Privacy Policy
Learn how BurtiNET collects, uses, and protects your personal data. Your privacy is our priority.
Introduction and Scope
This Privacy Policy sets out the terms governing the processing of your personal data in connection with the websites, membership system, hosting and all related digital services provided by BurtiNET Internet and IT Services (“BurtiNET”). We recommend that you read this text before using our site or benefiting from our services. If you do not accept this policy, we kindly ask you not to carry out any transactions on our company’s site.
This Privacy Policy applies only to domain names and pages belonging to BurtiNET; it is not binding for third-party sites that do not belong to our company. By accepting this text, you are deemed to have accepted BurtiNET’s privacy terms. The policy applies to all subsections and pages of BurtiNET.
BurtiNET is a hosting and IT services provider operating within the borders of the Republic of Turkey. Your personal data is processed in accordance with Law No. 6698 on the Protection of Personal Data (KVKK) and related legislation.
Data Controller and Legal Basis
BurtiNET is the data controller with respect to your personal data. Your personal data is processed in accordance with the conditions set out in Articles 5 and 6 of the KVKK, where it is necessary for the establishment and performance of the service relationship, for the fulfilment of contractual and legal obligations, where we have a legitimate interest, and where you have given your explicit consent.
This policy has been prepared within the framework of Law No. 6698 on the Protection of Personal Data, the decisions of the Personal Data Protection Board and other relevant legislation in force in the Republic of Turkey.
Personal Data Collected and Purposes of Processing
BurtiNET collects only the personal data necessary to provide you with a high-quality and secure service. The table below summarizes which categories of data are processed and for what purposes.
| Data Category | Purpose of Processing | Legal Basis |
|---|---|---|
| Identity and contact details (first name, last name, e-mail, telephone, address) | Account creation, order and support processes, invoices and notifications | Performance of the contract, legal obligation |
| Turkish national identification number | Issuing invoices and submission to legal authorities (as required by law) | Legal obligation |
| Technical and session data (IP, cookies, device information) | Site operation, security, statistics | Legitimate interest, explicit consent |
| Payment and billing information | Payment transactions (card details are not stored) | Performance of the contract |
Information provided by member users, such as address, telephone and technical support e-mail address, is not passed on to third parties unless requested by official authorities.
Cookies and Payment Security
Cookies
BurtiNET sites may place cookies on visitors’ devices. These cookies can be read only through BurtiNET domain names and are used for the operation and security of the site and for compiling statistical information; they are not used to track visitors’ activities outside the site or for advertising purposes.
- Cookies may be placed on the device used by member companies to log in to the system; this information is used only to maintain sessions and remember preferences.
- You can restrict cookies through your browser settings; in that case, your ability to use the site fully may be limited.
Credit Card and Payment Information
For payments made by credit or debit card, your card details are not stored on our systems; the information is transmitted directly and securely to the relevant bank via the payment infrastructure. Your data is encrypted on payment pages using an SSL certificate.
Transfer and Sharing of Personal Data
BurtiNET shares the personal data it collects only in the following cases and in compliance with the legislation:
- Legal obligation: Within the scope of court orders, public prosecutor requests or written requests from legally authorized public institutions and organizations.
- Service providers: Sharing with data processors such as payment institutions and parties providing server and infrastructure services, within the framework of the contract and security measures compliant with the KVKK.
- Explicit consent: Where your explicit consent has been obtained for a specific sharing of data.
The site undertakes not to provide its members’ information to third parties unless an official request is received from judicial authorities. Statistical or anonymous data (number of visits, general usage data, etc.) is not shared in a way that reveals your identity.
Data Subject Rights under the KVKK
Pursuant to Article 11 of Law No. 6698, you have the following rights. To exercise these rights, you may apply to BurtiNET in writing or by other methods determined by the Board.
- To learn whether your personal data is being processed,
- To request information about the processing, if it has been processed,
- To learn the purpose of the processing and whether the data is used in accordance with that purpose,
- To know the third parties to whom the data is transferred, domestically or abroad,
- To request the rectification of incomplete or inaccurately processed data,
- To request erasure or destruction within the scope of Article 7 of the KVKK,
- To request that rectification, erasure or destruction operations be notified to third parties,
- To object to a result arising against you due to the analysis of the processed data exclusively by means of automated systems,
- To request compensation for damages arising from unlawful processing.
Your applications will be concluded as soon as possible, depending on the nature of the request, and within the periods stipulated in the Law. BurtiNET is obliged to respond to data subject requests in accordance with the proper procedure.
Security Measures and Legal Disclaimer
BurtiNET takes technical and administrative measures to prevent the unlawful processing of personal data, unauthorized access and data loss. Although the technical environments in which the site is hosted are protected by software and infrastructure, security is limited to internet and computer security; no system can be guaranteed to be 100% secure.
- The necessary measures are taken, and informative publications are made, to reduce the risks of misuse or unauthorized access.
- Where a data security breach is detected, it is among our principles to notify the relevant parties in writing within 24 hours at the latest, as required by the legislation.
- Legal requests from judicial authorities requiring the disclosure of personal data are assessed within 48 hours at the latest and are fulfilled within the legal framework.
BurtiNET is obliged to cooperate with the legal authorities. When a request is made by the official authorities in accordance with the proper procedure, customer information may be shared within the legal framework; in that case, it may not always be possible to notify the customer in advance.
Changes to the Policy and Contact
Changes
This Privacy Policy may be updated by BurtiNET. Changes take effect as soon as they are published on this page. We recommend that you check the current text periodically. Your continued use of the services means that you accept the current policy.
Contact
You can contact BurtiNET with any questions about our privacy policy, the processing of your personal data or your rights under the KVKK. The e-mail address or addresses to which you can send your written applications are provided on the official BurtiNET website and in the customer panel.
The security and privacy information on this page may be updated by BurtiNET. As a BurtiNET member or visitor, you are deemed to have read and accepted this Privacy Policy, which protects your rights.
