Personal Data and General Confidentiality Agreement

Personal Data and General Privacy Agreement

Article 1: Subject and Purpose

1.1. This agreement aims to secure the privacy and safety of personal data collected, processed, stored, and managed by Sosyohost in accordance with the Law No. 6698 on the Protection of Personal Data (KVKK).

Article 2: Consent to Data Processing and Authorization Obligation

2.1. To use Sosyohost's services, customers must give explicit consent to the processing of their personal data. Without this consent, the use of services is not possible. 2.2. The Customer is deemed to have accepted the processing of their data for the purposes stated in this agreement by giving this consent during or after registration.

Article 3: Types of Personal Data Collected and Purposes of Processing

Sosyohost may process the following types of personal data depending on the nature of the service:

• Identity Data: Name, surname, Turkish ID number.

• Contact Data: Email address, phone number, address.

• Financial Data: Invoice information. Credit card information is not stored by our company.

• Service Data: Purchased services, order details, and support ticket history.

This data is processed for the following purposes:

• The performance and management of services under the contract.

• The execution of invoicing and accounting processes.

• The fulfillment of legal obligations, particularly reporting to the BTK in accordance with Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed Through Such Publications.

• Providing customer service and support.

• Notifying about marketing, campaigns, and special offers.

Article 4: Rights of the Personal Data Subject

4.1. The Customer has the following rights in accordance with Article 11 of the KVKK:

• To learn whether their personal data is being processed.

• To request information if their personal data has been processed.

• To learn whether the data is being used for its intended purpose.

• To request the correction of incomplete or inaccurate data.

• To request the deletion or anonymization of data.

4.2. The Customer may submit requests for the deletion, anonymization, or cessation of processing of their personal data in writing to Sosyohost, which will respond within a maximum of 30 days.

Article 5: Data Security

5.1. Sosyohost takes all necessary technical and administrative security measures to prevent unlawful access, disclosure, processing, or loss of personal data. 5.2. Customer data is not shared with third parties or institutions, except for legal obligations. 5.3. Our office is not open for visits without a prior appointment. This is a measure to protect our data security and operational processes.

Article 6: Complaints and Contact

6.1. For any questions, requests, or complaints regarding the privacy policy or personal data, you can send an email to merhaba@sosyohost.com. For complaints regarding invoices and accounting, you can email muhasebe@sosyohost.com.

Article 7: BTK and Legal Records

7.1. Sosyohost is a hosting provider registered with the BTK under Law No. 5651 and fulfills its legal reporting obligations regularly. Our BTK registration is available for inquiry.

7.2. All corporate documents belonging to our company, such as our tax plate and Trade Registry Gazette, are up-to-date and can be shared upon official request for legal purposes.