Be Next, Be Apex. Be The Next Apex.

About this Privacy Policy

This Privacy Policy explains how Next Apex Consulting (“Company”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal data in connection with the website nextapex.co, our services, business communications, events, marketing activities and recruitment processes.

Who we are and how to contact us

The data controller is Next Apex Consulting.

Registered address: [PLACEHOLDER: registered postal address]
Privacy contact: [PLACEHOLDER: privacy / DPO contact email]
Registered electronic mail / KEP address, if applicable: [PLACEHOLDER: registered electronic mail / kep address, if applicable]
Data controller representative, if applicable: [PLACEHOLDER: data controller representative, if applicable]

Questions about this Privacy Policy or the processing of personal data may be sent to Next Apex Consulting.

How we collect personal data

We may collect personal data:

directly from you when you contact us, submit a form, request information, use our services, attend an event, subscribe to communications or apply for a role;
automatically through the website and its security, logging, analytics and cookie technologies;
from publicly available sources and professional or social networks;
from clients, business partners, suppliers or other organisations where there is a lawful reason for them to provide the information; and
through recruitment agencies, references or other recruitment-related sources where applicable.

Categories of personal data we may process

Depending on the relationship and purpose, we may process:

identity and contact information, such as name, surname, business contact details and correspondence details;
professional and company information, such as employer, role, department, professional profile and business interests;
enquiry and communication information, including information you choose to provide in forms, emails, meetings or other communications;
technical and device information, such as IP address, browser, device, access time, log information and security records;
website usage, analytics, campaign and preference information where the relevant technology is enabled;
financial, invoicing or transaction information where required for a commercial relationship;
recruitment information, such as CV, employment history, qualifications, references and interview information; and
special categories of personal data only where this is necessary, lawful and supported by the required safeguards.

Please do not provide special-category or other sensitive personal data unless it is genuinely necessary for the relevant purpose. If you provide personal data about another person, you should ensure that you are authorised to do so and that the person has received the required privacy information.

Why we process personal data and our legal bases

We process personal data only where a lawful processing condition applies. Depending on the activity, the legal basis may include performance of or steps toward a contract, compliance with a legal obligation, establishment or protection of a right, legitimate interests that do not override the rights and freedoms of the individual, or explicit consent where required.

We may process personal data to:

respond to enquiries and provide requested information;
deliver, manage and improve professional services;
manage client, supplier, partner and other business relationships;
organise meetings, webinars, events or other activities;
operate, maintain, secure and troubleshoot the website and connected systems;
understand website performance and usage where analytics is lawfully enabled;
measure campaigns and improve communications where permitted;
send marketing communications where the required legal basis or consent exists;
recruit and assess candidates;
comply with legal, regulatory, accounting and record-keeping obligations; and
establish, exercise or defend legal claims and prevent misuse or fraud.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

Who we may share personal data with

We may share personal data only where necessary for a legitimate purpose and where an appropriate legal basis exists. Recipients may include:

authorised employees, contractors and team members of Next Apex Consulting;
hosting, cloud, email, form, CRM, security, analytics, communication and other technology providers;
accountants, auditors, lawyers, insurers and other professional advisers;
delivery partners, subcontractors or specialist service providers where their involvement is required for the relevant work;
recruitment agencies and recruitment service providers;
marketing or event service providers where permitted;
parties involved in a possible corporate transaction, restructuring, merger, investment or transfer; and
courts, regulators, public authorities or law-enforcement bodies where disclosure is required or permitted by law.

The actual provider and recipient list for this website and the company’s operations must be confirmed before publication: [PLACEHOLDER: the actual provider and recipient list for this website and the company’s operations must be confirmed before publication]

International transfers

Some service providers or recipients may process personal data outside Türkiye or another country in which the data was collected. Where an international transfer occurs, Next Apex Consulting will use a transfer method and safeguards permitted by the applicable law, including Article 9 of the KVKK where relevant.

Countries, recipients and transfer mechanisms to be confirmed: [PLACEHOLDER: countries, recipients and transfer mechanisms to be confirmed]

Cookies and similar technologies

The website may use cookies, pixels, local storage and similar technologies for essential functions and, where enabled, analytics, functionality, social-media or marketing purposes. Optional technologies will be activated only in accordance with the required consent or other lawful mechanism.

For details about categories, providers, durations and controls, see the Cookie Policy at nextapex.co/cookies and use the Cookie Preferences interface where available.

How long we keep personal data

We retain personal data only for as long as necessary for the purpose for which it was collected and for any applicable legal, contractual, accounting, security or dispute-resolution period. When retention is no longer required, data is deleted, destroyed or anonymised in accordance with applicable rules.

Indicative retention periods or criteria must be completed before publication:

Contact and enquiry records: [PLACEHOLDER: retention period]
Prospective-client communications: [PLACEHOLDER: retention period]
Client and engagement records: [PLACEHOLDER: retention period]
Recruitment records: [PLACEHOLDER: retention period]
Website and security logs: [PLACEHOLDER: retention period]
Analytics and campaign data: [PLACEHOLDER: retention period]
Consent and preference records: [PLACEHOLDER: retention period]

How we protect personal data

Next Apex Consulting applies appropriate technical and organisational measures designed to protect personal data against unauthorised access, unlawful processing, accidental loss, alteration, disclosure or destruction. Measures may include access controls, authentication, encryption where appropriate, backups, supplier controls, staff responsibilities, incident-response procedures and periodic review.

No internet transmission or storage method can be guaranteed to be completely secure. Security information published externally should not disclose details that could weaken the protection of systems or data.

Your data-protection rights

Subject to the conditions and limitations in applicable law, you may have the right to:

learn whether your personal data is being processed and request information about that processing;
learn the purposes of processing and whether data is used consistently with those purposes;
learn the recipients to whom personal data is transferred in Türkiye or abroad;
request correction of incomplete or inaccurate data;
request deletion or destruction where the legal conditions are met;
request that correction, deletion or destruction be notified to relevant recipients where required;
object to certain processing, including direct marketing and certain results produced solely by automated systems where applicable;
request restriction or portability where the applicable law provides those rights;
withdraw consent where processing is based on consent; and
request compensation where applicable law provides a right to compensation for unlawful processing.

How to exercise your rights

To exercise a data-protection right, contact Next Apex Consulting using one of the legally permitted application methods.

Postal address: [PLACEHOLDER: registered postal address]
KEP address: [PLACEHOLDER: kep address]
Email / electronic application method: [PLACEHOLDER: privacy / DPO contact email]
Other accepted method: [PLACEHOLDER: other accepted method]

We may request information reasonably necessary to verify identity and understand the request. Requests will be handled within the period required by applicable law.

Links to other websites

Our website may contain links to websites, platforms or services operated by third parties. Their privacy practices are governed by their own notices and policies. Next Apex Consulting is not responsible for the privacy or security practices of third-party websites merely because a link is provided.

Changes to this Privacy Policy

We may update this Privacy Policy when our services, website, processing activities, technologies or legal obligations change. The “Last updated” date will identify the current version. Where required, material changes will be communicated through an appropriate method before the relevant new processing begins.

Contact

For privacy questions or requests, contact:

Next Apex Consulting

Address: [PLACEHOLDER: registered postal address]
Email: [PLACEHOLDER: privacy / DPO contact email]
KEP: [PLACEHOLDER: kep]

Privacy policy