1. Scope of this policy
Ajans Hosting operates as part of Pixoof Teknoloji A.Ş. Pixoof Teknoloji A.Ş. is the data controller for contact processes on this website. Address: Beylikdüzü OSB Mah. Birlik Sanayi Sitesi 3. Cad. No: 5 İç Kapı No: 130, Beylikdüzü / Istanbul. Corporate contact: [email protected], +90 212 963 05 05.
This policy explains the personal data processed when you visit ajanshosting.com or use the contact or abuse report forms. Account, order, payment and service management in the Ajans Hosting customer portal take place in a separate application; the notices and agreements presented for those processes should be reviewed separately.
The website does not use advertising profiling, third-party advertising tags or analytics tools that measure visitor behaviour. Sending a contact request does not subscribe you to marketing messages.
2. What information is processed?
Contact form: Full name, email address, subject and message content. A company name, project information or service number that you voluntarily include in your message also becomes part of the request.
Abuse report form: The reporter's email address, report type, relevant address and incident description; optionally, their full name and an evidence link. Do not include unnecessary personal data about others or sensitive personal data in the form.
Technical security information: The session identifier needed for the form session and security verification is processed. To limit excessive or automated submissions, a technical value derived from the IP address using a secret key is used; it does not directly contain the IP address. This value is not considered anonymous and is retained for a limited period for security purposes.
Web server and network security layers may process connection logs such as access times, IP addresses, requested pages, browser information and response statuses. These logs are considered in the context of service security, error investigation and legal obligations.
3. What is it used for?
- To understand and respond to your request and communicate with you.
- To prepare proposals, assess pre-service requirements or direct an existing service enquiry to the right channel.
- To investigate abuse and security reports.
- To limit spam, automated submissions and unauthorised use.
- To fulfil legal obligations and review necessary records in disputes.
Depending on the nature of the request, the legal basis for processing may be the establishment or performance of a contract, a legal obligation, the establishment or protection of a right, or a legitimate interest provided that fundamental rights and freedoms are not harmed. If a different activity requiring explicit consent is to be carried out, it will be explained separately and the appropriate consent obtained.
4. Sharing and service providers
Access to information should be limited to authorised personnel needed to handle the request and technical service providers involved in operating the service, within the limits of their duties. Hosting, network security or communications infrastructure providers may take part in technical processing. Personal data is not sold; contact form information is not used to build advertising lists.
Necessary information may be shared with the relevant authorities in response to lawful requests from authorised bodies or where a legal obligation exists. When investigating an abuse report, necessary parts of the report may be used to assess the service involved in the incident; unnecessary personal data about the reporter should not be shared.
Where a service or operation entails a transfer of data abroad, the applicable transfer conditions in Article 9 of Law No. 6698 must also be met. Having an internet connection or reading this text does not, by itself, constitute permission for an international transfer.
5. Retention and deletion
The standard retention period for local form records held on the web server is 180 days. Records older than this are cleaned up regularly. An email notification containing the message and reference number may also be generated to handle requests; copies in mailboxes are managed separately under access permissions and the organisation's relevant retention and deletion procedures. Cleaning up local records does not automatically delete email copies. Records required for a dispute, security investigation or legal obligation may be retained separately, limited to the relevant purpose and the necessary period.
Technical counters that prevent excessive form submissions operate within a one-hour window; counter files older than 48 hours are deleted. The form session cookie lasts for the browser session. Server access logs, backups and records processed in the customer portal are assessed according to their own purposes and applicable retention obligations.
When there is no longer a valid legal basis for retaining data, deletion, destruction or anonymisation should be carried out in a manner appropriate to the system concerned. You can submit a request concerning your rights using the personal data request information.
6. Security and what you can do
Communication with the website takes place over HTTPS. Forms use server-side field validation, session-based security verification and submission limits. Form records are kept in an area that is not directly published on the web. These measures reduce risk; absolute security cannot be promised for any internet service.
Do not enter passwords, payment card details, identity documents, recovery codes or private keys in forms. Share only enough information to explain your request. For work requiring technical access, an appropriate secure channel and limited-permission method must be agreed separately.
7. Cookies and links
Advertising and analytics cookies are not used on public content pages. Essential cookies may be used for security and session management in form functions. Details of the form cookie and the browser storage used to remember the migration checklist only within a tab are on the Cookie Policy page.
When you follow a link to the portal or another website, that application's own data processing procedures apply. These links do not mean that all practices of a third-party website fall under this policy.
8. Your rights and contact details
You can review the statutory scope of your rights in the official text of the Personal Data Protection Law No. 6698 (PDF), particularly Articles 11 and 13.
You have the right to learn whether your personal data is processed, request information, learn whether it is used for its intended purpose, know the third parties to whom it is transferred, and request correction or, under the conditions set by law, deletion or destruction. Rights to notification of certain actions, to object to the results of automated analysis and to compensation for damage caused by unlawful processing may also be exercised subject to the statutory conditions.
You can submit your request under the personal data request topic. Proportionate additional information may be requested to verify the applicant's identity and connection to the relevant record. For formal application methods and time limits, see the Personal Data Protection Notice page.