1. Data Controller
In accordance with Law No. 6698 on the Protection of Personal Data ("KVKK"), the data controller is BARIŞ ÇAĞRI GÜÇ ("Çağrı Hosting") residing at TEPEALTI MAH. SERİN SK. ECE APT NO: 11 İÇ KAPI NO: 5 YENİMAHALLE / ANKARA.
2. Important Distinction: Data Hosted on Your Website
With respect to personal data contained in the websites, email accounts, and databases hosted on our servers as part of the hosting service (for example, visitor and customer information on your website), you are the data controller; Çağrı Hosting is only a data processor processing this data on your behalf solely for the purpose of providing hosting services. We do not access this data unless you submit a technical support request or there is a legal obligation to do so. This privacy notice covers data that Çağrı Hosting processes in its capacity as data controller regarding its own customers and website visitors.
3. Personal Data Processed
- Identity: Full name; ID number when required for invoice issuance.
- Contact: Email address, phone number, address.
- Customer transaction: Order, invoice, service and support request records, correspondence.
- Finance: Payment amount, payment status, invoice information, tax number. Your card number is not visible to us and is not stored; payment transactions are processed by PayTR.
- Transaction security: IP address, session and login records, customer panel transaction logs, server access logs.
- Marketing: Your communication preferences if you have provided express consent or approval.
- Social media: Messages and comments you send to our social media accounts.
4. Processing Purposes and Legal Basis
| Purpose | Legal basis (KVKK art. 5/2) |
|---|---|
| Creating membership, receiving orders, establishing and maintaining services | (c) Establishment and performance of contract |
| Billing, accounting and tax obligations | (ç) Fulfilling legal obligation |
| Storage of hosting provider traffic information under Law No. 5651 | (a) Explicitly provided in laws, (ç) legal obligation |
| Storage of records under remote sales regulations | (ç) Legal obligation |
| Technical support, malfunction, maintenance and outage notifications | (c) Performance of contract |
| Account security, fraud and abuse prevention, system security | (f) Legitimate interest |
| Protection of rights in disputes | (e) Establishment, exercise or protection of a right |
| Measuring and improving service quality | (f) Legitimate interest |
| Sending campaign, discount and promotional messages | Explicit consent and commercial electronic communication approval under Law No. 6563 |
5. Collection Method
Your personal data is collected electronically through our website, customer panel, order and payment forms, support system, email, phone, social media accounts and cookies, through automatic or partially automatic methods.
6. Transfer of Personal Data
Your personal data may be transferred to the following recipients to the extent limited to and necessary for the above purposes:
- Payment institution: PayTR Payment and Electronic Money Institution Inc. (execution of payment transactions)
- Domain name registrars and authorities: Information required for domain registration (ICANN rules and TRABİS for .tr domains)
- Accounting and e-invoice service providers, tax advisor
- Infrastructure and business tools service providers: [TRANSFER LIST; for example server provider, corporate email provider, backup provider, AI-powered customer service and content tools]
- Competent public authorities and judicial bodies: In case of legal request
Transfer abroad: Some of our service providers' servers are located abroad ([COUNTRIES]). These transfers are made in accordance with KVKK Article 9, by signing standard contracts announced by the Personal Data Protection Board and notifying the Board.
7. Retention Periods
Your personal data is retained for the duration required by the processing purpose and the retention periods specified in relevant legislation; at the end of these periods it is deleted, destroyed or anonymized. Main periods: retention periods specified in Law No. 213 (Tax Procedure Code) and Law No. 6102 (Turkish Commercial Code) for invoices and accounting records, retention period specified in Law No. 5651 and related regulation for hosting provider traffic information, retention period specified in related regulation for remote contract records.
8. Your Rights Under KVKK Article 11
You have the right to learn whether your personal data is being processed, to request information if it has been processed, to learn the processing purpose and whether it is used in accordance with its purpose, to know the third parties to whom it is transferred domestically or abroad, to request correction if it is processed incompletely or incorrectly, to request deletion or destruction under KVKK Article 7, to request notification of these operations to third parties to whom they are transferred, to object to a conclusion reached against you as a result of analysis exclusively by automated systems, and to claim compensation for damage if you suffer harm due to unlawful processing.
9. Application
You can submit your requests in accordance with the Circular on Application Procedures and Principles to the Data Controller;
- In writing to TEPEALTI MAH. SERİN SK. ECE APT NO: 11 İÇ KAPI NO: 5 YENİMAHALLE/ANKARA address,
- By KEP to the address Not Available,
- From the email address registered in our system [KVKK EMAIL] to
Your application will be finalized free of charge within 30 days at the latest. If the transaction requires additional cost, the tariff determined by the Board may be applied.