KVKK Disclosure Text

1. Identity of the Data Controller

DoğruHost, as a hosting and server services provider based in Kocaeli, Turkey, processes your personal data as the "Data Controller" within the scope of the Personal Data Protection Law No. 6698.

Contact: [email protected] | Phone: +90 850 308 39 75 (WhatsApp) | Address: Yavuz Sultan Selim Mah. Ali Yücel Sk. No:5/B D:12, Körfez / Kocaeli, Turkey

2. Personal Data Processed

The following categories of personal data are processed by DoğruHost:

Identity Data: Name, surname, Turkish ID number, tax identification number.

Contact Data: Email address, phone number, address information.

Customer Transaction Data: Order information, service usage records, support requests, billing information.

Financial Data: Bank account information, billing address, payment records. (Credit card information is not stored directly by us.)

Marketing Data: Campaign participation information, email newsletter subscription, communication preferences.

Transaction Security Data: IP address, log records, access logs, password information (hashed), two-factor authentication information.

Legal Process Data: Correspondence with judicial and administrative authorities, lawsuit and enforcement file information.

3. Purposes of Processing Personal Data

Your personal data is processed within the scope of personal data processing conditions specified in Articles 5 and 6 of the KVKK for the following purposes:

Provision and execution of hosting, server, domain registration and other information technology services.

Customer relationship management, execution of order and contract processes.

Issuing invoices, payment tracking and execution of financial transactions.

Provision of technical support and customer services.

Fulfillment of legal obligations within the scope of Internet Law No. 5651 and related legislation.

Fulfillment of invoice and financial document retention obligations within the scope of Tax Procedure Law No. 213.

Execution of information security processes, prevention of fraud and abuse.

Sending commercial electronic messages, campaign and promotion notifications with the explicit consent of the data subject.

Conducting statistical analyses to improve service quality.

Tracking and execution of legal processes.

4. Legal Grounds for Processing Personal Data

Your personal data is processed within the scope of the following legal grounds set forth in Article 5, paragraph 2 of the KVKK:

Explicitly provided by laws (Law No. 5651, Tax Procedure Law No. 213, Electronic Commerce Law No. 6563, etc.).

Directly related to the establishment or performance of a contract (service agreement, order transactions).

Necessary for the data controller to fulfill its legal obligation (tax, invoicing, legal notification obligations).

Made public by the data subject themselves.

Necessary for the establishment, exercise or protection of a right.

Necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Explicit consent of the data subject (marketing activities, sending commercial electronic messages).

5. Transfer of Personal Data

Your personal data may be transferred to the following recipient groups within the conditions specified in Articles 8 and 9 of the KVKK:

Business Partners: Data center operators, technical infrastructure providers, CDN service providers for service delivery purposes.

Payment Institutions: Banks and licensed payment institutions for the execution of payment transactions.

Domain Registration Organizations: ICANN and accredited domain registrars (within the scope of domain registration processes).

Authorized Public Institutions and Organizations: Courts, prosecution offices, BTK, MASAK and other authorized institutions as required by legal regulations.

Legal Advisors: For the execution of legal processes.

Your personal data will not be transferred to third parties beyond the purposes stated above and without your explicit consent.

Transfer of data abroad is carried out within the scope of Article 9 of the KVKK, to countries with adequate protection or in cases where the data controller has committed adequate protection in writing and the Personal Data Protection Board has granted permission.

6. Methods of Collecting Personal Data

Your personal data is collected through automatic and non-automatic methods through the following channels:

Electronically through the DoğruHost website and customer panel.

Through email, phone and live support channels.

Automatically through cookies and similar technologies.

Through payment service providers.

Through physical forms and contracts (if applicable).

7. Personal Data Retention Period

Your personal data is retained for the duration required by the processing purpose and during the statute of limitations periods prescribed in relevant legislation:

Commercial books and financial documents: 10 years pursuant to Tax Procedure Law No. 213.

Traffic data (log records): 2 years pursuant to Law No. 5651.

Contract and order information: 10 years from the termination of the contractual relationship (general statute of limitations).

Marketing data: Until explicit consent is withdrawn or 3 years from the last interaction.

Upon expiration of retention periods, your personal data will be deleted, destroyed or anonymized in accordance with the KVKK and related legislation.

8. Your Rights as a Data Subject

Pursuant to Article 11 of the KVKK, you have the following rights:

a) To learn whether your personal data is being processed.

b) To request information if your personal data has been processed.

c) To learn the purpose of processing your personal data and whether they are used in accordance with their purpose.

d) To know the third parties to whom your personal data has been transferred domestically or abroad.

e) To request correction if your personal data has been processed incompletely or incorrectly.

f) To request deletion or destruction of your personal data within the framework of conditions set forth in Article 7 of the KVKK.

g) To request that operations performed under paragraphs (e) and (f) be notified to third parties to whom personal data has been transferred.

h) To object to the emergence of a result against the person themselves through analysis of processed data exclusively by automated systems.

i) To demand compensation for damages in case personal data is processed unlawfully.

9. Method of Exercising Rights

To exercise the rights stated above, you can apply through the following methods:

Email: [email protected] (via email sent from your registered email address or the email address registered in our system)

Written Application: By a wet-signed petition to be delivered to Yavuz Sultan Selim Mah. Ali Yücel Sk. No:5/B D:12, Körfez / Kocaeli, Turkey address with identity verification.

Your application must include; your name, surname, Turkish ID number, notification address, email address if available, phone number and the subject of your request.

Your applications will be concluded free of charge within the shortest time and within 30 (thirty) days at the latest, depending on the nature of your request. If the process requires an additional cost, the fee determined by the Personal Data Protection Board tariff will be charged.

DoğruHost reserves the right to request additional information and documents to determine whether the applicant is the data subject.

10. Data Security Measures

DoğruHost takes all necessary technical and administrative measures to ensure an appropriate level of security pursuant to Article 12 of the KVKK, in order to prevent the unlawful processing of personal data, prevent unlawful access to personal data, and ensure the preservation of personal data:

Technical Measures: SSL/TLS encryption, firewall, intrusion detection and prevention systems, access logs, regular security scans, penetration tests, data masking and encryption, backup systems.

Administrative Measures: Data processing inventory and policies, employee training, access authorization matrix, confidentiality agreements, contractual arrangements with data processors, regular audits.

11. Changes to the Disclosure Text

DoğruHost reserves the right to update this disclosure text in line with changes in legal regulations or updates in data processing activities.

The updated text takes effect by being published on the DoğruHost website. Significant changes will be additionally notified to your registered contact addresses.

12. Contact

To exercise your rights under the KVKK or to get information about the disclosure text:

KVKK Contact: [email protected]

General Contact: [email protected]

Phone: +90 850 308 39 75 (WhatsApp)

Address: Yavuz Sultan Selim Mah. Ali Yücel Sk. No:5/B D:12, Körfez / Kocaeli, Turkey