Plexia Privacy Policy

Personal Data Processing Information and Privacy Policy

Plexia (“Plexia”), attaches great importance to the personal data of its users and the rights arising therefrom. The following provisions cover what personal data is collected on the plexia.ai website and Plexia's mobile application, for what purposes such data is collected, how it is used, how you can modify this information, and how you can contact us.

1. Legal Basis for Processing Personal Data

The Turkish Personal Data Protection Law (Law No. 6698), the Law on Regulation of Electronic Commerce (Law No. 6563), the Consumer Protection Law (Law No. 6502), the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce, and the Regulation on Commercial Communication and Commercial Electronic Messages contain provisions regarding the processing or protection of personal data. The Turkish Penal Code (Law No. 5237) provides for certain sanctions regarding the processing and confidentiality of personal data.

As Plexia, we need to process your personal data in order to fulfill our obligations arising from the contracts we will establish with you under the Consumer Protection Law and the Regulation on Distance Contracts, and to provide you with the best service.

2. Processed Data

This section lists the data processed by Plexia that have personal data status under the Turkish Personal Data Protection Law (Law No. 6698). Unless otherwise expressly stated, the term "personal data" in the Plexia Personal Data Processing Information and Privacy Policy shall cover the information listed below.

Plexia collects the following data provided in digital form during membership registration, use of the relevant service, and payment for services.

  • Identity information such as name, surname, etc.
  • University information
  • Title
  • Target exam information
  • Stopwatch/timer information
  • Contact information such as address, work or personal email address, phone number, reference phone number, etc.
  • Password and similar security and transaction information used for identity verification and account access
  • Content, text, photos, information, etc. uploaded to the site during your use of the site
  • Payment information
  • Product/Service usage information
  • Transaction security information
  • Financial information (excluding credit card information)
  • Plexia may obtain information through cookies (technical communication files) during the user's use of plexia.ai, and IP information and log record data are collected via cookies to determine access and usage habits for services offered through plexia.ai.

Pursuant to Articles 3 and 7 of the Personal Data Protection Law, data that have been irreversibly anonymized shall not be considered personal data under the said law, and processing activities regarding such data shall be carried out without being bound by the provisions of this policy.

3. Access to Personal Data

Plexia may transfer the user's personal data and new data obtained therefrom to business partners, shareholders, suppliers, and Plexia officials for the purpose of providing the services specified in the plexia.ai Personal Data Protection and Processing Policy.

Plexia may share data with third parties such as external service providers, hosting service providers, research companies, call centers, and SMS senders for the purpose of improving user experience (including enhancement and personalization), ensuring user security, detecting fraudulent or unauthorized use, conducting operational evaluation research, and resolving errors related to site services.

The user accepts that the aforementioned third parties may store the user's personal data on servers worldwide, subject to the purposes specified above, and gives prior consent thereto.

4. Methods Used in Processing Personal Data

Plexia attaches great importance to the security of your information and works with state-of-the-art tools to ensure it. All necessary physical, electronic and administrative measures have been taken in secure environments to ensure the security of our site. All information is stored and backed up on secure servers.

For third-party providers including Google to display plexia.ai and Plexia's mobile application ads in banner areas on publisher sites on the internet, they need to collect information about ads, optimize and publish ads based on visitors' past visits to plexia.ai and the mobile application. For this purpose, first-party cookies and third-party cookies are used together by plexia.ai and third-party providers including Google.

Cookies are files in which information and passwords are saved while browsing websites, and which allow you to log in with your information remembered when you revisit that website. You can delete all cookies or site data from the tools section of your internet browser, or reject all cookies from the help section.

5. Purpose of Processing Your Personal Data

When you become a member of our site, benefit from the services offered on the site, or purchase a product through the applications, we will need certain personal information such as your name, surname, username, university you attend, title, target exam, phone number, reference phone number, email address, payment information, and address in order to provide you with better service, increase system reliability, and carry out business processes.

We also need your personal information for assignment simulations conducted by Plexia to be based on real data so that users are correctly informed, to prevent manipulation of the system with incorrect data entered by non-physician users and the resulting misdirection of users, and to create study plans by suggesting personalized study plans. Apart from this information, aggregate statistical data that does not contain personal information, such as the frequency and times of visits to the site and mobile application, is also collected and used to analyze and understand visitor behavior and preferences.

Personal information collected on the plexia.ai site and mobile application is used to ensure communication with our users and user satisfaction, to inform you about campaigns, and to provide the services you request or authorize or to carry out transactions.

plexia.ai may use personal information to support these uses, to provide more effective service to its users, to improve the site, mobile application, and other related Plexia products or services, and to make the site easier to use.

We may use your personal information to provide information about the products or services you are using, including notifications. We may also send you information about other Plexia products and services.

Plexia may use cookies and may transfer data processed in this context to third parties only to the extent required by such analysis services for processing within the scope of analysis services offered by third parties. The technical communication files in question are small text files sent to the browser to be stored in the main memory. The technical communication file facilitates the use of the internet in this sense by storing status and preference settings for a website. The technical communication file is designed to obtain statistical information on how many people use websites on a temporal basis, for what purpose and how many times a person visits any website and how long they stay, and to help dynamically generate ads and content from user pages designed specifically for the user, and is used for these purposes. The technical communication file is not designed to obtain any other personal data from the main memory. Most browsers are designed to accept the technical communication file by default, but users can always change their browser settings to prevent the technical communication file from being received or to be warned when the technical communication file is sent. Plexia also has the right to associate the user's behavior on the plexia.ai site with a cookie in the browser and to define remarketing lists based on metrics such as the number of pages viewed, visit duration, and goal completion count for the purpose of online behavioral advertising and marketing.

6. Institutions to Which Your Personal Data is Transferred and Purpose of Transfer

Plexia takes care to process your personal data in accordance with the "need to know" and "need to use" principles, ensuring necessary data minimization and taking the necessary technical and administrative security measures. We must transfer the personal data we process to third parties for certain purposes, as the conduct or supervision of business activities, ensuring business continuity, and operating digital infrastructures necessitate continuous data flow with various stakeholders. It is also very important that your personal data is accurate and up to date in order for us to fully and properly fulfill our contractual and legal obligations. For this reason, we must work with various business partners and service providers.

Plexia may share the personal data it collects with program partner institutions and organizations it cooperates with to conduct its activities, with domestic and international persons and institutions from which it receives cloud storage services, with PayTR Payment and Electronic Money Institution Inc., with various marketing tools to provide better service to users and ensure user satisfaction, with various domestic and international agencies and advertising companies, with survey companies, with other domestic and international third parties, and with relevant business partners.

Processing of your personal data by Plexia without explicit consent is only possible in the limited number of cases specified in the Turkish Personal Data Protection Law (Law No. 6698).

Your credit card information requested on the payment page is in no way stored on the servers of plexia.ai, Plexia's mobile application, or the companies serving it, in order to keep the security of our valued users who make payments from the site at the highest level. The relevant information is entered directly by you into the system of PayTR Payment and Electronic Money Institution Inc., which operates as a licensed Payment Institution under the Law on Payment and Securities Settlement Systems, Payment Services and Electronic Money Institutions (Law No. 6493).

7. Your Rights Regarding Your Personal Data

As Plexia, we would like to remind you of your rights regarding your personal data under the Turkish Personal Data Protection Law (Law No. 6698):

  1. Learning whether your personal data is being processed,
  2. Requesting information if your personal data has been processed,
  3. Learning the purpose of processing of your personal data and whether they are used in accordance with that purpose,
  4. Knowing the third parties to whom your personal data is transferred domestically or abroad,
  5. Requesting correction of your personal data if it is incomplete or incorrectly processed,
  6. Requesting deletion or destruction of your personal data within the framework of the conditions set forth in Article 7,
  7. Requesting that the operations carried out pursuant to subparagraphs (d) and (e) be notified to the third parties to whom your personal data has been transferred,
  8. Objecting to the occurrence of a result against you through analysis of processed data exclusively by automatic systems,
  9. Requesting compensation for damage suffered due to unlawful processing of your personal data

8. Personal Data Processing Period

Your personal data will be processed in accordance with the periods mandated by the relevant personal data protection legislation, including the KVKK, and other legislation, and for as long as the legitimate purposes set forth above remain in effect.

Deletion of TUS/DHY and study duration data collected from users for the correct calculation of statistical data, TUS/DHY preference simulations, and stopwatch data in Plexia modules is not possible even upon user request, and such data is anonymized and used in statistical calculations.

In addition, Plexia may retain personal data for the periods determined under the relevant legislation, limited to the purpose of being able to make the necessary defenses within the scope of any dispute that may arise between Plexia and the user.

9. Data Security Measures and Commitments

Plexia undertakes under the conditions set forth in the relevant legislation or expressed in this policy:

  • That personal data is not processed unlawfully,
  • That personal data is not accessed unlawfully,
  • To take the necessary technical and administrative measures to ensure an appropriate level of security for the preservation of personal data and to have the necessary audits conducted. Plexia may not disclose the personal data it obtains about the user to others in violation of this plexia.ai Personal Data Processing Information and Privacy Policy and the provisions of the Law, and may not use it for purposes other than the processing purpose.

When links are provided to other applications through the site, Plexia does not bear any responsibility for the privacy and personal data protection and processing policies and contents of such applications.

10. Updating Your Personal Data and Your Right to Apply

As Plexia, we have an obligation to ensure that your processed personal data is accurate and up to date under the Turkish Personal Data Protection Law (Law No. 6698). Within this framework, we ask you to contact us through the communication channels in our contact section on plexia.ai so that we can update your information when it changes. You may also apply to us by contacting us in the same way when you wish to exercise the rights we have stated above. As Plexia, we undertake to make the necessary updates following any changes that may be made regarding personal data in the legislation. Plexia may change the provisions of the plexia.ai Personal Data Processing Information and Privacy Policy at any time. The current policy enters into force on the date it is presented to the user by any means.

Complaints to be made by our users whose personal data is processed by Plexia will be responded to and concluded by Plexia as soon as possible and within 30 days at the latest. However, in the event that additional costs arise, Plexia reserves the right to request a fee from you in accordance with the tariff to be determined by the Personal Data Protection Board.

Our users may submit their requests and complaints to plexia.ai in accordance with the Turkish Personal Data Protection Law (Law No. 6698) and the relevant legislation. In this context, you may submit your requests regarding the rights listed under "7. Your Rights Regarding Your Personal Data" to Plexia using the methods specified below, together with documents identifying your identity.

To our postal address below, which may be updated over time, either in person with a wet signature or through a notary,

Address: Bahçelievler Mah. 319. Cad. E Blok (Ankara Teknokent) No: 35 E- İç Kapı No: B22- GÖLBAŞI. / ANKARA (Ankara Ticaret Sicili No: 411619, Mersis No: 0733044948400001)

(ii) By email to be sent to us from the email address you have previously notified us of and which is registered in our system
Email address: info@plexia.ai

(iii) Other methods that may be determined by the Personal Data Protection Authority in the future.