Data protection notice

1. Data controller

Your personal data is processed by the company providing the service, acting as data controller. Its registered name, address and contact details are on the contact page.

This notice is written to meet the information duty under the Turkish Personal Data Protection Law (No. 6698) and, for data subjects in the European Union, the information duty under the GDPR.

2. Categories of data processed

• Identity: name; tax or identity number where required for invoicing.
• Contact: email address, phone number, billing address.
• Customer transactions: order, payment and service records.
• Security of processing: IP address, session records, request identifiers and system logs.
• Financial: payment amount, currency and the provider’s transaction reference. Card numbers are not processed.

3. Purposes and legal bases

Each purpose is listed with the legal basis it rests on. We do not use data for purposes outside this list.

• Formation and performance of the contract: opening the account, provisioning and renewing the service, providing support.
• Legal obligation: issuing invoices and retaining them for the period tax law requires.
• Legitimate interest: detecting fraud and abuse, infrastructure security, debugging.
• Consent: taken only for commercial electronic messages (marketing email) and withdrawable at any time.

4. How data is collected

Data is collected electronically through the registration form, the order and billing profile screens, support tickets, and the technical logs the system produces.

Payment data is collected directly by the payment provider; only the outcome and a reference number are passed to us.

5. Transfers

Data is shared only with the parties required to deliver the service and only as much as needed: the payment provider, the e-invoicing provider, the domain registry, the licence supplier and infrastructure providers.

Transfers to public authorities are made only on a properly made request and limited to its scope.

Where a transfer abroad is involved, the safeguards required by law are applied. We tell you in writing, before you buy, which region your data will be kept in.

6. Retention

Data is retained for as long as the purpose it was processed for requires. Records that tax law requires us to keep are retained for that period, and a deletion request cannot shorten it.

At the end of the period, data is deleted, destroyed or anonymised.

7. Your rights as a data subject

Under the applicable law you have the right to:

• Learn whether your personal data is processed and, if so, request information about it.
• Learn the purpose of processing and whether the data is used in line with that purpose.
• Know the third parties, at home or abroad, that the data is transferred to.
• Request correction of incomplete or inaccurate data.
• Request deletion or destruction of the data where the conditions are met.
• Request that correction, deletion and destruction be notified to the third parties the data was transferred to.
• Object to a result reached against you solely through automated analysis.
• Claim compensation if you suffer damage because of unlawful processing.

8. How to make a request

To exercise your rights, open a support ticket from your customer panel or write to the address on the contact page. Your request must contain enough information for us to verify your identity.

Requests are concluded within 30 days at the latest. If we cannot meet a request, we set out the reason in writing.

If your request is refused or goes unanswered, your right to complain to the competent supervisory authority is reserved.