1. Parties and Purpose
This Privacy Policy and Personal Data Protection Agreement ("Agreement") is executed between **Code X Art Studios** ("Company") and any natural or legal person ("User") visiting, registering, or utilizing the digital services (web development, UI/UX design, mobile applications, graphic design, server management, etc.) on our website (codexart.com.tr / codexart.net and its subdomains).
Our Company acts as the Data Controller in accordance with global data protection regulations (including GDPR and Turkish KVKK). The purpose of this agreement is to provide complete, transparent, and detailed disclosure regarding how user personal data is collected, processed, transferred, stored, and the legal rights guaranteed to data subjects.
2. Personal Data Collected and Collection Methods
Our Company collects the following categories of data through automatic or non-automatic means (web forms, emails, cookies, OAuth login providers, etc.) for service delivery, system security, and user experience optimization:
- Identity Information: First name, last name, tax/national ID number (where necessary for invoicing), username.
- Contact Information: Email address, phone number, physical billing/delivery address.
- Transaction & Client Details: Service purchase history, support tickets, request details, payment receipts (*Credit card and sensitive payment details are processed exclusively through certified PCI-DSS payment gateways and are NEVER stored on our servers*).
- Technical & Security Data: IP address, browser type and version, server log files, session cookies, entry-exit timestamps, device identifiers.
- Marketing & Preferences: Newsletter subscription settings, survey responses, and platform usage metrics.
3. Purposes and Legal Grounds for Data Processing
Your personal data is processed strictly under the following legal grounds and defined objectives:
Execution of Contract: Fulfilling order requirements for web design, custom development, domain registration, server deployment, and managing active user accounts.
Legal Obligations: Compliance with applicable tax laws, electronic commerce regulations, internet law log-retention duties, and official reporting.
Legitimate Interest: Maintaining system integrity, preventing cyber threats and fraud, optimizing infrastructure performance, and providing technical customer support.
Explicit Consent: Sending promotional updates, announcements, and newsletters (*Users may unsubscribe at any time via the link in emails or account settings*).
4. Data Transfer to Third Parties and International Transfers
Our Company strictly does NOT sell, rent, or lease your personal data to any third party for commercial purposes. Data may only be shared under strict confidentiality with limited recipient groups:
- Law enforcement, judicial bodies, or authorized government agencies upon valid legal orders.
- Domain registrars, SSL certification authorities, and cloud hosting infrastructure providers (strictly restricted to information necessary for domain/service provisioning).
- Third-party transactional email services and authentication providers.
- Certified accountants, legal counsels, and independent auditors under professional secrecy obligations.
5. Cookie Policy
We utilize essential and analytical cookies to ensure optimal navigation, maintain user authentication sessions, and evaluate site performance. Essential cookies cannot be disabled as they are required for basic site operations. You can manage or disable analytical cookies through your browser preferences.
6. Security Measures and Data Retention
We deploy industry-standard technical safeguards including 256-bit SSL/TLS encryption, Web Application Firewalls (WAF), strict access control matrices, and routine vulnerability assessments. Personal data is retained only for the duration specified by legal statutes or required for processing purposes, after which it is securely wiped or anonymized.
7. Data Subject Rights
You have the right to know whether your personal data is being processed, request access to your personal data, request correction of inaccuracies, request deletion or restriction of processing, learn the identity of third parties to whom your data has been transferred, object to automated profiling, request data portability where applicable, and claim compensation for damages arising from unlawful processing.
To exercise any of your rights, please submit a written request to contact@codexart.com.tr.
8. Contact & Data Controller Information
Data Controller: Code X Art Studios
Email: contact@codexart.com.tr
Website: https://codexart.net
9. DMCA Protection & Copyright
All digital content, media assets, design templates, and software source code published on this website are protected under international copyright laws and registered with DMCA Protection Services.