Personal data protection notice and your right to apply

Review the scope of website contact processes and your rights under Law No. 6698. Last updated: 18 October 2026.

1. Data controller and scope

Ajans Hosting operates as part of Pixoof Teknoloji A.Ş. Pixoof Teknoloji A.Ş. is the data controller for contact and reporting processes on the Ajans Hosting website.

This notice covers contact and abuse reporting processes on ajanshosting.com. Review separately the relevant notices and agreements presented during account, order and service transactions in the customer portal.

2. How data is collected and what it covers

Data is collected electronically when you access the website and submit a request by completing form fields. Contact requests process your full name, email address, subject and message; abuse reports process a contact email address, report type, relevant address, description and, if provided, an optional name and evidence link.

Session information, form security records and connection logs may be used to operate and secure the service. You must not include unnecessary personal data about third parties, sensitive personal data or confidential access credentials in your request.

3. Purposes and legal bases

Data is processed to respond to contact requests, conduct proposal and service processes, investigate reports, ensure security, fulfil legal obligations and protect rights.

Depending on the processing concerned, the conditions in Article 5 of the Personal Data Protection Law No. 6698 may apply: direct relevance to the establishment or performance of a contract; a legal obligation; the establishment, exercise or protection of a right; and legitimate interests, provided that the data subject's fundamental rights and freedoms are not harmed. Where needed, another statutory processing condition or valid explicit consent is assessed separately.

Confirming that you have read the notice does not constitute marketing permission or explicit consent to all data processing activities. Website forms do not create marketing subscriptions.

4. Parties to whom data may be transferred

Requests and technical records may, to the extent necessary, be processed by or shared with personnel operating the service, technical infrastructure providers and legally authorised public bodies for the relevant purpose. Transfers must be relevant and proportionate to the purpose and based on the conditions of Article 8 of Law No. 6698 and, for international transfers, Article 9.

A report of unlawful use may be assessed to the extent necessary to investigate the incident. Identity and contact information within the report should not be disclosed to people whose involvement is not required for the investigation.

5. Retention principles

The standard retention period for local form records on the web server is 180 days. Email notifications containing the message and reference number may be generated; email copies are subject to the organisation's separate retention and deletion process and are not automatically deleted when local records are cleaned up. Records needed for a legal obligation, ongoing dispute or security investigation may be retained separately, limited to the relevant purpose and period. Temporary submission-limit records are used for short-term security purposes; counter files older than 48 hours are deleted.

Customer account, order, invoice and hosted service data are separate from these web form records. Retention conditions for those records should be explained separately within their own processes. Detailed website information is available on the Privacy Policy page.

6. Your rights under Article 11 of the Law

  • To learn whether your personal data is being processed.
  • To request information if it has been processed.
  • To learn the purpose of processing and whether the data is used in accordance with that purpose.
  • To know the third parties to whom data is transferred in Turkey or abroad.
  • To request correction of incomplete or inaccurate data.
  • To request deletion or destruction under the conditions in Article 7 of the Law.
  • To request that correction, deletion or destruction be notified to third parties to whom the data has been transferred.
  • To object to a result against you arising from analysis carried out exclusively through automated systems.
  • To request compensation if you suffer damage due to unlawful processing.

7. Application process

You may submit an application under the Law to Pixoof Teknoloji A.Ş. in writing at the address above or by one of the valid methods specified in the Communiqué on the Principles and Procedures for Applications to the Data Controller. For applications sent from an email address you previously supplied and that is registered in the system, you may use the corporate address [email protected]. Do not assume this is a registered electronic mail (KEP) address.

You can request information about the process through the contact form under “Personal data and privacy”. The general contact form does not mean that it replaces formal application methods, which must meet the requirements of the relevant law.

The application must clearly state your full name, contact details for a response, and which right you wish to exercise in relation to which record. Identity and authority information required by law must be provided through an appropriate secure method. Do not include an image of your identity card or unrelated personal data in the general form.

When preparing your application

  • Identify the record you want action taken on, for example the date or reference number of your contact request.
  • State clearly the right you wish to exercise and the outcome you seek, such as information, correction or deletion where the conditions are met.
  • Check your contact details for receiving a response and the valid application method you have chosen.
  • Provide legally required information such as identity, authority and signature in the form appropriate to the chosen method; do not upload an identity document to the general form.

This list is for preparation. For the scope of your rights, consult the official text of Law No. 6698 (PDF); for application methods and required information, see Article 5 of the Communiqué on the Principles and Procedures for Applications to the Data Controller.

Duly submitted applications are concluded as soon as possible according to their nature and no later than 30 days. If the process incurs additional costs, a fee under the tariff set by the Board may apply. If an application is rejected, receives an inadequate response or is not answered on time, you have the right to complain to the Personal Data Protection Board under the conditions in the Law.