VERTEX QUA VERIFIED TRADE EXECUTION
Legal

Privacy notice

How [Company legal name] processes personal data when you visit this website, request a demo or become a client. This notice is provided under the EU and UK GDPR, Turkish Law No. 6698 (KVKK) and other applicable data protection laws.

Last updated: [Date]
IN SHORT
  • VERTEX QUA runs on your server. We do not receive your trading data, balances, API keys or passwords.
  • We process the details you give us to answer your request and to provide the service.
  • We send marketing emails only with your separate consent.
  • You can access, correct or delete your data at any time.

1. Who is responsible

[Company legal name], [Registered address], [email protected], is the data controller (veri sorumlusu). [EU/UK representative and data protection officer, if appointed].

2. What we collect

  • Demo and contact requests: name, work email, company, country, profile, markets of interest and your message.
  • Clients: contact and billing details, licence and support records, and communication with us.
  • Website: technical data such as IP address, browser type and access times in server logs.
  • Not collected: the software runs on your infrastructure. We do not receive your trading data, positions, balances, API keys or passwords, unless you choose to share specific information with us, or grant us temporary access to your server, for installation or support.

3. Why we use it and on what legal basis

  • Responding to your demo or contact request: steps before entering a contract, and our legitimate interest in answering enquiries (GDPR Art. 6(1)(b) and (f); KVKK Art. 5(2)(c) and (f)).
  • Providing licences, setup and support: performance of a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
  • Invoicing, accounting and legal obligations (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)).
  • Website security and abuse prevention: legitimate interest (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
  • Marketing emails: only with your separate, optional consent, which you can withdraw at any time (GDPR Art. 6(1)(a); KVKK Art. 5(1)).

4. How we collect it

Directly from you through forms, email and calls, and automatically through our website server logs.

5. Who we share it with

Service providers that act on our instructions, such as our email provider Zoho Mail (Zoho Corporation), our email delivery provider Resend (Resend, Inc.), which forwards demo form requests to our mailbox, our hosting and network provider Cloudflare (Cloudflare, Inc.), which delivers this website and protects it against attacks, and accounting providers, professional advisers, and authorities where required by law. We do not sell personal data.

6. International transfers

Some providers may process data outside your country. Where required, we use safeguards such as the European Commission's standard contractual clauses and, for transfers from Turkey, the standard contracts set by the Turkish Personal Data Protection Board under KVKK Art. 9. Email we receive and send is stored by Zoho Mail in its data centre in the European Union. Demo form requests are delivered by Resend, which may process them in the United States. This website is delivered through Cloudflare's global network, so technical data such as your IP address may be processed in data centres outside your country, including in the United States.

7. How long we keep it

Demo requests that do not lead to a contract: [12 months]. Client records: for the contract term and then as required by commercial and tax law [e.g. 10 years]. Server logs: [period]. Marketing consent: until you withdraw it.

8. Your rights

Depending on the law that applies, you can request access, correction, deletion, restriction, portability and objection, withdraw consent, and learn whether your data is processed and to whom it is transferred (including the rights under KVKK Art. 11). Send your request to [email protected]. We respond within 30 days. You can also complain to your data protection authority, such as the Turkish Personal Data Protection Authority or your EU/UK supervisory authority.

9. Cookies

We use only what is strictly necessary for the website to work. If you choose light or dark mode, that choice is stored in your browser and is never sent to us. We do not use advertising or analytics cookies, and the website loads no content from third parties, including fonts. If this changes, we will update this notice and ask for your consent where required.

10. Security

We use technical and organisational measures to protect personal data, including access control, encryption in transit and least-privilege access.

11. Children

Our services are for professional users and are not directed at anyone under 18.

12. Changes

We may update this notice and will publish the new version on this page with a new date.