Version 2.1 · Effective: 12 November 2026 · Previous version: 2.0 (12 November 2026)
This text is the notice given under Article 10 of Turkish Personal Data Protection Law No. 6698 ("KVKK"). For people in the European Union and the United Kingdom, the additional information in Section 12 also applies.
1. Data controller
1.1. Data controller details:
- Name: DNS Tech Company LLC (former trade name DNS Bilişim).
- Address: 530-B Harkle Road, STE 100, Santa Fe, New Mexico 87505, USA.
- Email: [email protected] (requests about personal data); [email protected] for other matters.
2. Scope
2.1. This text covers the personal data we process in the following places:
- Websites: musteri.dnsbilisim.net (customer panel and store), www.dnsbilisim.net, status.dnsbilisim.net, dnstechcompany.com and status.dnstechcompany.com;
- Channels: support, sales and email correspondence;
- People: our customers, prospective customers, visitors and our customers' representatives.
2.2. Personal data in the Content that our customers host or process in our services is not covered by this text. Our customer is the controller of that data; we are only the processor (Terms of Service Article 13).
3. Personal data we process
| Category | Examples |
|---|---|
| Identity | Name, surname, company name, tax number or Turkish ID number (if required for billing or domain registration) |
| Contact | Email, telephone, address |
| Customer transactions | Orders, services, invoices, support tickets and correspondence, domain registration data |
| Financial | Payment records, bank account name (transfer matching), refund details. Card numbers are not kept by us; they are stored by the payment institution |
| Transaction security | IP address, session and login records, device and browser data, server and network logs, two-factor authentication data |
| Website usage | Pages visited, clicks, mouse and scroll movements, session recording (Section 10) |
| Marketing | Your message preferences, if you consented |
| Legal | Requests from authorities, complaint and dispute records |
4. Purposes and legal grounds
| Purpose | Legal ground (KVKK Art. 5/2) |
|---|---|
| Opening accounts, orders, setting up and providing the service, invoicing, collection | Formation and performance of a contract (c) |
| Answering support tickets, service notifications | Performance of a contract (c) |
| Domain registration and WHOIS rules | Performance of a contract (c), legal obligation (ç) |
| Keeping traffic data as a hosting provider, requests from authorities | Legal obligation (ç) |
| Preventing fraud and abuse, information security, system logs | Legitimate interest (f) |
| Visit statistics, improving the websites and the Panel (Section 10) | Legitimate interest (f) |
| Legal disputes and debt collection | Establishing, exercising or protecting a right (e) |
| Commercial electronic messages (campaigns, newsletters) | Explicit consent (Art. 5/1) or the statutory exception for merchants and tradespeople |
5. Collection method
Personal data is collected through the following channels, by automated or partly automated means:
- What you provide: Panel forms, order and payment steps, support tickets, the sales form and emails;
- Collected automatically: cookies, server logs and the visit statistics tool (Section 10);
- From institutions: notifications from payment institutions, banks and the domain registrar.
6. Transfers
6.1. We transfer personal data only for the purposes above, and only as needed, to the following recipient groups:
| Recipient group | Purpose | Location |
|---|---|---|
| Infrastructure and data center providers | Hosting the service and the panel | Germany, Finland, USA, Singapore; Türkiye for private VPN |
| Email delivery provider | Invoice, notification and support emails | European Union |
| Content delivery and security service | Protecting the websites, bot and attack control | USA and worldwide |
| Web analytics provider | Visit statistics and session recording (Section 10) | Russian Federation |
| Payment institutions and banks | Collection, refunds, transfer matching | Türkiye, USA, European Union |
| Domain registrar and domain registries | Domain registration, renewal, transfer | Türkiye and the registry's country |
| Internal notification and communication tools | Notifying our team of orders and tickets | USA and European Union |
| Lawyers, accountants and auditors | Legal and financial obligations | Türkiye, USA |
| Competent public authorities and courts | Legal obligations and requests | The relevant country |
6.2. International transfers:
- The data controller is established in the USA. Because our services are hosted abroad, your personal data is transferred abroad.
- These transfers are made in line with Article 9 of KVKK: appropriate safeguards (e.g. standard contracts notified to the Board) or the incidental transfer cases in the law.
7. Retention periods
| Data | Period |
|---|---|
| Account, order, invoice and payment records | During the contractual relationship and 10 years after it ends |
| Support correspondence | During the contractual relationship and 10 years after it ends |
| Traffic data (hosting provider obligation) | Statutory period (1–2 years) |
| Server, security and session logs | 2 years |
| Sales form and quote correspondence (if no contract follows) | 2 years |
| Marketing consent record | Until consent is withdrawn, then 3 years for evidence |
| Service Content and its backups | Deleted when the service ends (Terms of Service Article 17.5) |
When the period ends, the data is deleted, destroyed or anonymized.
8. Security
The technical and organizational measures we take to protect personal data are:
- encrypted connections (TLS);
- authorization and access control;
- multi-layer access protection for the administration panel;
- logging;
- backups;
- security updates;
- confidentiality obligations of staff.
Card details are not stored in our systems.
9. Your rights and requests
9.1. Under Article 11 of KVKK, you have the right to:
- learn whether your personal data is processed and request information about it;
- learn whether it is used in line with its purpose;
- know the third parties to which it is transferred;
- request correction if it is incomplete or inaccurate;
- request its deletion or destruction;
- request that correction and deletion be notified to the recipients;
- object to an outcome against you that results from automated analysis;
- request compensation for damage caused by unlawful processing.
9.2. Requests:
- You can make your request in writing to the address in Section 1, or by email from the email address registered in your account.
- Your request is answered free of charge within 30 days at the latest. If the action requires an additional cost, the fee set by the Board may be charged.
- We may ask for additional information to verify your identity.
9.3. If you find the answer insufficient, you can complain to the Turkish Personal Data Protection Board.
10. Cookies and visit statistics
10.1. Our websites use the following cookies:
| Type | Purpose | Example |
|---|---|---|
| Necessary | Session, cart, language and currency preference | WHMCS session cookie |
| Security | Bot and attack control | Cloudflare security cookies (__cf_bm, cf_clearance) |
| Analytics | Visit statistics, click map and session recording | Yandex Metrica (_ym_uid, _ym_d, _ym_isad; yandexuid and similar on Yandex domains), Cloudflare's script loader (cf_zaraz_client) |
10.2. Necessary and security cookies are needed to provide the service and for information security; they do not require explicit consent.
10.3. Yandex Metrica:
- It runs on every page of the websites in Section 2.1. This includes the Panel pages after you log in.
- Data collected: pages visited, clicks, mouse and scroll movements, device and browser data, IP address.
- Session recording (Webvisor) is on. The content you see on the page is also recorded; in the Panel this content may include your name, services and invoices. Card details are not recorded, because they are entered in the payment institution's own field.
- Purpose: to measure how the websites and the Panel are used, find problems and improve them.
- Legal ground: our legitimate interest (KVKK Art. 5/2-f).
- The data is transferred to Yandex and processed on servers in the Russian Federation.
- The cookies stay up to 1 year on our domain and up to 400 days on Yandex domains. Statistics are kept under Yandex's retention rules.
- If you do not want to be measured, you can block these cookies and Yandex scripts in your browser, or use the Yandex Metrica opt-out add-on. This does not affect how the websites work.
10.4. We do not use advertising or marketing cookies. If we do in the future, we will ask for your consent first.
10.5. You can delete or block cookies in your browser. If necessary cookies are blocked, the panel may not work.
11. Commercial electronic messages
11.1. We send campaign and newsletter messages only with your consent. To merchant and tradesperson customers we may send them without consent to the extent the law allows.
11.2. Right to opt out:
- You can opt out at any time through the link in each message or in the Panel.
- Invoice, service and security notifications are not commercial messages; they are sent for as long as the service lasts.
12. People in the European Union and the United Kingdom
12.1. If you are in the European Union or the United Kingdom, your data is processed under the GDPR and the UK GDPR. The legal grounds (Article 6(1)) are:
- contract (b);
- legal obligation (c);
- legitimate interest (f);
- consent (a): for marketing messages.
12.2. Your rights under the GDPR are:
- access;
- rectification;
- erasure;
- restriction;
- portability;
- objection;
- withdrawal of consent.
You have the right to complain to the supervisory authority of your country.
13. Children
Our services are not intended for people under 18. We do not knowingly process children's data.
14. Changes
We may update this text. The current version is published on this page with its effective date and takes effect when published. If a new purpose is added to processing based on explicit consent, your consent is obtained separately.
