Privacy at Falcon X

These privacy principles have been prepared by Falcon X MMC to determine Falcon X's responsibilities regarding privacy. The following articles contain the rules for information collection and distribution on the falconx.az website.

We will use your IP address to troubleshoot problems on our servers and to manage our website. Your IP address will be used to identify you and your shopping cart and to collect open demographic information.

Falcon X does not control or censor information that users send or publish through its services. Users are themselves responsible for the legal consequences of activities they carry out while using Falcon X services.

In the registration form for our site's customer database, our users must specify all requested information, such as contact details (name, address, phone, email address, etc.). The contact information we obtain on this form is used by us in domain name information for our users' transactions, in emergencies, and for the delivery of your invoice.

Our users can have their records deleted from our system upon their request.

Financial information obtained will be used to collect the fee for purchased products and services and in other necessary cases. Personal information will be used to verify the person's identity during user logins to the system and in other necessary cases. Statistical information and profile information are also collected within our site. This information can be used in all required cases. This information will be used to monitor visitor activity and to provide personalized content.

There are also links to other sites within our site. Our website www.falcox.az is not responsible for the privacy policies and content of other sites.

Security at Falcon X

There are security measures applied by our company on our site to prevent information loss, unauthorized use of information, and unauthorized modification. These security measures are as follows;

Thanks to credit card collection with SSL Security Certificate, your credit card information is transmitted to our bank encrypted via Secure Socket Layer. 2. Your credit card number is absolutely not recorded. We also do not know the card number used only at the time of your transaction. Even though this transaction between you and our bank is through our site, during the transaction your credit card is a secret between you and our bank.
Our site operates with Microsoft Windows Server technology, which is a world standard. The latest known protections have been installed and are constantly monitored to prevent any malfunction.
Last Revision Date: 06.11.2018
Correction / Update
Our users have the right to change all their information registered on our site whenever they wish.
Confidentiality Agreement

CONFIDENTIAL INFORMATION means ALL INFORMATION disclosed by one Party or the employees of the relevant Party on behalf of the relevant Party to the other Party and/or the employees of the other Party before or after the date of signing this Agreement, in writing and/or orally and/or via the internet and/or in soft environment for the purpose of implementing this Agreement, and/or obtained by the other Party, the employees of the other Party; including but not limited to: the relevant Party's customer information, shopping information, sales information, service information, product information, payment information, account information, bank information, financial models, simulations, personnel information, work and service information, pricing information, operating methods, ideas, inventions, know-how, trademarks, logos, patents, software, source codes, intellectual and industrial property rights, design rights, trade secrets, technical processes, formulas, plans, projects, licenses and permits, drawings, layouts, models, projections, business plans, market opportunities, reports or data prepared by the relevant Party or on its behalf by a third party; ALL INFORMATION disclosed by the Parties to each other through any means, and/or all information obtained by one Party about the other Party; all correspondence, conversations or meetings between the Parties and all information exchanged in writing and orally; all service analyses, compilations, works, proposals and other documents prepared by both Parties; all commercial agreements or contracts concluded between the Parties, contracts involving the exchange of confidential information; and, without limitation to the above, any information and/or documents.

The Parties unconditionally acknowledge that after the conclusion of this Agreement, they have disclosed all necessary confidential information to each other completely of their own free will and acceptance.

Each Party;

Each Party undertakes to absolutely keep all information private and confidential, not to use it for any reason, not to use the Confidential Information for any reason, directly or indirectly for itself or for any third natural and/or legal persons and organizations, not to permit its use, not to disclose the Confidential Information to any third natural and/or legal persons, firms, agencies or institutions, not to report, publish or disclose it, to take all necessary measures in this regard, not to copy or reproduce any part of the Confidential Information or to transfer/provide the original/reproduced versions to another third natural and/or legal party or organizations, not to disclose Confidential Information to third Natural and/or Legal Persons and organizations partially or fully, to notify its employees and managers who need to know the Confidential Information in accordance with the contract about the confidential nature of the Confidential Information and the necessity of keeping it confidential, and to ensure their commitment, and that they are also directly responsible under this confidentiality agreement, and that they have warned them about this, to apply security measures and care to the other Party's Confidential Information as to its own confidential information and information that is intellectual property, REGARDING CONFIDENTIALITY AND PROTECTION OF PERSONAL DATA, they will fully and completely abide by and comply with all matters and responsibilities specified in the Personal Data Protection Law, and otherwise the party at fault will be responsible for the occurred and/or possible damage, unconditionally and irrevocably undertakes
Last Revision Date: 01.01.2026

The Company accepts and undertakes to show the same care in protecting the Customer's Confidential Information as in protecting its own confidential information. The Company also warns its workers and subordinate employees about the confidentiality of information.

Personal Data Protection Law

Purpose and limitations by instructions
Within the scope of the Agreement, the Parties, depending on the processes, may be in the position of "data controller" or "data processor". In cases where one of the Parties processes Personal Data on behalf of the other Party, the relevant Party will be considered as a "data processor" within the scope of the Personal Data Protection Law No. 998-IIIQ ("Law"). In this case, the said Party is obliged to process Personal Data solely in accordance with the instructions of the other Party and cannot carry out any data processing activity outside the instructions and/or on its own behalf.

The Party transferring data to the data controller and data processor and/or transferring Personal Data to a third party undertakes that the necessary explicit and informed consent has been obtained from the relevant data subjects within the scope of the Law, and that in this context, the necessary information has been provided to the relevant data subjects within the scope of Article 10 of the Law.

Personal Data may be processed by the party to whom the data is transferred solely for the purposes for which it was transferred to it. Any processing of Personal Data outside the mentioned scope is subject to the written approval of the party transferring the data.

In case of using third-party services in matters of storage and processing of Personal Data and, accordingly, if transfer of Personal Data domestically or abroad is in question, necessary contracts will be concluded with the relevant third parties in line with the approval of the party transferring the Personal Data to ensure compliance with the Law and other applicable legislation.

Personal Data transferred during the term of the Agreement will be deleted or destroyed in accordance with the relevant legislation together with the termination of the service relationship between the Parties, unless a separate legal/contractual relationship is established with the relevant data subject. If any of the Parties has a legal obligation to store Personal Data, the party obliged to store Personal Data may store Personal Data for the period and purposes required within the scope of the relevant legislation.

Data Security
The Parties are obliged to take the measures prescribed by the legislation to prevent unauthorized access, processing and use of Personal Data by third parties or their own personnel outside the purpose of their transfer. In this context, each of the Parties declares, accepts and undertakes that it will fully and properly fulfill all obligations foreseen by the Law, relevant legislation and the Personal Data Protection Board, and otherwise will be responsible for all occurred and/or possible damage.

Any dispute that may arise on this matter will be attempted to be resolved through negotiation between the Parties; if this is not possible, the Courts and Enforcement Offices of Azerbaijan / Baku will have exclusive jurisdiction. This Addendum Agreement is governed by the law of Azerbaijan.

Is responsible for ensuring the secure transfer of Personal Data to a third party in accordance with the provision of clause 1.1 of this Agreement.

Implementation of Legislative Changes
If any changes or updates within the mentioned regulations necessitate a change in the Parties' processes related to the processing of Personal Data, the relevant Party is obliged to complete such change at the latest before the relevant new/updated regulation enters into force.

If changes in the applicable legislation require amendment of this Agreement, the Parties accept, declare and undertake that they will make reasonable effort for such changes to be made in the shortest time. However, if the Agreement provision requiring amendment is not acted upon by the Parties within the maximum period deemed appropriate in the relevant legislation for this matter, it will be applied in accordance with the new/updated legislation as of the effective date of the new/updated legal regulation.

RIGHTS OF THE PERSONAL DATA SUBJECT AS THE DATA SUBJECT WITHIN THE SCOPE OF LAW NO. 998-IIIQ
Within the scope of articles 998-IIIQ, everyone as a data subject has the right to apply to the data controller determined by Falcon X on the following matters:

To learn whether personal data is processed,
To request information if personal data has been processed,
To learn the purpose of processing personal data and whether they are used in accordance with this purpose,
To know the third parties to whom personal data has been transferred domestically or abroad,
To request correction of personal data if they have been processed incompletely or inaccurately,
To request deletion or destruction of personal data within the framework foreseen if the reasons requiring their processing disappear, even though they have been processed in accordance with the provisions of this Law and other relevant laws,
To request notification to third parties to whom personal data has been transferred of the actions taken pursuant to clauses 5 and 6,
To object to a result that arises against the person as a result of the analysis of the processed data solely through automated systems,
To request compensation for damage in case of damage due to unlawful processing of personal data.
Within the scope of the Communiqué on the Application Procedure and Principles to the Data Controller of article 998-IIIQ; applications regarding these rights to our company as the data controller must be transmitted to us in writing or by other methods determined by the Personal Data Protection Board ("Board").

The personal data subject "Data Subject" will be able to inform Falcon X of its rights and requests mentioned in clause D. In this context, the data subject can apply in order to use all other rights it has in accordance with the articles of the Personal Data Protection Law 998-IIIQ,

• By personal application of the applicant,

• By checking the "I have read the Privacy Rules" box when registering for Falcon X,

• By mail with a signed declaration attached,

• Through a notary,

By filling out the 998-IIIQ Data Subject Request Form and submitting via email to info@falconx.az with a secure electronic signature defined in the name of the applicant, proving their identity and interest.

Last Revision Date: 01.01.2026

This privacy policy describes the procedures for the collection, storage, and use of personal data on the website www.falconx.az. By accessing and using the website www.falconx.az, you indicate your consent to the collection, use, and disclosure of your personal data as described in this privacy policy.

The collection, storage, and use of personal data on the www.falconx.az website are carried out in accordance with the legislation of the Republic of Azerbaijan and the international treaties to which the Republic of Azerbaijan is a party. The priority of these legal frameworks provides a reliable basis for preserving the website's functionality.

It is important to us that you are informed about your rights and choices regarding your data. To learn more about how your personal data is managed, you can read the information below:

1. Data We Collect
The data we collect is essential for effectively presenting our services to you. Below is information about the data we collect and how we obtain it:

• Voluntarily Provided Data: We collect personal data that you voluntarily provide when showing interest in our services and products.

• Online Activities: Data is collected while you are active on the www.falconx.az site or when you contact us for various reasons.

• Contextual Dependency: The collected data is based on the way you contact us, the choices you make, and the specific products and functions you use on the www.falconx.az site.

2. How We Use Your Data
The use of the data we collect is based on the specific services you engage with, how you interact with them, and the choices you share with us. We use your data for the following purposes:

• To provide services and personalize your experience;

• For research and development purposes;

• To communicate with you about services;

• To respond to your inquiries and resolve complaints.

3. Sharing Your Data
Taking legal requirements into account, we may share your personal data with affiliated companies, suppliers acting on our behalf, partners, developers, or other persons at your instruction. We do not disclose your personal data to third parties for their independent trade and marketing purposes.

4. Cookies and Similar Technologies
We may resort to collecting and storing data using "Cookies" and similar technologies. These technologies help to better understand user behavior, combat security threats and fraud. They also allow for evaluating which parts of our site users visit and the effectiveness of searches.

5. Third-Party Websites
The www.falconx.az site may contain links to other websites, online services, and mobile applications. We cannot guarantee the security and privacy of the information you provide to these third parties. The personal data you provide to them is not covered by this privacy policy.

6. Data Protection
As the Ministry of Labor and Social Protection of Population of the Republic of Azerbaijan, we are committed to protecting your personal data with organizational, technological, and physical security measures. This commitment considers the nature of personal data, the specific processing activities undertaken, and the potential risks. We continuously develop and improve these protective measures, our goal is to ensure the protection of your personal data.

7. Data Retention
The retention period for the data we collect is based on the type of data and our specific needs. We retain your personal data only for the period necessary to fulfill the purposes stated in this privacy policy.

8. Updates to This Policy
We may update this privacy policy from time to time. The updated version will be presented with the "Updated" date indicated.

9. Contact
If you have questions about this policy, please contact us: ____________