Data Protection Notice

This notice explains how SSH BULUT SUNUCU MERKEZİ A.Ş., acting as data controller, processes personal data under Turkish Personal Data Protection Law No. 6698 (KVKK).

Data we process

• Identity and contact: name, email address, phone number, company name.
• Billing: legal name, address, national ID or tax office and tax number.
• Security: IP address, user agent, session records, sign-in attempts and administrative audit logs.
• Orders and payments: order contents, amount, payment status, card brand and the last four digits of the card number.

We never store the full card number, expiry date or security code (CVV). Payment details go directly to a licensed payment institution.

Purposes

• Concluding and performing the service agreement, provisioning servers and providing support
• Invoicing and meeting accounting obligations
• Securing accounts and preventing unauthorised access or abuse
• Responding to requests and complaints
• Sending campaign and announcement emails where you have given explicit consent

Transfers

Data may be shared with payment institutions, our e-invoice integrator, accounting service providers and competent public authorities, limited to the relevant purpose. Our servers and databases are located in Türkiye.

Retention

Data is retained for the duration of the contractual relationship and afterwards for the periods prescribed by law (ten years for commercial books and records), then deleted, destroyed or anonymised.

Your rights

Under Article 11 of the KVKK you may ask whether your data is processed, request information and correction, request erasure, object to results produced solely by automated analysis, and claim compensation for damages. Send requests to our registered electronic mail (KEP) address or from your registered email address to our contact address. Requests are answered within thirty days.