Tietosuojakäytäntö

1. General Information

This Privacy Policy explains how MACHEX LTD collects, uses and protects personal data on the Machex machinery marketplace, a brand owned by MACHEX LTD, for machinery and industrial equipment, spare parts, consumables and industrial services.

Personal data refers to any information that can be used to identify you directly or indirectly.

For more detailed information on how we process personal data, please refer to the full Privacy Policy below.

You can manage and update your cookie preferences at any time through your browser settings or via our cookie management tools.

Data Collection on the Platform

Who is responsible for data collection?

Data processing on the Machex platform is carried out by:

Machex is operated by MACHEX LTD, a company registered in England and Wales. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Company number: 17492975. Email: info@machex.com. www.machex.com.

The entity above is the data controller responsible for the collection and processing of personal data within the meaning of applicable data protection laws.

How Do We Collect Your Data?

We collect your personal data in the following ways:

Data You Provide

Your data is collected when you voluntarily provide it to us, for example when you:

• create an account
• publish a listing
• fill out a contact form
• communicate with other users via the platform

Automatically Collected Data

Other data is collected automatically by our systems when you access or use the Machex platform. This mainly includes technical data such as:

• browser type and version
• operating system
• IP address
• date and time of access
• pages visited

Technical data necessary to deliver and secure the platform may be processed when you access it. Optional usage analytics is collected only after you enable analytics in Cookie choices.

What Do We Use Your Data For?

We use your personal data for the following purposes:

• to ensure the proper operation and functionality of the platform
• to publish and manage listings
• to enable communication between users
• to improve our services and user experience
• to analyze user behavior for platform optimization
• to prevent fraud, misuse, and unauthorized activities

Your Rights Regarding Your Data

You have the right to:

• request access to your personal data
• obtain information about the origin, recipients, and purpose of processing
• request correction of inaccurate data
• request deletion of your data
• request restriction of processing
• object to data processing

You may exercise these rights at any time by contacting us at:

info@machex.com

Analytics and Cookie Preferences

Optional platform analytics is enabled only after your consent. It records information such as the page path, site domain, language, event type and time to help improve the platform.

You can enable or disable optional analytics using Cookie choices. Necessary account, security and consent-preference cookies remain available for the services you request.

Cookie names, purposes and storage periods are described at https://machex.com/legal/cookie-notice.

2. General Information and Mandatory Information

Data Protection

Machex takes the protection of your personal data very seriously.

We process personal data under the UK GDPR, the Data Protection Act 2018 and other applicable UK data protection rules. The EU GDPR also applies where its territorial scope is met. Turkish Law No. 6698 (KVKK) applies where its scope is met; the separate KVKK supplement explains that framework.

When you use the Machex platform, various types of personal data are collected. Personal data refers to any information that can be used to identify you directly or indirectly.

This Privacy Policy explains what data we collect, how we use it, and for what purposes.

Please note that data transmission over the Internet (e.g., communication by email) may have security vulnerabilities. Complete protection of data against access by third parties is not always possible.

Information About the Data Controller

The data controller responsible for processing personal data is:

Machex is operated by MACHEX LTD, a company registered in England and Wales. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Company number: 17492975. Email: info@machex.com. www.machex.com.

The data controller is the natural or legal person who determines the purposes and means of processing personal data.

Withdrawal of Consent

Where processing relies on consent, you may withdraw that consent at any time.

Contact info@machex.com to withdraw consent, or use Cookie choices to change optional analytics preferences.

The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Right to Lodge a Complaint

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a competent supervisory authority.

For processing subject to UK data protection law, you may complain to the Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint/. Where the EU GDPR applies, you may also complain to a competent EU supervisory authority, including in the Member State of your habitual residence, place of work or the alleged infringement. Rights to complain to other competent authorities under applicable law remain unaffected.

SSL / TLS Encryption

For security reasons and to protect the transmission of confidential content, the Machex platform uses SSL or TLS encryption.

You can recognize an encrypted connection by:

• the change from "http://" to "https://" in the browser address bar
• the connection-security information shown by your browser

Encryption helps protect data in transit. It does not eliminate every security risk.

Payment Security

If paid services are offered and payment data is required, such data is processed securely using encrypted connections.

Payment transactions via common payment methods are processed through secure and encrypted channels.

Payment and billing records may be processed where necessary for the paid service and applicable record-keeping obligations. Use only the payment channel presented during checkout; do not send full card details in listings or messages.

Right to Access, Restriction, and Deletion

Within the limits of applicable law, you have the right to:

• access your stored personal data
• obtain information about its origin, recipients, and purpose
• request correction, restriction, or deletion of your data

For any requests, please contact:

info@machex.com

Objection to Unsolicited Communications

The use of contact information published on the platform for sending unsolicited advertising or promotional material is strictly prohibited.

Machex reserves the right to take legal action in case of violations, including spam communications.

3. Data Collection on the Platform

Cookies

The Machex platform uses cookies to improve usability, performance, and security.

Cookies are small text files stored on your device by your browser. They do not harm your device and do not contain viruses.

We use:

• Short-lived cookies used for login transactions and account security
• Persistent cookies with defined expiry periods, including language and consent preferences

These cookies allow us to recognize your browser and improve your experience on subsequent visits.

You can configure your browser to:

• be notified when cookies are set
• allow cookies only in specific cases
• block cookies entirely
• automatically delete cookies when closing your browser

Please note that disabling cookies may limit certain functionalities of the platform.

Necessary cookies support services you request and platform security. Where GDPR applies, the legal basis depends on the purpose and may be contract performance or legitimate interests; any other applicable cookie rules also apply.

Optional analytics requires your consent. Cookie choices lets you reject it or withdraw consent. See https://machex.com/legal/cookie-notice for the current inventory and durations.

Server Log Files

We automatically collect and store technical information in server log files. This data is transmitted by your browser and may include:

• browser type and version
• operating system
• referring URL
• technical request and connection information
• date and time of access
• IP address

Technical records may be reviewed alongside relevant account or activity records where necessary to investigate security incidents, fraud or misuse.

Processing is based on Art. 6(1)(f) GDPR (legitimate interest) to ensure platform stability and security.

Contact Forms

If you contact us via forms or other communication tools, the information you provide (including contact details) will be stored to process your request and for follow-up questions.

Information may be accessed by authorised personnel and service providers where necessary to handle the request, or disclosed where required by law.

Processing is based on:

• Art. 6(1)(a) GDPR (consent)
• or Art. 6(1)(b) GDPR (pre-contractual measures)

You may withdraw your consent at any time.

User Registration

You may register on the Machex platform to access additional features such as publishing listings.

During registration:

• required fields must be completed accurately
• incomplete information may result in rejection

We use your email address to:

• manage your account
• notify you about important updates

Processing is based on:

• Art. 6(1)(b) GDPR (contract performance)
• or Art. 6(1)(a) GDPR (consent)

Account data is retained while needed to provide the service. After account closure, some records may be retained where necessary for legal obligations, disputes or security, and deleted or anonymised when those purposes no longer apply.

Processing of Customer and Contract Data

We process personal data only to the extent necessary to:

• establish and manage user accounts
• enable listing publication
• provide platform services

Processing is based on Art. 6(1)(b) GDPR (contract performance).

Data will be deleted after termination of the user relationship, unless legal retention obligations apply.

Data Transfer for Service Execution

Personal data may be shared with third parties only when necessary for:

• providing platform services
• processing payments
• fulfilling contractual obligations

No data is transferred for advertising purposes without your explicit consent.

Access to Personal Data

Access is limited to authorised personnel and service providers where needed to:

• improve platform services
• prevent fraud and abuse
• enhance user experience

All such processing is carried out in compliance with applicable data protection laws and with appropriate safeguards.

4. Platform Analytics

Consent-Based Analytics

Machex uses optional platform analytics to understand usage and improve its services. Analytics records may include event type, page path, site domain, language, listing reference and time.

• Analytics is enabled only after you grant consent in Cookie choices. You can withdraw that consent there at any time; this does not affect processing carried out before withdrawal.
• Necessary operational records, such as listing views, enquiries, offers and security records, also support the services requested by users. They are distinct from optional page analytics.

5. Email Communications

Service Notifications and Optional Communications

We use your email address to manage your account and send service-related notifications, such as messages, offers, listing decisions, payments and support updates. Available notification preferences can be managed in account settings.

If an optional newsletter or marketing subscription is offered, its purpose and consent choice will be shown when you subscribe.

No data will be shared with third parties for their own marketing purposes.

Legal Basis

Optional marketing communications rely on consent where required. Account and transaction notifications may instead be necessary for providing the service or meeting legal obligations.

You may withdraw your consent at any time by:

• using an unsubscribe option where provided
• contacting us directly

Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Data Retention

Your data will be stored:

• as long as you remain subscribed
• for as long as needed for the subscription, with limited suppression or consent records retained where necessary to respect your choice or meet legal obligations

Data stored for other purposes (e.g., account data) remains unaffected.

Email Service Providers

We may use third-party email service providers to manage and send communications.

These providers may process data on our behalf in accordance with data protection laws and contractual agreements.

Service providers may process contact details and delivery information to send platform notifications and handle delivery failures.

6. Service Providers and Data Transfers

General Information

Machex uses service providers for functions such as hosting, data storage, authentication, email delivery and platform security. Where you request an additional service, such as payment processing or inspection, relevant information may be shared to fulfil that request.

These services may process technical data such as:

• IP address
• browser information
• device data
• usage behavior

Processing is based on:

• Art. 6(1)(f) GDPR (legitimate interest)
• or Art. 6(1)(a) GDPR (consent) where required

Public Listings and User Communications

Listing content, photographs and profile details selected for public display may be visible to other visitors. Seller contact details are displayed according to the listing contact-visibility setting.

Messages, offers and transaction-room content are stored to support communication and the requested transaction workflow. They may be accessed by the relevant participants and authorised personnel where necessary for support, moderation, security or legal obligations.

• Do not include personal data in public listing descriptions or images unless you intend to publish it and are entitled to do so.

International Processing

Providers may process information outside your country. Where a transfer is subject to KVKK or GDPR restrictions, the applicable transfer requirements and safeguards must be met. You may contact info@machex.com for information about recipients and applicable safeguards.

Communication Tools

Email and messaging providers may process contact information and communication content to deliver platform-related services.

• send notifications
• manage customer communication
• provide platform-related updates

These services may process contact information such as:

• email address
• phone number

Payment Processing

If paid services are offered on the platform, payments may be processed via third-party providers.

These providers may process:

• payment details
• billing information

Billing and transaction records are retained only as needed for processing, record keeping and applicable legal obligations. Do not send full payment-card details through messages or public listings.

Data Processing Agreements

Where required, Machex enters into data processing agreements with third-party providers to ensure compliance with applicable data protection laws.

7. Additional GDPR Rights and Requests

Subject to the applicable conditions, you may request access, rectification, erasure, restriction and data portability, object to processing, and exercise rights concerning decisions based solely on automated processing. Consent can be withdrawn at any time without affecting earlier lawful processing.

Contact info@machex.com or use https://machex.com/legal/data-request. We normally respond within one month. Where a lawful extension is necessary, we explain it within that month. Requests are normally free; fees or refusal apply only where allowed by law.