PRIVACY NOTICE UNDER THE LAW ON THE PROTECTION OF PERSONAL DATA
1. IDENTITY OF THE DATA CONTROLLER
Under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK" or the "Law"), your personal data may be processed by Domain Bilişim Hizmetleri – Muhammed Emin Narin ("domain.com.tr" or the "Company"), acting as the data controller, within the scope described below.
- Legal name: Domain Bilişim Hizmetleri
- Address: Şehitkubilay Mah. Aşağı Barak Sokak No:18/13 Ankara, Türkiye
- Website: www.domain.com.tr
- Email: [email protected]
2. CATEGORIES OF PERSONAL DATA PROCESSED
In connection with your use of our services, personal data falling within the following categories may be processed:
| Category | Example Data |
|---|---|
| Identity Data | Full name, Turkish national ID number / foreign ID or passport number, tax number, tax office |
| Contact Data | Address, email address, phone number |
| Customer Transaction Data | Order, invoice, and payment records; requests/complaints; call center and support conversation records |
| Financial Data | Invoicing information, payment method details (card data itself is not stored by the Company; it is processed via the payment provider/bank infrastructure) |
| Transaction Security Data | Username, hashed/encrypted password, IP address, access and traffic logs, system logs |
| Legal Proceedings Data | Correspondence with competent authorities, litigation/enforcement file information (where applicable) |
| Marketing Data (only with your explicit consent) | Newsletter/campaign preferences, cookie records |
3. PURPOSES OF PROCESSING PERSONAL DATA
Your personal data is processed for the following purposes:
- Carrying out domain registration, renewal, and transfer transactions;
- Providing hosting and other services and establishing/maintaining the contractual relationship;
- Managing order, invoicing, and payment processes;
- Responding to customer support requests and managing customer relationships;
- Ensuring the security of the Site and systems, and detecting/preventing misuse (spam, attacks, etc.);
- Fulfilling obligations arising from Turkish Law No. 5651, TRABİS/ICANN rules, tax legislation, and other applicable law;
- Responding to requests from competent public authorities and carrying out legal proceedings;
- Where your explicit consent has been obtained, sending you campaigns, newsletters, and commercial electronic messages.
Your personal data is collected through channels such as the registration/order forms on the Site, the Control Panel, support/request forms, email, telephone, and call center conversations, using either fully or partially automated means, or non-automated means provided that they form part of a data recording system.
Your personal data is processed on the basis of the following legal grounds set out in Articles 5 and 6 of the KVKK:
- Being directly related to the establishment or performance of a contract (the establishment and performance of the service agreement);
- Compliance with a legal obligation (tax legislation, Law No. 5651, ICANN/TRABİS rules, etc.);
- Necessity for the Company's legitimate interests (system security, fraud prevention, monitoring service quality);
- Necessity for the establishment, exercise, or protection of a right (management of disputes and legal proceedings);
- Your explicit consent (solely for processing activities requiring explicit consent, such as marketing/newsletter communications).
Your personal data may be shared, strictly for the purposes described above and in accordance with the conditions set out in Articles 8 and 9 of the KVKK, with the following parties:
- Domain registry authorities: ICANN, relevant domestic and international registries/registrars, and TRABİS/BTK for ".tr" domains — as required under international rules mandating that certain domain registration (WHOIS) information be publicly available;
- Payment institutions and banks: For the purpose of processing payments;
- Competent public authorities: In the event of a legal request, court order, or statutory obligation;
- Business partners providing services to us: Hosting infrastructure providers, call center providers, email/SMS delivery providers, legal counsel, and financial advisors, and other third parties with whom we cooperate to perform our services — only to the extent necessary;
- Direct/indirect affiliates: Solely to the extent necessary for conducting the Company's business activities.
6. RETENTION PERIOD FOR PERSONAL DATA
Your personal data is retained for as long as required by the purpose of processing, taking into account the retention periods prescribed by applicable legislation (for example, the Tax Procedure Law, the Turkish Commercial Code, and the record-keeping obligations under Law No. 5651). This period is generally limited to statutory retention periods that may extend up to 10 years following the termination of the contractual relationship. Upon expiry of the applicable retention period, your personal data is deleted, destroyed, or anonymized in accordance with the Company's personal data retention and destruction policy.
7. COOKIES
Cookies may be used on the Site to improve user experience, manage sessions, and analyze site traffic. Detailed information regarding the use of cookies is available in the Site's Cookie Policy.
8. YOUR RIGHTS UNDER ARTICLE 11 OF THE KVKK
Pursuant to Article 11 of the KVKK, you may apply to the Company to exercise the following rights:
a) To learn whether your personal data is being processed;
b) To request information if your personal data has been processed;
c) To learn the purpose of processing your personal data and whether it is used in accordance with that purpose;
d) To know the third parties, domestic or abroad, to whom your personal data has been transferred;
e) To request correction of your personal data if it has been processed incompletely or incorrectly;
f) To request the deletion or destruction of your personal data within the conditions set out in Article 7 of the KVKK;
g) To request that the actions taken under (e) and (f) above be notified to third parties to whom your personal data has been transferred;
h) To object to a result that is to your detriment arising from the analysis of your processed data exclusively through automated systems;
i) To claim compensation for damages arising from the unlawful processing of your personal data.
Restrictions: The Personal Data Protection Board (the "Board") may restrict, postpone, or refuse the provision of information relating to the above rights in circumstances such as: where explicitly provided for under special legislation; where there is an overriding public interest; where necessary for the protection of national security or public order; or where providing such information would hinder the purpose of an administrative or criminal investigation. In such cases, the reason for the restriction will be communicated to you in writing.
Furthermore, depending on the nature of your request, your application may not be fulfilled, in whole or in part, in circumstances where doing so could infringe upon the rights of another natural or legal person, trade secrets, or other interests protected by law; in such cases, the reasoning will be communicated to you.
9. METHOD AND TIMEFRAME FOR SUBMITTING REQUESTS (ARTICLE 13 OF THE KVKK)
To exercise the rights listed above, you may submit your request:
- By sending an email from the email address registered in our systems to [email protected], or
- In writing, by submitting a signed petition to the Company's address (Şehitkubilay Mah. Aşağı Barak Sokak No:18/13 Ankara, Türkiye).
- Full name and, if the application is made in writing, your signature;
- For Turkish citizens, your Turkish national ID number; for foreign nationals, your nationality, passport number, or, if applicable, your identity number;
- Your residential or business address for correspondence purposes;
- Your email address, telephone, and fax number, if applicable, for notification purposes;
- The subject matter of your request and any supporting information or documents, if applicable.
10. DATA SECURITY
The Company takes all necessary technical and administrative measures required under Article 12 of the KVKK — including access authorization controls, encryption, firewalls, regular backups, and staff awareness training — to prevent the unlawful processing of and unlawful access to your personal data, and to ensure the secure storage of such data.
11. AMENDMENTS TO THIS PRIVACY NOTICE
The Company reserves the right to update this Privacy Notice in line with changes in applicable legislation or its data processing activities. The current version of this notice is always published on the Site.
Last updated: 25.08.2026