AreonX Privacy Policy

Purpose and Scope

This Privacy Policy sets out the privacy and security principles that apply to user information in the services offered by Magician of Meta Kripto Varlık Alım Satım Platformu A.Ş. (“AreonX” or the “Company”) through www.areonx.com and its mobile applications. The Policy applies together with the Framework Customer Agreement, the Privacy Notice on the Processing of Personal Data and the Cookie Disclosure Notice.

Principles and Commitments

AreonX protects the confidentiality of user information and respects personal rights. Access to information is restricted on a “need to know” basis and within the scope of an authorisation matrix. Appropriate technical and administrative security measures are applied to information systems. All processing is carried out in accordance with the legislation in force and internal policies and procedures.

Information Collected and Methods

In the course of providing the services, information may be collected in the categories set out in the Privacy Notice (identity and contact information, device and transaction security data, customer transaction data, financial data, cookie data and the like). Data is obtained through web and mobile channels, the call centre, written and electronic applications, record and log systems, and the verification and security checks required by law, by partly or fully automated means. Mobile device permissions (camera, notifications, location and the like) are used only for the relevant feature to work, in line with the user’s preferences.

At the identity verification (KYC) step, you are redirected to the verification platform operated by Amani Technologies Limited (“Amani”). Images of your identity document, your selfie photograph and the video call are captured directly on Amani’s own platform (the Amani Verify app or the Amani web page) and are not passed to AreonX; during this process Amani compares your selfie photograph with the photograph on your identity document. So that your verification session can be opened, AreonX sends Amani your name and surname, Turkish ID number, date of birth and email address, together with your telephone number, nationality and occupation where available. When verification is complete, Amani notifies AreonX of the verification and video call result. Amani processes this data on behalf of AreonX as a data processor. As Amani is headquartered in the United Arab Emirates, this data may be transferred abroad. Amani’s data processing principles are available at https://amani.ai/privacy-policy/.

To confirm that visitors using the live support service without logging in are human, and to protect the service against automated (bot) abuse, the Cloudflare Turnstile verification service provided by Cloudflare, Inc. is used. The verification is shown before a live support conversation starts, and during it your IP address, browser information (User-Agent) and technical information about your connection (TLS fingerprint) are processed by Cloudflare. This information is not used to identify you, profile you or show you advertising; it is used only to detect and block bot traffic and to improve Cloudflare’s bot detection capabilities, and it may be processed on Cloudflare’s servers located abroad. Users who are logged in are not shown this verification. Cloudflare’s data processing principles for Turnstile are available at https://www.cloudflare.com/turnstile-privacy-policy/.

Purposes of Use

Data is processed to create and operate accounts, for identity verification and security, to carry out order, transaction and support processes, to fulfil legal obligations and to improve service quality. Without the user’s explicit consent, no direct marketing activities beyond the service requested are carried out. Commercial messages are sent only to users who have given their consent, and this preference can be changed at any time.

Sharing

Information may be shared, to the extent necessary for the performance and security of the service, with infrastructure, operations and support providers, providers of identity verification and security services, financial institutions and the legal authorities. Apart from legal obligations and the cases set out in the Privacy Notice, no information is shared with third parties. Third parties are bound by contractual confidentiality and security obligations.

Security and Breach Notification

AreonX applies appropriate measures, including access control, encryption, logging, and network and application security. In the event of a security breach involving personal data, the users concerned and the competent authorities are notified in accordance with the legislation.

Third-Party Links

The platform may contain links to third-party sites. AreonX is not responsible for the content, security or privacy practices of those sites. Users should review the terms of the environments they are directed to separately.

Cookies and Online Tracking

Strictly necessary cookies are used for the service to work. Other cookies and similar technologies depend on your preferences. For details and management options, please see the Cookie Disclosure Notice.

Rights and Applications

Your rights under the KVKK (the Turkish Law on the Protection of Personal Data), such as access, rectification, erasure, objection and withdrawal of consent, are explained in the Privacy Notice. You can submit your requests through the following channels:

• KEP (registered electronic mail): [email protected]
• From your registered email address: [email protected]
• Postal address: Oğuzlar Mahallesi 1386. Cadde No:8/5 Balgat/Ankara

Applications are answered within 30 days at the latest.

Updates

The Policy may be updated in line with changes in practice and legislation. Updates take effect as soon as they are published, and the “Last updated” date is revised.

Language

This policy has been prepared in Turkish. In the event of any inconsistency with other language versions, the Turkish text prevails.

Acceptance

Users who continue to use the AreonX platform and channels declare that they have read and accept the provisions of this Privacy Policy, the Privacy Notice and the Cookie Disclosure Notice.