Privacy Policy and Data Protection Notice
Last updated: 21/10/2026
This notice is provided by FiBERNET TEKNOLOJİ LTD (the "Company") to inform you how your personal data is processed, for which purposes and on which legal grounds, in line with Article 10 of Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), the Turkish Republic of Northern Cyprus Personal Data Protection Law and, where applicable, the EU General Data Protection Regulation ("GDPR").
1. Data Controller
The data controller is FiBERNET TEKNOLOJİ LTD, located at Alirıza Efendi Caddesi No.8, 1st floor, Office No 11, Euro Center Ortaköy, Nicosia (Fiberserver brand and the www.fiberserver.net.tr website). Contact: [email protected] · [email protected] · +90 537 260 94 83.
2. Personal Data We Process
When you use our services and visit our website, the following categories of personal data may be processed:
- Identity data: first and last name, company name, tax office and tax number. For .tr domain registrations, the national identity number or tax number required by the applicable rules.
- Contact data: email address, phone number, billing and contact address.
- Customer transaction data: orders, services, domains, subscriptions, support requests and the correspondence they contain.
- Financial data: invoices, payment status and balance. Card details are processed by the payment provider and are not stored by the Company.
- Transaction security data: IP address, session and login records, browser and device information, security event logs.
- Marketing data: communication preferences and newsletter or campaign consents (only if you give consent).
- Cookie data: data collected through the cookies described in our Cookie Policy.
Content that customers host on their servers, hosting accounts or mailboxes is processed by the Company only to provide the service and on the customer's behalf; for that content the customer is the data controller and the Company acts as data processor.
3. Purposes and Legal Grounds
| Purpose | Legal ground |
|---|---|
| Account creation, ordering, service provisioning, domain registration, transfer and renewal | Performance of a contract (KVKK Art. 5/2-c; GDPR Art. 6(1)(b)) |
| Invoicing, payment follow-up, accounting and tax obligations | Legal obligation (KVKK Art. 5/2-ç; GDPR Art. 6(1)(c)) |
| Technical support and customer communication | Performance of a contract; legitimate interest (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)) |
| Information security, fraud and abuse prevention, system logs | Legitimate interest; legal obligation |
| Measuring and improving service quality, statistics | Legitimate interest |
| Campaign, newsletter and promotional communication; optional cookies | Explicit consent (KVKK Art. 5/1; GDPR Art. 6(1)(a)) |
| Establishing, exercising or defending legal claims; informing competent authorities | Legal claims (KVKK Art. 5/2-e); legal obligation |
4. How Data Is Collected
Your personal data is collected automatically or partly automatically through forms on our website and client area, ordering and payment processes, support requests, email and phone communication, cookies and server logs.
5. Sharing of Personal Data
Your personal data may be shared, in line with the purposes above and applicable law, with:
- Domain registrars and the registry operators of the relevant extension (including BTK and TRABİS for .tr domains);
- Payment institutions, banks and payment infrastructure providers;
- Data center, server and infrastructure providers (including our locations in Türkiye, France and Northern Cyprus);
- Email, SMS, support, licensing and billing software and service providers;
- Website analytics and advertising providers (for example Google), only within the cookies you consent to;
- Legal, accounting and audit advisors;
- Competent public authorities and judicial bodies as required by law.
Transfers are limited to what is necessary for the purpose. Some of our service providers may be located abroad; in that case transfers are made in accordance with the conditions and safeguards required by applicable law.
6. Retention
Personal data is kept for as long as the purpose of processing requires and for the periods set out in applicable legislation (for example commercial books, invoicing and tax rules). After that period it is deleted, destroyed or anonymized.
7. Data Security
The Company takes appropriate technical and organizational measures to prevent unlawful processing of and unauthorized access to personal data. In the event of a data breach, the individuals concerned and the competent authorities are notified within the periods and in the manner required by law.
8. Your Rights
Under Article 11 of KVKK (and, where applicable, the GDPR), you may apply to the Company to:
- Learn whether your personal data is processed,
- Request information about the processing,
- Learn the purpose of processing and whether it is used accordingly,
- Know the third parties to whom your data is transferred at home or abroad,
- Request correction of incomplete or inaccurate data,
- Request deletion or destruction under the conditions set by law,
- Request that corrections and deletions be notified to third parties the data was transferred to,
- Object to an outcome against you resulting from analysis exclusively by automated systems,
- Claim compensation if you suffer damage due to unlawful processing.
9. How to Apply
You can send requests about these rights, together with information verifying your identity, to [email protected] or in writing to the address above. Applications are answered as soon as possible and at the latest within thirty (30) days, depending on the nature of the request.
10. Cookies
Details about the cookies used on our website are available in our Cookie Policy.
11. Changes
This notice may be updated in line with changes in legislation or in our services. The current version is published on this page.