This policy explains how VenueX Bilişim Teknolojileri A.Ş. (VenueX, we) processes personal data when you visit venuex.io, use the live demo at demo.venuex.io or contact us. When brands send us store sales data, we process it as their data processor, on their instructions; our Security page explains that data flow. If you read Turkish, our KVKK notice covers the same ground under Turkish law.
1. Who we are
VenueX Bilişim Teknolojileri A.Ş. is the data controller for the processing described here.
Address: Reşitpaşa Mah. Katar Cad. İTÜ Arı 8 Teknokent Binası Blok No: 2/11 İç Kapı No: 2, Sarıyer, İstanbul, Türkiye
MERSİS: 0924-0981-9110-0001 · Istanbul trade registry no.: 376378-5
Email: info@venuex.io
2. What we collect
When you email us or request demo access
Information you give us when you email us or request access to the live demo: usually your name, work email, company name and your message. The website has no forms.
The live demo
The live demo asks for your work email and company name to give you access. It uses PostHog to measure how the demo is used, such as which screens are opened.
Technical data
When you visit the website, our hosting provider receives technical data such as your IP address, browser type, device and the page requested, to serve the site and protect it from abuse.
Website analytics, only with your consent
If you accept analytics in the cookie banner, Google Analytics records the pages you view and how long you stay, how you reached the site, your approximate location (country and city), device type, browser and language, scrolling, clicks on links (including email links) and video plays.
3. Why we use it, and on what legal basis
- To answer your requests, give you demo access and follow up about VenueX: steps before or for a contract (KVKK Article 5(2)(c); GDPR Article 6(1)(b)) and our legitimate interest in replying to business enquiries (KVKK Article 5(2)(f); GDPR Article 6(1)(f)).
- To run the business relationship with customers and partners: the contract (KVKK Article 5(2)(c); GDPR Article 6(1)(b)).
- To run and protect the website and the demo: our legitimate interest (KVKK Article 5(2)(f); GDPR Article 6(1)(f)).
- Website analytics: your consent (KVKK Article 5(1); GDPR Article 6(1)(a)). We do not profile you or show you advertising.
- Legal obligations: KVKK Article 5(2)(ç); GDPR Article 6(1)(c).
4. Cookies
The website uses Google Analytics only if you accept it in the cookie banner. Rejecting it has no effect on how the site works. Our Cookie policy lists each cookie, its purpose and lifetime, and explains how to change your choice at any time.
5. Who receives your data
We do not sell personal data. We share it only with these providers, for the purposes above:
- Cloudflare, Inc. (United States) hosts the website and delivers it through its global network. It processes technical data such as your IP address on every visit, to serve the site and protect it from abuse.
- Google LLC (United States) runs Google Analytics for us, only with your consent, and hosts our email (Google Workspace).
- PostHog, Inc. (United States) measures how the live demo is used.
We disclose information to public authorities only when the law requires it.
Transfers abroad. These providers process data in the United States. For Türkiye, the transfers rest on the standard contracts published by the Personal Data Protection Board, signed with each provider and notified to the Board (KVKK Article 9). For visitors in the EU, they rest on the EU-US Data Privacy Framework or the EU standard contractual clauses.
6. How long we keep it
- Emails and business contact data: while the conversation or the contract lasts, then as long as Turkish law requires (commercial correspondence: 10 years, Turkish Commercial Code Article 82).
- Demo access data: while your demo access is active and for our follow-up, then we delete it.
- Google Analytics data: 14 months, then Google deletes it.
- Your cookie choice: 12 months in your browser.
7. Security
We use technical and organisational measures that fit the risk, such as role-based access and keeping each brand’s data separate (KVKK Article 12; GDPR Article 32).
8. Your rights
Under Article 11 of the Turkish Law No. 6698 on the Protection of Personal Data (KVKK), you can:
- learn whether your personal data is processed
- ask for information about the processing
- learn the purpose of the processing and whether the data is used for that purpose
- know the third parties in Türkiye or abroad to whom it is transferred
- ask for incomplete or wrong data to be corrected
- ask for the data to be deleted or destroyed
- ask for the correction or deletion to be passed on to those third parties
- object to a result against you that comes only from automated analysis
- claim compensation for damage caused by unlawful processing
Where the EU General Data Protection Regulation (GDPR) applies, you can also ask us to restrict processing, object to it, and receive your data in a portable format.
You can withdraw your analytics consent at any time with Cookie settings at the bottom of every page. To use any other right, email info@venuex.io from the address you used with us, or write to the address above. We answer within 30 days, free of charge. You can also complain to the Turkish Personal Data Protection Board (KVKK Article 14) or, where the GDPR applies, to the data protection authority in your EU country.
9. Changes to this policy
We update this policy when our processing changes. The date at the top shows the last update.