GDPR Bilgilendirmesi

1. Data controller

PROCUX Teknoloji A.Ş.("Aircux") acts as data controller for account and contact data, and as data processor for the end-customer data that a client connects through its channels. Processing is performed only on documented client instructions.

2. Legal bases (Art. 6 GDPR)

• Contract — to provide and operate the service.
• Legal obligation — to meet statutory and audit requirements.
• Legitimate interests — security, fraud prevention, service improvement.
• Consent — where specifically required (e.g. certain communications).

3. Categories of data

• Identity & contact details submitted via forms.
• Usage, approval-ledger and security/audit logs.
• End-customer data processed on behalf of the client.

4. International transfers & residency

Data is hosted within the EU and each tenant is technically isolated. Where any transfer outside the EEA occurs, we rely on appropriate safeguards such as Standard Contractual Clauses. We do not sell personal data.

5. Your rights

• Access, rectification and erasure ("right to be forgotten").
• Restriction of and objection to processing.
• Data portability in a structured, machine-readable format.
• Right to lodge a complaint with a supervisory authority.

To exercise your rights, contact privacy@aircux.com. We respond within one month.