Skip to content
OxKinder

Privacy Policy

How personal data of oxkinder.com visitors is processed, who it is shared with, and the rights you have.

Last updated:

What this notice covers, and what it does not

This notice covers the oxkinder.com marketing site only: the data processed when you visit the site and when you fill in the demo or trial form.

Children, parent and staff data held inside the OxKinder software is NOT covered here. For that data the school using the software is the data controller; we hold it on the school's behalf and on its instructions, as a data processor. The split of roles is set out in the Terms of Service and Subscription Agreement.

Data controller

Under Turkish Personal Data Protection Law No. 6698 (KVKK), and where it applies the GDPR, the controller for the personal data processed on this site is the following.

Seller / data controller
Muhammed Bilal Cinviz
Trading name
OxForTech
Address
Cumhuriyet Mah. Fatih Sultan Mehmet Blv. Cadde 224, A Blok No: 41 A/A, Nilüfer / Bursa
Telephone
0850 840 95 45
Email
merhaba@oxkinder.com
Tax office
Nilüfer Vergi Dairesi
Tax / national ID number
2110800102

What data we process

You do not need to give us any personal data simply to read this site. Data is processed in three situations only:

1. When you fill in the demo or trial form. The fields you enter: school name, your full name, phone number, email address, city, your role at the school, your student count and any message you add. Alongside these we record the date and time of the request and which language you filled the form in; the language is recorded so we know which language to reply in.

2. When you visit the site. As on any web server, our hosting provider's server logs technically record your IP address, browser information and the time of the request. These logs are not used for marketing, no profiling is carried out, and we do not copy them into a separate database.

3. When you email us. If you write to merhaba@oxkinder.com, the address you write from, your name and everything in your message reaches us and is kept in our inbox. That is a forwarding address: mail passes through Cloudflare and lands in our Google (Gmail) inbox.

This site uses no cookies, writes nothing to your browser and runs no analytics or advertising tracker. The Cookie Policy page sets this out in detail.

Why we process it, and on what legal basis

  • To reply to your demo or trial request, prepare a quote and get in touch about setup (KVKK art. 5/2-(c): directly related to the conclusion or performance of a contract; GDPR art. 6/1-(b))
  • To keep a record of our correspondence and follow up on your request (KVKK art. 5/2-(f): legitimate interest; GDPR art. 6/1-(f))
  • Server logging, system security and prevention of abuse (KVKK art. 5/2-(ç) and 5/2-(f))
  • To meet retention and disclosure obligations arising from law (KVKK art. 5/2-(a) and (ç))

We do not sell, rent or pass on your data to third parties as a marketing list.

Who we share it with

Your data is shared only to the extent needed to run the service, and only with the following:

  • Our hosting and infrastructure provider DigitalOcean: the servers that run the site and the form endpoint, in the Frankfurt (Germany) region
  • Our email delivery provider Resend: the demo form you submit is sent to our inbox as an email through this service; its sending servers are in Ireland, within the European Union
  • Our email routing provider Cloudflare: mail you send to merhaba@oxkinder.com passes through this service on its way to us
  • Google (Gmail), which hosts our inbox: forwarded mail is stored on that provider's servers
  • Competent public authorities on request, only to the extent the law requires

If you click the WhatsApp link on the site you are taken to WhatsApp (Meta), and from that point WhatsApp's own privacy policy applies. We send no data about you with that redirect; only a pre-written message is carried over.

Transfers outside Türkiye

Our servers run on DigitalOcean in the Frankfurt (Germany) region, within the European Union. Your demo form data and the server logs are therefore processed outside Türkiye, within the European Union.

If you email us the position is different, and we want to say so plainly: your message passes through Cloudflare and lands in our Google (Gmail) inbox. That provider's servers are spread around the world and may sit outside the European Union. If you would rather your correspondence were not processed abroad, you can reach us by phone or WhatsApp instead.

This transfer is made under KVKK art. 9. Its basis is that the transfer is necessary in order to respond to your request, and that adequate safeguards for the protection of the data exist in the destination country. If you would rather not have your data processed abroad, you can contact us directly by phone or WhatsApp instead of using the form.

How long we keep it

  • If your demo or trial request does not become a subscription: no more than 2 years from the date of the request, so the conversation can be picked up again later. If you want it deleted sooner, we delete it on request.
  • If it becomes a subscription: for the duration of the contractual relationship, and afterwards for the limitation and retention periods set out in applicable law.
  • Server logs: for as long as our hosting provider technically retains them; we do not archive these separately.
  • Email correspondence: kept in our inbox for the same period as demo and trial requests. We delete it on request.

Your rights

Under KVKK art. 11, and the corresponding GDPR provisions where they apply, you may apply to the data controller to:

  • Learn whether your personal data is being processed, and request information if it is
  • Learn the purpose of processing and whether it is used in line with that purpose
  • Know the third parties to whom it is transferred, in Türkiye or abroad
  • Request correction if it is incomplete or inaccurate
  • Request erasure or destruction under the conditions of KVKK art. 7
  • Request that correction, erasure or destruction be notified to third parties the data was transferred to
  • Object to an adverse outcome arising from analysis carried out solely by automated means
  • Claim compensation if you suffer damage because the data was processed unlawfully

You can send your application to the email or postal address given above. Applications are concluded free of charge within 30 days at the latest; where the process entails a separate cost, the fee set by the Board may be charged.

Security

The site and the form endpoint run over HTTPS. Demo form data is not written to a database on this site; it is passed straight to our communication tool. The marketing site has no access to the product database. That is a deliberate decision, so that no publicly reachable page opens a path to school data.

Changes

This notice may be updated. The date of the last update is shown at the top of the page. If a substantial change is made, schools with an active subscription are notified separately.