Privacy Notice (KVKK / GDPR)
Last updated:
This notice informs visitors of cxunique.com and subscribers to our newsletter about how we process personal data, as required by Turkey’s Personal Data Protection Law No. 6698 (“KVKK”, Art. 10), the EU General Data Protection Regulation (“GDPR”, Arts. 13–14) and the data protection laws of Azerbaijan and the other countries we serve.
1. Data controller
The data controller is CXUnique. For any data protection question or request, contact: [email protected]
2. Data we process, purposes and legal bases
- Newsletter: e-mail address, chosen language, date of subscription confirmation. Purpose: sending the monthly CX newsletter. Legal basis: your explicit consent (KVKK Art. 5/1, GDPR Art. 6(1)(a)). You can withdraw consent at any time via the unsubscribe link in every e-mail.
- Contact: name, e-mail address and message content when you write to us. Purpose: answering your message. Legal basis: legitimate interests and handling your request (KVKK Art. 5/2-f, GDPR Art. 6(1)(f)).
- Site usage data: pages visited, reading depth, outbound links clicked, browser/device type and approximate country. No identifying cookies are used; data is kept as aggregate statistics that do not identify you. Purpose: understanding which topics readers value. Legal basis: legitimate interests.
- Technical security logs: IP address, request time, browser information. Purpose: securing the site and preventing abuse (e.g. form spam). Legal basis: legitimate interests and legal obligation.
We do not request or process special-category (sensitive) personal data. Subscribing is optional; you can use the site without it.
3. Retention
- Newsletter data: for as long as you remain subscribed; deleted when you unsubscribe, except the minimum record needed to avoid re-sending.
- Correspondence: until your request is resolved and any limitation periods have passed.
- Technical security logs: for the short period needed for security and as required by statutory retention duties.
Afterwards data is deleted, destroyed or anonymised.
5. Your rights
Under KVKK Art. 11, GDPR Arts. 15–22 and, to the extent your national law grants them, you have the right to:
- find out whether your data is processed and request information,
- learn the purpose of processing and whether it is used accordingly,
- know the recipients your data is transferred to,
- have incomplete or inaccurate data corrected,
- have your data erased or destroyed (“right to be forgotten”),
- have corrections/erasures notified to recipients,
- object to processing and request restriction,
- receive your data in a structured format and port it to another controller (GDPR),
- withdraw consent at any time (processing before withdrawal remains lawful),
- object to decisions based solely on automated processing that affect you, and claim compensation for damage.
We do not make automated decisions or perform profiling.
6. How to exercise your rights
To exercise your rights, write to [email protected]. Only requests sent to this address are answered.
7. Regional notes
In Türkiye, Law No. 6698 (KVKK) applies; in the EU, EEA and UK, the GDPR; in Azerbaijan, Russia, Kazakhstan and other countries in the region, the national data protection law. Where more than one law applies, the one giving you the broadest protection prevails.
8. Security
We protect your data against unauthorised access, loss and disclosure with reasonable technical and organisational measures (HTTPS, access restrictions, double opt-in for subscriptions). If a breach poses a risk to your rights and freedoms, we notify the competent authority and, where required, you, within the deadlines and procedures set by law.
9. Changes
We may update this notice as the law or our service changes. The current version is always published on this page, with the “last updated” date at the top.