Data Protection - Astradevs

PRIVACY AND PERSONAL DATA PROTECTION POLICY

Last Updated: 02.06.2026

1. Data Controller

This Privacy Policy applies to the personal data processed by Astradevs LTD, registered in London, United Kingdom (and all its platforms and products, including "Pikwel"; hereinafter referred to as the "Company" or "We"). As a global technology and software studio, we act as the "Data Controller" within the scope of the General Data Protection Regulation (GDPR) of the European Union and in accordance with the Law on the Protection of Personal Data No. 6698 (KVKK).

2. Personal Data Processed

Depending on your interaction with our website, our B2B platform (Pikwel), and our services, we may collect and process personal data in the following categories:

Identity Information: Name, surname, job title, and position details.
Contact Information: Email address, phone number, and corporate address.
Usage and Technical Data: IP address, browser type, device information, cookie data, geographic location data, and system logs.
Commercial and Transaction Data: Company registration details, B2B interaction history, RFQ (Request for Quotation) records, and invoice information.

3. Purposes of Processing and Legal Grounds

Your personal data is processed lawfully for the following purposes in accordance with Article 6 of GDPR and Article 5 of KVKK:

To provide, maintain, and optimize our B2B ecosystem, platform features, and software services.
To manage dealer, distributor, and supplier networks end-to-end on a local and global scale.
To carry out necessary commercial operations, billing, and contract processes.
To increase and optimize the digital visibility of products through AI-powered integrations (e.g., Google Merchant Center).
To fulfill legal obligations arising from the legislation of the United Kingdom, Turkey, and international regulations.

4. International Data Transfer

Since Astradevs LTD operates globally and our infrastructure services may be hosted on secure international cloud servers (e.g., AWS, Google Cloud), your personal data may be transferred across international borders. These transfers are carried out under strict security measures, in full compliance with the Standard Contractual Clauses (SCCs) approved by the European Commission and the cross-border data transfer regulations of the KVKK.

5. Data Retention Period

Your personal data is stored in our secure systems only for the period necessary to achieve the purposes specified in this policy or in compliance with legal retention obligations (usually 10 years from the termination of the commercial contract).

6. Your Rights (KVKK & GDPR)

Under global and local legislation, you have the following legal rights over your data:

Information and Access: To learn whether your personal data is being processed and to request a copy.
Rectification: To request the correction of incomplete or inaccurately processed data.
Erasure ("Right to be Forgotten"): To request the complete deletion of your data from our systems under certain conditions.
Objection and Restriction: To object to the processing of your data or direct marketing activities / to request the restriction of processing.
Data Portability: To request the transfer of your data to another provider in a structured and commonly used format.