CONTACT FORM & DEMO REQUEST PRIVACY NOTICE
Contact Form and Demo Request Privacy Notice
Last updated: 21.07.2026
1. Identity of the Data Controller
Pursuant to Law No. 6698 on the Protection of Personal Data (“KVKK”), the data controller in respect of the personal data obtained when you contact Apilex through the Contact Form or Demo Request channels is Fitty Teknoloji Anonim Şirketi (“Apilex” or the “Company”), whose registered office is at Çifte Havuzlar Mah. Eski Londra Asfaltı Cad. Kuluçka Mrk. A1 Blok No: 151/1C İç Kapı No: B34 Esenler/İstanbul and whose tax identification number is 3881624490. This Privacy Notice has been prepared pursuant to Article 10 of the KVKK and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.
2. Scope of this Privacy Notice
This Privacy Notice covers persons who contact Apilex through the contact form or demo request channels on the Website (www.apilex.ai), regardless of whether they are members of the Apilex Platform.
Support requests that you create within the Apilex Platform (app.apilex.ai) fall outside the scope of this notice and are governed by the Privacy Notice for Platform Members, Users and Customers.
The processing of personal data of persons who merely visit the Website and do not contact Apilex through any of these channels, applications submitted via the careers page, and personal data provided through the Platform by Users and Customers who register with the Apilex Platform (app.apilex.ai) fall outside the scope of this notice and are governed by separate privacy notices specific to those processes.
3. Categories of Personal Data Processed
In connection with the communication you establish with Apilex through the contact form or demo request channels, your personal data may be processed in the following categories:
| Data Category | Description / Examples |
|---|---|
| Identity Information | Name, surname |
| Contact Information | E-mail address, telephone number |
| Professional Information | Company/organisation name; if you are a legal professional, information on the bar association with which you are registered |
| Request/Complaint Information | The content of the contact form message or demo request and the date and time of the request |
Not all of the data categories above apply to every application; which data are processed varies according to the channel you choose and the nature of your request.
4. Purposes of Processing Personal Data and Legal Bases
Your personal data are processed for the following purposes and on the legal bases indicated opposite each purpose:
| Purposes for Which Your Personal Data Will Be Processed | Legal Basis |
|---|---|
| Contacting you in order to assess your demo request | Taking the necessary steps prior to entering into a contract |
| Assessing the message you submit via the contact form and responding to you | Our legitimate interest, provided that it does not harm your fundamental rights and freedoms |
| Follow-up of your requests and complaints and receiving and assessing suggestions for the improvement of our business processes | Our legitimate interest |
| Where you have given consent, Conducting Marketing Analysis Studies and Conducting Advertising / Campaign / Promotion Processes | Our legitimate interest, provided that it does not harm your fundamental rights and freedoms (your explicit consent is additionally obtained pursuant to Law No. 6563 and the Message Management System (İYS) in order for us to send commercial electronic communications) |
| Fulfilment of our legal obligations and providing information to competent authorities | Explicitly provided for by law |
Where we rely on our legitimate interest, we apply a two-stage balancing test assessing first that such interest genuinely exists and then that it does not prejudice your fundamental rights and freedoms.
5. Method of Collection of Personal Data
Your personal data are collected by being provided directly by you, through completion of the contact form or demo request forms on the Website, or by contacting us by e-mail or telephone.
6. Transfer of Personal Data
Your personal data may be transferred to the following groups of recipients:
Within Turkey
| Third Party Established in Turkey | Purpose of Transfer |
|---|---|
| Our web analytics and advertising service provider | Analysing the use of our website and our Services and conducting marketing activities |
| Our affiliates and subsidiaries | Follow-up of Requests / Complaints, Receiving and Assessing Suggestions for the Improvement of Business Processes, Conducting Customer Relationship Management Processes |
| Authorised public institutions and organisations | Fulfilment of our legal obligations and providing information to competent authorities |
Abroad
| Third Party Established Abroad | Purpose of Transfer |
|---|---|
| Our hosting service provider | Secure storage of data relating to your request |
| Our web analytics and advertising service provider | Analysing the use of our website and our Services and conducting marketing activities |
| Our affiliates and subsidiaries | Follow-up of Requests / Complaints, Receiving and Assessing Suggestions for the Improvement of Business Processes, Conducting Customer Relationship Management Processes |
| Authorised public institutions and organisations | Fulfilment of our legal obligations |
Transfers to authorised public institutions and organisations are made only in the event of a dispute or a legal request. Transfers we make to countries for which no adequacy decision exists are carried out within the framework of the appropriate safeguards provided for under Article 9 of the KVKK.
7. Retention Period of Personal Data
Your personal data within the scope of the contact form and demo request are retained for a period of 1 (one) year from the conclusion of your request. Upon expiry of this period or where the purpose of processing ceases to exist, your personal data shall be deleted, destroyed or anonymised in accordance with Apilex’s retention and destruction policy and the provisions of the KVKK.
8. Measures Taken in Relation to Data Security
In order to prevent the unlawful processing of your personal data and unauthorised access to such data, we take the necessary technical and administrative measures, including in particular the following:
- Access authorisation matrix and control, regular maintenance and review of log records,
- Encryption, firewalls, regular penetration tests and vulnerability scans,
- Data loss prevention and data masking practices, backups and intrusion detection and prevention systems,
- Keeping the personal data processing inventory up to date, employee confidentiality undertakings,
- Regular awareness training and audits of suppliers/data processors.
Our information security processes are conducted in a manner consistent with international standards (ISO 27001). In the event of a data breach, we notify the Personal Data Protection Board and the affected data subjects without delay and in any event within 72 hours.
9. Your Rights as a Data Subject
Pursuant to Article 11 of the KVKK, you may apply to Apilex to exercise the following rights:
- To learn whether your personal data are being processed,
- To request information if your personal data have been processed,
- To learn the purpose of processing of your personal data and whether they are used in accordance with that purpose,
- To know the third parties to whom your personal data are transferred in Turkey or abroad,
- To request the rectification of your personal data if they have been processed incompletely or inaccurately,
- To request the deletion or destruction of your personal data within the framework of the conditions set out in Article 7 of the KVKK,
- To request that the operations carried out pursuant to your requests for rectification, deletion and destruction be notified to third parties to whom your personal data have been transferred,
- To object to the occurrence of a result against you by means of the analysis of your processed data exclusively through automated systems,
- To request compensation for damage if you suffer damage due to the unlawful processing of your personal data.
10. Method of Application and Contact
You may submit your requests relating to the rights listed above, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, together with documents verifying your identity, by e-mail to privacy@apilex.ai, by secure electronic signature or mobile signature to the registered electronic mail (KEP) address fittyteknoloji@hs03.kep.tr, or in writing to the Company’s address at Çifte Havuzlar Mah. Eski Londra Asfaltı Cad. Kuluçka Mrk. A1 Blok No: 151/1C İç Kapı No: B34 Esenler/İstanbul. Your application will be concluded free of charge within 30 (thirty) days at the latest, depending on the nature of the request; however, if the transaction requires an additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged.
11. Changes and Updates
Apilex reserves the right to amend this Privacy Notice in line with legislative changes or updates to business processes. The current text is published on the Website and enters into force as of the date of publication.