General and privacy
Customer and Order Data Protection Notice
A privacy notice covering quotations, customer accounts, orders, payments and service delivery.
Data controller
The data controller is ORVIXA BILISIM TEKNOLOJI TICARET LIMITED SIRKETI ("Orvixa"). Requests may be sent to info@orvixa.com or Korkutreis Mah., Sezenler Cad., Güneş Apt. No: 1, İç Kapı No: 15, Çankaya, Ankara, Türkiye. MERSIS: 0648177473300001.
Transaction scope
Identity, contact, company or billing, address, order, agreement, payment result, support and delivery records are processed to establish and fulfil the order, collect payment and issue invoices, provide customer service, ensure security, maintain legal records and manage disputes. Full card data is not stored in Orvixa systems; the payment provider processes it within its own role.
Payment providers and transaction security
If enabled at checkout, the order number, amount, currency, full name, contact details and limited information necessary for billing or delivery may be shared with iyzico or Garanti BBVA. Card numbers, expiry dates and security codes are not sent to Orvixa servers or stored in its database. Orvixa retains only provider references, verified payment status, limited error codes, amounts and security or audit records.
- Purpose: payment collection, 3D Secure verification, refunds or cancellations and reconciliation
- Legal grounds: establishing or performing the agreement, legal obligations and establishing, exercising or protecting a right
- Retention: payment and audit records are limited to the applicable financial or commercial retention plan; Orvixa does not retain card verification data
Recipients
Data may be transferred, limited to the purpose, to payment providers, accounting or electronic-document providers, hosting, delivery and communication providers and, where necessary, legal advisers and competent authorities. Each supplier's role is assessed contractually according to whether it acts as a processor or a separate controller.
Order evidence
Pre-contract information, agreement version, content summary, hash, order amount and acceptance time are retained in an immutable order record as dispute evidence. A privacy-notice record does not replace separately required agreement acceptance or marketing consent.
Data subject rights
Data subjects may exercise rights under applicable personal-data legislation to obtain information, request correction, deletion or destruction, object to processing and seek compensation for harm. Identity verification may be required according to the request; unnecessary copies of identity documents are not requested.
Requests may be sent to info@orvixa.com or Korkutreis Mah., Sezenler Cad., Güneş Apt. No: 1, İç Kapı No: 15, Çankaya, Ankara, Türkiye.