Skip to content
  1. Home
  2. Legal

Personal Data Notice (KVKK)

Information under Turkish Personal Data Protection Law No. 6698 on the personal data processed in the website, membership, sales and support processes.

This translation is provided for information. In case of any conflict, the Turkish version prevails.

This notice is provided by Listonya ("Listonya", "Company") as data controller under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK").

1. Data controller

Company Listonya
Address S.Ü. Teknokent Binası, 42015, Konya, Türkiye
MERSIS No. [MersisNo]
E-mail [email protected]
Registered e-mail (KEP) [KepAdresi]

2. Categories of personal data

  • Identity: name, surname.
  • Contact: e-mail address, phone number, address.
  • Customer transaction: company name, selected package, number of users and languages, domain, theme preference, request and message content, order number.
  • Financial: billing details, tax office and number, payment amount and result. Card details are not processed by Listonya; they are collected by the payment institution PayTR.
  • Transaction security: IP address, date and time, browser information, session records, irreversible password hash, verification codes.
  • Marketing: commercial communication permission, only if you give explicit consent.

3. Purposes

Creating and managing membership accounts; concluding and performing the subscription agreement, payment and invoicing; setting up the customer's panel, website, domain and corporate e-mail; answering contact and quote requests and providing support; ensuring information security and preventing abuse and fraud; fulfilling legal obligations; protecting rights in disputes; sending announcements where you have consented.

Data is collected through the membership, sign-up, contact and quote forms, the payment page, e-mail and phone, partly by automated means. Legal grounds under KVKK Art. 5(2): (c) establishment or performance of a contract, (ç) legal obligation, (e) establishment, exercise or protection of a right, (f) legitimate interest (security, abuse prevention, service quality). Commercial electronic messages are sent only with your consent.

5. Transfers

Data may be transferred, only as necessary, to: the payment institution PayTR; hosting, e-mail and SMS service providers; domain registrars (if you request a domain); accountants, lawyers and auditors; and competent public authorities and courts where required by law.

Transfers abroad: Cloudflare Turnstile (bot protection on forms) and the font service used on the site (Google Fonts) cause your IP address and technical browser information to be sent to servers abroad. These transfers are carried out in accordance with Article 9 of KVKK.

6. Retention

Membership and subscription records: for the term of the agreement and 10 years after it ends; accounting records: as required by tax law; contact and quote requests: 2 years if no agreement is made; access and security logs: as required by Law No. 5651. Data is then deleted, destroyed or anonymised.

7. Your rights

Under Article 11 of KVKK you may learn whether your data is processed, request information, learn the purpose and whether it is used accordingly, know the recipients in Turkey or abroad, request correction, deletion or destruction and notification of these to recipients, object to adverse results of solely automated analysis, and claim compensation for unlawful processing. See the Data Subject Request Procedure page. Requests are answered free of charge within 30 days at the latest.

8. Data on customer websites

For personal data collected by Listonya customers through their own websites and panels, the respective customer is the data controller and Listonya acts as data processor. Please refer to that company's privacy notice.