B2B Apex Portal

Data Controller Information

For full data controller information, please see our Imprint page

1. What Data We Collect

Company Data:
Name, tax number, address, phone, email, logo, documents.
Purpose: To create a company profile that is visible to other companies on the platform.
User Data:
Email, password (hashed), language preference.
Purpose: To create your user account, enable login, and remember your language preference.
Activity Data:
Products, messages, connections, favorites, contributions, ratings.
Purpose: To enable platform features such as listing products, sending messages, connecting with companies, managing favorites, processing contributions, and receiving ratings.

2. Legal Basis (GDPR Article 6 & Turkish Law No. 6698)

Contract Performance:
Company registration, product management, messaging.
Legitimate Interest:
Platform security, analytics, fraud prevention.
Explicit Consent:
Cookies, email visibility settings, rating display.
Legal Obligation:
Tax records, fraud controls.

3. How We Use Your Data

Display company profile to other businesses
Enable messaging, connections and offers between businesses
Process voluntary contributions and manage premium/discount/featured requests

Improve platform security and user experience
We DO NOT sell your data to third parties
We DO NOT share your data with advertisers

4. Data Retention Period

Your data is stored as long as your company account is active. After deletion, anonymized data may be retained for statistical purposes.

5. Your Rights (GDPR & Turkish Law)

You have the following rights:

Access your data
Correct inaccurate data
Request deletion (unless legally required to retain)

Object to processing
Data portability
Lodge a complaint with supervisory authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority:

Türkiye: Personal Data Protection Authority (KVKK) — www.kvkk.gov.tr
EU/EEA: Your national Data Protection Authority (DPA)

6. Data Security

We use SSL encryption, password hashing, and regular security audits. Your data is stored on secure servers in Germany (EU).

7. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours, in accordance with GDPR Article 33-34 and Turkish Law No. 6698 Article 12.

8. Third-Party Services

Our platform is hosted on secure servers in Germany (EU).
Voluntary contributions are processed via bank transfer (no payment data is stored on our platform)
Cloudflare Turnstile (used for security) may transfer technical data (IP address, browser signals) to the United States. Cloudflare complies with the EU-US Data Privacy Framework and Standard Contractual Clauses (SCCs).

For detailed information about cookies and how we use them, please see our Cookie Policy

9. Children's Data

Our platform is intended for businesses only. We do not knowingly collect data from individuals under the age of 18.

Cloudflare Turnstile

This website uses Cloudflare Turnstile to protect against spam and automated abuse. Turnstile analyzes technical signals (such as browser characteristics, IP address, and interaction behavior) to determine whether a visitor is a human or a bot. This analysis is performed by Cloudflare, Inc. in accordance with the Cloudflare Turnstile Privacy Addendum. For more information, please see the Cloudflare Privacy Policy.