Privacy Policy

This policy explains general privacy principles for Civema’s website, client area and hosting, domain and server services. For account and transaction processes, the data controller is Civema Hosting ve Bilişim Teknolojileri A.Ş.. Contact: [email protected]; +90 242 606 26 02. Address: Yenigün Mah. Kızılırmak Cad. No:22 İç Kapı No:47, Muratpaşa / Antalya, Türkiye.

1. Scope and notices

Specific notices are also provided for registration, ordering, support and other data collection processes. Visiting the site or accepting a contract does not constitute consent to every processing activity that requires explicit consent.

2. Information and collection methods

Where necessary, we process name, company, contact and billing details; orders, payment status and transaction references; and support correspondence. IP addresses, session and access times and browser-related technical records may be used for security and service operation. Information is obtained through forms, the client area, support channels, payment notifications and infrastructure logs. Identity or tax information is collected only where required for the transaction or legal obligation.

3. Purposes and legal grounds

Account setup, ordering, service activation and support are performed where necessary to enter into or perform a contract. Billing and statutory records are based on legal obligations. Dispute records may be needed to establish, exercise or defend rights. Security and fraud prevention rely on legitimate interests balanced against individual rights or another applicable legal basis. Explicit consent is obtained separately where required. Marketing permission is assessed separately from purchasing a service.

4. Payment information

Payment providers such as iyzico operate their secure payment interfaces under their own legal obligations. Civema uses results, amounts and references needed to match payments to orders or process refunds. Card numbers, security codes, passwords and one-time authentication codes are not requested through email or support tickets.

5. Sharing and transfers

Necessary information may be shared for limited purposes with payment and banking institutions, infrastructure and data centre providers, domain or certificate providers involved in an order and necessary professional advisers. Disclosure to authorities requires a lawful request or obligation. Where international transfers take place, the relevant requirements of Turkish Law No. 6698 and applicable notice obligations must be met. This policy alone is not permission for an international transfer.

6. Hosted content and access

Access to websites, email, databases and server content is limited to what is required for service operation, authorised support, security response or legal obligations. Customers are responsible for notices, lawful grounds and safeguards relating to their own users. Responsibilities may be separately documented where Civema processes data on a customer’s behalf.

7. Retention and security

Information is retained for the period required by its purpose and applicable law. Accounting records, hosted content and security logs may have different retention periods. When retention is no longer justified, appropriate deletion, destruction or anonymisation is applied. Closing an account does not require immediate deletion of legally required records. Alongside technical and organisational safeguards, users must protect credentials and report suspicious activity.

8. Cookies

Cookies may be used for sessions, security and essential functionality. Non-essential analytics or advertising tools require the applicable notices and permission mechanisms. Cookies can be managed through browser settings and available site preferences. Blocking essential cookies may affect sign-in and ordering.

9. Your rights and requests

Under Article 11 of Turkish Law No. 6698, you may request information about whether and why your data is processed, its use and recipients; correction of incomplete or inaccurate data; deletion or destruction when conditions are met; notification of relevant recipients; objection to adverse outcomes based solely on automated analysis; and compensation for damage caused by unlawful processing.

Send a request identifying yourself and its subject to our address in writing, from an email address previously registered with us to [email protected], or through another legally accepted method. Necessary identity checks may apply. Requests are handled as soon as possible and within 30 days, with charges only where legally permitted. Rights to complain to the competent authority and use other legal remedies remain unaffected.

10. Updates

We may update this policy as services or legal requirements change. Additional notices and separate consent are provided where required for new or changed processing.