Disclosure Statement Regarding the Personal Data Protection Law

INTERNIC INFORMATION TECHNOLOGIES LIMITED COMPANY (Data Controller), considering the security of your valuable users as a priority and in line with the Personal Data Protection Law* (“Law”) established to protect fundamental rights and freedoms, especially the privacy of private life, within the scope of our disclosure obligation;

In accordance with the Law, your personal data is recorded and stored by the Data Controller and Processor for the establishment of the service relationship, ensuring the continuity of the service, the performance of our services, and other legal obligations.

Within this context, as the Data Controller, personal information may be obtained, recorded, preserved, updated, rearranged, disclosed to third parties to the extent permitted by the relevant legislation, transferred, shared, and processed in other ways specified in the Law.

Your personal data includes information that identifies you such as your name, surname, address, contact numbers, ID number, invoice details, questions directed to you by our customer representatives, your responses, requested transactions, access and traffic information, necessary for you to benefit from our service contracts.

Your personal data may be collected during the creation of user records, when utilizing call center services for your user security, recording information requested by our customer representatives, and submitting documents such as certified domain names and other services.

Special categories of personal data include data related to individuals' race, ethnic origin, political opinions, philosophical beliefs, religion, sect, or other beliefs, appearance, association membership, health, sexual life, criminal conviction, and security measures, as well as biometric and genetic data.

As a general rule, our company does not request or process special category data from its users. However, in cases where information and data necessary for registration are obligatory for third parties or organizations according to their policies, such data might be recorded in a limited manner. For instance, in the case of requested identity proof for certified domain names containing a "religion" field, it might fall under special category data by the nature of the document, even if the purpose is not to record your special category data.

Your personal data, limited to information mandatory to be public by domain name registration authorities, may be shared with individuals, institutions, organizations allowed by legislation, and other third parties to the extent necessary for conducting company activities, our domestic or international subsidiaries, legal units, financial advisors, our call center, consultants, and establishments with which we collaborate.

Subject to the exceptions specified in Article 28 of the Law, your rights that you can exercise by applying to our Company in accordance with Article 11 of the Law are as follows:

1. To learn whether your personal data is processed,
2. To request information if your personal data has been processed,
3. To learn the purpose of processing your personal data and whether they are used appropriately for their purpose,
4. To know the third parties to whom your personal data is transferred domestically or abroad,
5. To request the correction of your incomplete or incorrect personal data, and under the conditions stipulated in Article 7 of the Law, to request the deletion or destruction of personal data,
6. To request that the operations carried out in accordance with paragraphs (d) and (e) are notified to third parties to whom your personal data has been transferred,
7. To object to the occurrence of a result against you through the analysis of your processed data exclusively by automated systems,
8. In case you incur damages due to the unlawful processing of your personal data, to request the compensation of your damages.

We would like to note that we reserve the right to request the expenses to be incurred by our Company in fulfilling your requests, as described in the tariff specified in Article 13 of the Law on Data Controllers.

You can review which data we process here.

* Law No. 6698 on the Protection of Personal Data, published in the Official Gazette dated April 7, 2016, and numbered 29677, effective as of the publication date