This notice explains how your personal data is processed when you use your rixor account and the rixor.com.tr, shop.rixor.com.tr and promosyon.rixor.com.tr sites, under Turkey's Personal Data Protection Law No. 6698 (KVKK).
Data controller
rixor. Email: [email protected]
What we process
- Identity: full name and, if you provide it, your birthday.
- Contact: email address, mobile phone (if provided), delivery and billing addresses.
- Transactions: your orders and quotes on shop and promosyon; on promosyon, your company details and the logos you upload.
- Support: what you write in live support chats.
- Security: a one-way hash of your password, session records, sign-in and security activity, IP address, browser and operating system.
- Marketing: your offer email and text preferences, only if you opt in.
Why, and on what legal basis
- Creating and managing your account, delivering and invoicing orders: performance of a contract (KVKK art. 5/2-c).
- Keeping invoices and commercial records: legal obligation (art. 5/2-ç).
- Protecting your account (rate limits, new-device alerts, security history): legitimate interest (art. 5/2-f).
- Offer communications: explicit consent (art. 5/1), which you can withdraw any time under Account > Profile.
Who we share it with
- Hosting: the site and its data are kept on our server in Turkey.
- Network and backups: requests to the site pass through the Cloudflare (USA) network; nightly backups are encrypted and stored with Cloudflare's storage service.
- Email delivery: Resend (USA).
- Live support: what you write in the chat is sent to AI service providers (USA) to prepare replies.
- Shipping companies, to deliver your orders.
- Authorised public bodies, when legally required.
When we check a new password against breach lists, the password itself is never sent; only the first 5 characters of its SHA-1 hash go to Have I Been Pwned, which can't be turned back into your password.
How long we keep it
For as long as your account is open. When you delete your account, your personal details, addresses, sessions and security history are deleted; records we must keep by law (such as invoices) are kept for the legal period with the link to you minimised. Unused sign-in codes and reset links expire quickly.
Your rights
Under article 11 of KVKK you can ask whether your data is processed, request information, correction or deletion, learn who it was shared with, object, and claim compensation for damages.
You can download your data or delete your account under Account > Security. For other requests, email [email protected]; we reply within 30 days.
Cookies
We only use cookies the site needs to work; no advertising or tracking cookies.
- rx_oturum: keeps you signed in (60 days with "keep me signed in", otherwise until you close the browser).
- rixor-son-kapi: remembers which door you last chose on the welcome screen (1 year).
- rx_tema: remembers the light/dark theme you chose on the promotional site (1 year).
- rx_ton: remembers the logo colour you chose in the catalogue (1 year).
- rx_destek: links a live support chat you started without signing in to this browser (90 days).
Visit statistics
On promosyon.rixor.com.tr we count page views and which sites visitors come from without cookies. Your IP address and browser details are not stored; to tell repeat visits on the same day apart, a one-way summary specific to that day is derived from them and kept for at most 13 months. If your browser asks not to be tracked (Do Not Track, Global Privacy Control), you are not counted.
Campaign emails
Campaign emails are sent only if you agreed to them in your account. You can unsubscribe at any time with the link in each email or in the Profile section of your account; quote, order and account emails are not affected.