Data controller and scope
This notice explains the processing of personal data in connection with the hosted.technology website, which is operated by Hosted Teknoloji A.Ş., and the contact form available on the site.
Data controller: Hosted Teknoloji A.Ş., Barbaros Mah. Begonya Sk. Nidakule Ataşehir Batı Blok No:1 İç Kapı No:2, Ataşehir/İstanbul, Türkiye. This notice covers only the website and its contact form. Separate information is provided for data processing associated with other products and services, where applicable.
Data we process
When you submit the contact form, the information below is processed. Please do not include special categories of personal data, passwords, access keys, or information about third parties that is unrelated to your request in the message field.
- Identity and contact details: first name, last name, business email address, and an optional telephone number.
- Professional and organisational information: company name is optional; the service of interest and project stage are required selections in the form.
- Request details: the project, requirement, or issue you describe in the form.
- Technical records generated during a site visit: IP address, browser and device information, request time, page accessed, referring page, and network or security-event records.
- Form submission and consent records: the time and page of submission, consent to data processing, the version of the privacy notice displayed, and campaign parameters where present.
How we collect data and why we use it
Form data is collected electronically and directly from you. Technical records are generated automatically through the web server and security controls.
- To review your request, direct it to the appropriate area of expertise, and contact you.
- To conduct the preliminary assessment required for a proposal or project discussion.
- To identify misuse of the form, automated submissions, and security incidents.
- To maintain the communication record, protect rights in the event of a dispute, and meet applicable legal obligations.
Legal grounds
The contact and request information you provide through the form is processed on the basis of the explicit consent you give before submission, for the purposes of assessing your request and contacting you. Your consent is recorded together with the version of the notice shown and the time of consent.
If your request develops into a proposal or contract discussion, records necessary to take steps directly related to entering into a contract may also be processed on that legal ground.
Technical records retained for website and form security are processed on the basis of legitimate interests, provided that this does not prejudice your fundamental rights and freedoms, to prevent misuse, protect the service, and investigate technical issues.
Records required by law may be retained to comply with a legal obligation. Records relating to a request or dispute may be retained for the establishment, exercise, or protection of a right.
The explicit consent requested in the form is not consent to advertising, commercial electronic communications, or bulk marketing. If such communications are planned, the required notice and consent process will be handled separately.
Sharing personal data
Data may be shared with authorised Hosted personnel involved in handling the request and, only to the extent required for the service, with hosting, database, email, and security service providers. It may also be shared with authorised public authorities and courts where there is a legal obligation, or with lawyers and relevant advisers where necessary for the establishment, exercise, or protection of a right.
Cloudflare may be used to route and secure website traffic, Microsoft 365 for corporate email, and, depending on the configuration, Amazon Simple Email Service (Amazon SES) to deliver form notifications. Because of the technical structure of these services, certain technical and communication records may be processed outside Türkiye. Where an international transfer is required, one of the conditions under Article 9 of Personal Data Protection Law No. 6698 and any applicable transfer safeguards will be relied upon.
Retention
Communication records are retained only for as long as necessary to complete the request, manage any proposal or contract process, and observe the relevant limitation periods. Security records are retained for the limited period needed to investigate incidents and protect the system. Backup copies are deleted when the applicable backup cycle is complete.
When the purpose of processing has ended and no other legal obligation requires the data to be retained, records are deleted, destroyed, or anonymised using an appropriate method.
If an ongoing customer relationship is established, the relevant records may be subject to separate retention rules for contract and service processes.
Security approach
Technical and organisational measures such as authorisation controls, access restrictions, logging, updates, and backups are applied according to the nature of the data. Transmission over the internet cannot be guaranteed to be entirely risk-free, so passwords or confidential system access details should not be shared through the form.
Your rights
Subject to the conditions under Article 11 of Personal Data Protection Law No. 6698, you may submit a request in relation to the matters below.
- Learn whether your personal data is being processed and, if so, request information about that processing.
- Withdraw your consent in relation to processing based on explicit consent.
- Learn the purpose of processing and whether the data is being used in accordance with that purpose.
- Learn which third parties have received the data.
- Request the correction of incomplete or inaccurate data.
- Request deletion or destruction where the conditions under the law are met.
- Request that the correction, deletion, or destruction be notified to third parties to whom the data has been transferred.
- Object to a result arising against you from the analysis of processed data exclusively through automated systems.
- Request compensation for loss resulting from the unlawful processing of personal data.
Requests and contact details
You may send your request to privacy@hosted.technology using an email address previously registered in our systems, or submit it in writing to the company address. We may ask for information sufficient to verify your identity and identify the data covered by your request.
Requests are resolved free of charge as soon as possible and no later than 30 days, depending on their nature. If processing the request gives rise to an additional cost, a fee permitted by applicable law may be charged. Contact: privacy@hosted.technology · +90 444 0572.
Changes to this notice
This notice is updated when the website’s data-processing activities or applicable rules change. The current version is published with its update date at the top of this page.