KVKK Privacy Notice

1. Who the data controller is

The data controller under Law 6698 is Pixoof Teknoloji Anonim Şirketi, which operates the ServerQ brand. Its registered office is Beylikdüzü OSB Mahallesi, Birlik Sanayi Sitesi, 3. Cadde No: 5 Daire: 130, Beylikdüzü / İstanbul, Türkiye and its address for notice is Yeşilköy Mahallesi, Atatürk Caddesi No: 12, EGS Business Park B3 Blok Daire: 268, Bakırköy / İstanbul, Türkiye. MERSİS 0730088135100001.

2. What is processed

This site itself collects almost nothing. It sets no cookies of its own, runs no analytics, and has no account or contact form that stores anything on this origin — the enquiry form composes a message and hands it to your own mail client. Personal data is processed when you become a customer, and that happens in the client portal.

3. Why, and on what legal ground

• To create and run your service and your account — necessary for the performance of a contract you are party to (m.5/2-c).
• To invoice you and keep the accounting records — a legal obligation of the controller (m.5/2-a and m.5/2-ç).
• To keep the traffic records that a hosting provider is required to keep under Law 5651 — a legal obligation (m.5/2-a).
• To answer your support tickets and handle complaints — performance of the contract, and our legitimate interest in running a support function (m.5/2-c and m.5/2-f).
• To protect the network — investigating abuse, attacks and fraud is a legitimate interest that does not override your fundamental rights (m.5/2-f).
• To send commercial messages — only on your explicit consent (m.5/1), which is also the İYS requirement, and withdrawable at any time.

4. Who it is shared with

Personal data is shared only where a purpose above requires it, and only to the extent that purpose requires. The recipients are:

• Payment institutions and banks, to take the payment. We do not see or store your full card number.
• Our accountant and, where the law requires it, the tax authority.
• Domain registries and registrars, where you register a domain — a registration cannot be made without the registrant details the registry requires.
• Courts, prosecutors and public authorities, where a request is made in the form the law requires. We do not hand over customer data on an informal request.
• Cloudflare, which serves this website. Requests to serverq.net pass through its network, so it processes the IP address of anyone who visits. Your servers are not behind it unless you put them there.
• Tawk.to, which provides the chat widget on this website, if you open a chat. Anything you type into it goes to that provider.

5. Transfer abroad

Customer records and the servers in the Istanbul location are in Türkiye: Equinix IL4, İstanbul. Two things do leave the country. Cloudflare and Tawk.to are operated from outside Türkiye, so data reaching them is processed abroad; and if you order a server in our New York location, the data you put on it is in the United States because that is where the machine is.

Which location your data sits in is your choice, and it is a choice worth making deliberately if you have a contractual or regulatory reason to keep data in Türkiye. Ask us and we will tell you exactly where a given service is before you order it.

6. How long it is kept

• Invoices and accounting records: ten years, which is the period the Turkish Commercial Code and the Tax Procedure Law require.
• Traffic records kept under Law 5651: for the period that legislation prescribes, and not longer.
• Account and contact details: while you are a customer, and for the limitation period afterwards in case of a dispute.
• Support tickets: three years from closure, so that a recurring fault can be traced.
• Server contents: deleted after the service terminates. This is why your own backup matters — once it is gone we cannot produce it for you either.
• Marketing consent records: kept while the consent stands and for as long afterwards as is needed to prove it was given and withdrawn.

7. Your rights under Article 11

You have the right to:

• learn whether personal data about you is processed, and if so request information about it;
• learn the purpose of the processing and whether it is used in line with that purpose;
• know the third parties, in Türkiye or abroad, to whom it has been transferred;
• have it corrected if it is incomplete or wrong, and have that correction notified to those it was transferred to;
• have it deleted or destroyed where the reasons for processing it have disappeared;
• object to a result produced solely by automated analysis that works against you;
• claim compensation for damage caused by unlawful processing.

8. How to exercise them

Applications are made under the Communiqué on the Procedures and Principles of Application to the Data Controller. Write in Turkish or English, state which right you are exercising and give enough detail for us to identify you, and send it by one of these routes: in writing to Yeşilköy Mahallesi, Atatürk Caddesi No: 12, EGS Business Park B3 Blok Daire: 268, Bakırköy / İstanbul, Türkiye; by registered electronic mail to [email protected]; or from the e-mail address already registered on your account to [email protected].

We answer within thirty days at the latest, and free of charge unless the response requires a cost, in which case the tariff set by the Personal Data Protection Board applies. If you are not satisfied with the answer, or we do not answer in time, you may complain to the Kişisel Verileri Koruma Kurulu within the periods set out in Article 14.