Privacy Notice (KVKK)

1. Data controller

[DOLDURULACAK: şirket unvanı] ([DOLDURULACAK: açık adres], [DOLDURULACAK: ülke]; e-mail: destek@dilmex.net) is the data controller. This is a translation for convenience. Where Turkish consumer law applies, the Turkish version prevails.

2. Data processed

• Identity and contact: name, e-mail, phone, address.
• Domain owner (WHOIS) details; for .tr domains also the Turkish identity number or tax office and number (stored encrypted).
• Transactions: orders, domains, support requests, accepted agreements.
• Security: IP address, browser details, session records.
• Finance: amounts and the payment provider's reference (card data is taken by Stripe, not by us).

3. Purposes and legal grounds

• Providing the account, registrations, renewals, transfers and DNS — performance of a contract (Art. 5/2-c).
• Invoicing, accounting and consumer-law duties — legal obligation (Art. 5/2-ç).
• Passing WHOIS details to registries — contract and statutory requirement (Art. 5/2-a, c).
• Security, abuse prevention and legal claims — legitimate interest and establishment of rights (Art. 5/2-e, f).

4. Recipients

Some of them are abroad; transfers rely on the safeguards of Art. 9 and on necessity for the contract.

• Registrar and registries: Domain Name API (Atak Domain), TLD registries, ICANN; TRABIS for .tr.
• Payments: Stripe.
• E-mail delivery: Mailgun (EU).
• Hosting and infrastructure: DigitalOcean, Vercel, Cloudflare.

5. Retention

Data is kept while your account is open and afterwards for the statutory periods; deleting your account anonymises your personal data. WHOIS records already passed to registries may remain with the registrar under registry rules.

6. Your rights (Art. 11)

You may learn whether your data is processed, request information, learn the purposes and recipients, request correction or deletion, object, and claim damages. Send requests to destek@dilmex.net; we answer within 30 days.