1. Legal notice (Aviso legal)
Information about the owner of this site, as required by Article 10 of Spain's Law 34/2002 on Information Society Services and Electronic Commerce (LSSI):
- Site owner
- Hüseyin Türk (CREXA Consulting)
- NIF
- Y4009636Z
- Address
- Calle Geminis 37, 28130 Valdeolmos-Alalpardo, Madrid, Spain
- Email
- info@crexaconsulting.com
- Phone / WhatsApp
- +34 676 343 902
- Website
- www.crexaconsulting.com
The content of this site is for general information only and does not replace advice tailored to you. Texts, images and designs may not be copied without permission. We are not responsible for the content of external links on this site. Disputes relating to this site are governed by Spanish law.
2. Privacy policy
This section is the privacy notice prepared under the EU General Data Protection Regulation (GDPR, 2016/679), Spain's Organic Law 3/2018 on the Protection of Personal Data (LOPDGDD) and Turkey's Law No. 6698 on the Protection of Personal Data (KVKK).
Data controller
Hüseyin Türk (CREXA Consulting), NIF Y4009636Z, Calle Geminis 37, 28130 Valdeolmos-Alalpardo, Madrid, Spain · info@crexaconsulting.com
What data do we process?
- The information you give in the consultation form: full name, company name, industry, number of employees, the program you use, email address and the description you write.
- The answers you select in the assessment, if you choose to send the form.
- The information you share when you write to us by email or WhatsApp.
We do not accept files through the website. If documents are needed, they are shared through a secure channel of your choice after a non-disclosure agreement (NDA) has been signed.
Legal Basis and Purpose
- To assess your request, contact you and schedule the initial consultation: pre-contractual steps (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)) and the consent you give in the form (GDPR Art. 6(1)(a); KVKK Art. 5(1)).
- If you become our client, to perform the contract and invoice: performance of the contract and legal obligations (GDPR Art. 6(1)(b) and 6(1)(c); KVKK Art. 5(2)(c) and 5(2)(ç)).
We do not add your data to marketing lists, and we do not use it for automated decision-making or profiling. The assessment result is shown for your information only.
How long do we keep it?
Until your request is concluded. If no business relationship follows, the data is deleted within 1 month at the latest once this is clear. If you become our client, the data is kept for the duration of the contract and for the retention periods required by tax and commercial law.
Who is the data shared with?
Data is not sold to third parties or shared for marketing purposes. It is processed on our behalf only by the providers needed to deliver the service:
- Hosting: Hostinger International Ltd. (European Union).
- Email service provider.
- If you write to us on WhatsApp, your messages pass through the WhatsApp (Meta) infrastructure and are subject to its privacy policy.
International transfers
Because the data controller is based in Spain, data sent from Turkey is processed within the European Union (KVKK Art. 9). Your consent in the form also covers this transfer.
Security
The site runs over an encrypted connection (SSL), only authorised people can access the data, and no files are accepted through the site.
3. Cookie policy
This site currently uses no analytics, advertising or tracking cookies. Only cookies and browser storage that are technically necessary for the site to work (for example, your language preference) may be used. No consent is required for these (LSSI Art. 22.2).
If an analytics or similar tool is added in the future, this section will be updated and a cookie banner asking for your consent will be shown when you enter the site. You can delete or block cookies at any time in your browser settings.
4. Your rights
- GDPR (Art. 15–22): to access your data, to request its correction or deletion, to request restriction of processing, to data portability, to object to processing and to withdraw your consent at any time.
- KVKK (Art. 11): to learn whether your data is processed, to request information, to learn the purpose and the recipients, to request correction or deletion, to object and to claim compensation for damages.
You can send your requests to info@crexaconsulting.com. Requests are answered within 30 days at the latest; additional information may be requested to verify your identity.
You may also lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) or, in Turkey, with the Personal Data Protection Authority (www.kvkk.gov.tr).
Last updated: 25 October 2026.