact@paxgroupglobal.com
- Legal notices
- contact@paxgroupglobal.com