KVKK Notice — Authex

Last updated: Haziran 2026

This notice is provided pursuant to Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and is directed primarily at data subjects in Türkiye. If you are located outside Türkiye, please refer to our Privacy Policy for information about how we handle your personal data.

1. Data Controller

Spectrace Teknoloji
Medeniyet Teknopark Üsküdar Alanı, Ünalan Mahallesi, Ünalan Caddesi No:1, A Blok D:2-D, 34700 Üsküdar/İstanbul
Email: [email protected]

2. Categories of Personal Data Processed

Identity data: Name, surname, title
Contact data: Email address, phone number, postal address
Transaction security data: Password (hashed), session information, IP address, device information
Financial data: Billing details, subscription and payment history
Customer transaction data: Platform usage statistics, support requests and correspondence

3. Purposes of Processing

Formation and performance of the service agreement
User authentication and account management
Fulfilment of billing and accounting obligations
Provision of customer support and technical assistance
Information security and prevention of unauthorised access
Notifications required under applicable legislation
Statistical analysis and service quality improvement

4. Legal Grounds (KVKK Art. 5 and 6)

Directly related to the establishment or performance of a contract (Art. 5/2-c)
Mandatory for the data controller to fulfil a legal obligation (Art. 5/2-ç)
Mandatory for the legitimate interests of the data controller, provided it does not harm the fundamental rights and freedoms of the data subject (Art. 5/2-f)
Explicit consent (for optional processing such as marketing communications)

5. Transfer of Personal Data

Your personal data may be transferred to technical infrastructure and cloud service providers necessary for the delivery of the Service, payment service providers, and — where legally required — competent public authorities. Where international transfers occur, the safeguards required under KVKK Article 9 are applied.

6. Retention Period

Your personal data is deleted, destroyed, or anonymised once the purpose for processing ceases to exist and statutory retention obligations expire. Financial and accounting data is retained for 10 years in accordance with applicable law.

7. Your Rights under KVKK Art. 11

Under Article 11 of KVKK, you have the following rights:

To learn whether your personal data is being processed
To request information if your personal data has been processed
To learn the purpose of processing and whether your data is used in accordance with that purpose
To know the third parties to whom your personal data is transferred domestically or abroad
To request correction of incomplete or inaccurate personal data
To request deletion or destruction of personal data under KVKK Art. 7
To request notification of corrections/deletions to third parties to whom your data was transferred
To object to a result arising exclusively from automated processing that is detrimental to you
To claim compensation for damages resulting from unlawful processing of your personal data

8. How to Apply

You may submit your requests via:

Email: [email protected]
Post: Written application (wet-ink signature) to Medeniyet Teknopark Üsküdar Alanı, Ünalan Mahallesi, Ünalan Caddesi No:1, A Blok D:2-D, 34700 Üsküdar/İstanbul

Applications will be responded to within 30 days in accordance with KVKK Art. 13. Where a fee is applicable, the tariff set by the Personal Data Protection Board shall apply.