crm360 · Brix Mühendislik
Privacy Policy
Last updated:
Your data and preferences
This policy explains personal data processing in crm360, operated by Brix Mühendislik. The application collects enquiries from Facebook and Instagram advertising forms associated with authorised Meta Pages and manages contact with prospective customers and permission-based email campaigns. CRM is an internal management application; you do not need to create an account to read this policy or request deletion.
Data controller and contact: Brix Mühendislik
Akçaburgaz Mah. 3006. Sk. No:21/8, 34522 Esenyurt, İstanbul, Türkiye
Privacy and deletion requests: ufuk@brix.tr
1. What information do we collect, and from where?
- Enquiry and contact information: The name, email, phone, company, request and other answers you share in a form. These come from Meta Lead Ads, direct contact or contact information transferred by an authorised administrator from Brix Work Requests records.
- Source of the enquiry: Meta lead, Page, form, ad and campaign identifiers; ad/campaign names where available and the submission date. This information allows us to understand which advertisement generated your enquiry.
- CRM records: Conversation status, administrator notes, list memberships, marketing permission and notes on its source, unsubscribe preferences and operation dates.
- Email records: Recipient and sender addresses, campaign content, sending and delivery results, bounces and complaints. If measurement is enabled, email opens and link clicks may also be recorded.
- Connection and security information: Meta access tokens supplied by authorised Page administrators, application connection settings, administrative action logs and technical error records. Prospective customers are not asked for these access credentials.
crm360 does not request your Facebook password or personal Facebook inbox. Do not share sensitive personal data, identity documents, payment card information or passwords in forms. File handling and customer portal activities in other Brix services are subject to the notices for the relevant service.
2. Purposes and legal grounds
We use your contact and enquiry information to assess your request, answer questions, contact you about the service or quotation you requested and follow the customer relationship. For processing directly related to establishing or performing a contract, the basis is KVKK Article 5/2(c); for protecting rights, 5/2(e); for legal obligations, 5/2(ç). Limited customer relationship and system security activities may rely on legitimate interests under 5/2(f), provided they do not harm your fundamental rights. Processing requiring explicit consent is carried out only with that consent.
Completing a Meta form alone does not constitute a marketing subscription. New Meta enquiries enter CRM without being treated as having granted marketing permission. Inclusion in an email campaign requires separately recorded permission. This policy is not a request for marketing permission.
3. Email preferences and measurement
Campaign emails are sent through Amazon Web Services’ Amazon SES service. You can use the unsubscribe link in marketing emails or write to ufuk@brix.tr. Unsubscribing does not delete all CRM records; you may submit a separate deletion request. Necessary communications about the service you requested are separate from a marketing subscription.
Enabled email measurement may generate open and click events through remote images and redirected links. These records are used to understand campaign performance and sending problems; email application privacy features mean they are not conclusive evidence that a message was read.
4. Who receives the data?
Brix personnel authorised for their duties access CRM data. Cloudflare provides application hosting and database infrastructure; AWS / Amazon SES provides email sending and delivery services; Meta provides advertising forms and authorised data transfers. Where necessary, limited information may be transferred to competent public authorities to meet legal obligations and to advisers needed to protect our rights. We do not sell enquiry data or share it for other businesses’ independent advertising lists.
These providers’ international infrastructure means data may also be processed outside Türkiye. International processing is subject to applicable data protection and transfer rules. You may contact us for information about the services used and transfers related to your request. Meta’s own platform activities are also subject to its privacy policy.
5. Retention and protection
Retention of enquiries and CRM records takes account of request follow-up, the ongoing customer relationship, necessary legal obligations and dispute periods. Data is deleted or anonymised when its purpose or valid legal grounds no longer apply. There is no single fixed automatic deletion period for all records; deletion requests are assessed according to the nature of the records. A minimal unsubscribe record may be kept where necessary to prevent further marketing messages.
CRM access is restricted to authorised administrator sessions. Meta connection secrets are stored encrypted, and the signatures of incoming Meta notifications are verified. Administrator actions are logged. Necessary session and security mechanisms for the management panel are separate from marketing permission.
6. Your rights and data deletion
Under KVKK, you have rights to learn whether your data is processed, request information, learn the purposes and transfers, seek correction or, where the conditions are met, erasure or destruction, request notification of relevant recipients, object to an adverse result based solely on automated assessment, and seek compensation for damage caused by unlawful processing.
To apply, write to ufuk@brix.tr or submit a written request to the address above. State the email/phone used in your enquiry and your request so that we can locate your record. Proportionate identity verification is performed where necessary. You will be informed of the outcome and any reasons requiring retention. Detailed steps: Data Deletion Request.
7. Policy updates
If the application’s data processing changes, this page and the update date will be revised. Changing this page alone is not sufficient for a use requiring new consent.