1. Introduction
At EksenGOLD ("Application"), we value the privacy of your personal data. This Privacy Policy explains what information is collected when you use our application, how this information is used, and how it is protected.
The Application is developed by EKSENOVA TEKNOLOJİ ANONİM ŞİRKETİ ("Company") and acts as the data controller under the Turkish Personal Data Protection Law (KVKK) No. 6698.
- MERSIS No: 0329250110100001
- D-U-N-S No: 448901052
2. Data We Collect
Identity Information:
- Turkish ID Number (TC Kimlik No)
- First and Last Name
- Date of Birth
- ID document information (serial number, validity date, etc.)
Device and Usage Data:
- Device type and model
- Operating system version
- Application usage statistics (via Google Analytics)
Camera Access:
- Camera access is requested to take photos of ID documents
- Photos taken are used solely for identity verification purposes
3. How We Use Your Data
- Performing identity verification and Know Your Customer (KYC) processes
- Compliance with MASAK (Financial Crimes Investigation Board) regulations
- Analyzing and improving application performance
- Enhancing user experience
- Fulfilling legal obligations
4. Data Sharing
Your personal data is not shared with third parties except in the following cases:
- Legal requirements (MASAK notifications, court orders, official authority requests)
- Service providers (Google Analytics - anonymous usage data)
- With explicit user consent
Your identity information and photos are never shared with or sold to third parties for commercial purposes, except as required by law. Your data is not transferred abroad.
5. Data Security
Encryption and Security:
- Sensitive personal data is encrypted at the application layer with AES-256
- Secure data transmission via SSL/TLS certificates
Data Integrity:
- Critical records (identity verification, invoices, MASAK operations) are stored in tamper-evident form via signed audit logs
Server Infrastructure:
- All data is stored in data centers located within the Republic of Türkiye
- Data is maintained in encrypted and backed-up form
- Regular security monitoring and security audit processes are in place
Access Control:
- Role-based access authorization system is used
- All data access is logged and audited
6. Data Retention Period
- Identity verification data: At least 8 (eight) years from the last transaction date, as required by the Prevention of Laundering Proceeds of Crime legislation
- Transaction records: At least 8 (eight) years
- Usage statistics: 26 months (Google Analytics standard period)
Data that exceeds the retention period is securely deleted, destroyed, or anonymized in accordance with KVKK Article 7.
7. User Rights (KVKK Article 11)
- To learn whether your personal data is being processed
- To request information if it has been processed
- To learn the purpose of processing and whether it is used in accordance with its purpose
- To know the third parties to whom it is transferred domestically or abroad
- To request correction if it has been processed incompletely or incorrectly
- To request deletion within the framework of the conditions stipulated in Article 7 of KVKK
- To request that correction and deletion operations be notified to third parties to whom it has been transferred
- To object to the emergence of a result against you by analyzing the processed data exclusively through automated systems
- To claim compensation for damages if you suffer damage due to unlawful processing
You can contact us using the contact information below to exercise these rights.
8. Children's Privacy
Our application is not intended for individuals under 18 years of age. We do not knowingly collect personal data from individuals under 18. If you become aware that we have collected data from an individual under 18, please contact us.
9. Third-Party Services
Google Analytics
Google Analytics is used to collect application usage statistics. Google Analytics collects anonymous usage data and is subject to its own privacy policy: https://policies.google.com/privacy
10. Policy Changes
This Privacy Policy may be updated from time to time. You will be notified of significant changes through in-app notification or email. We recommend that you regularly check the current policy.
11. Contact
- Company: EKSENOVA TEKNOLOJİ ANONİM ŞİRKETİ
- Address: ERCİYES TEKNOPARK-2 NO: 5 MELİKGAZİ / KAYSERİ
- Email: [email protected]
- MERSIS No: 0329250110100001
You can submit your applications under KVKK to the email address above.