Privacy Policy

PERSONAL DATA COLLECTED

The following personal data may be collected for the purpose of providing services and fulfilling legal obligations:

1. Identity Information

• First name, last name
• National ID number (individual customers)
• Tax identification number and trade registry information (corporate customers)

2. Contact Information

• Email address
• Phone number
• Postal address

3. Financial Information

• Invoice details and payment history
• Bank account details (for bank transfer / EFT payments)

Important: Your credit card details are not stored by GalaxyShell. All card payments are processed through PCI DSS-compliant secure payment infrastructure.

4. Technical Data

• IP address
• Browser type and version
• Operating system information
• Access date and time
• Pages visited and click data
• Cookie data

5. Service Data

• Server usage statistics
• Support ticket records and correspondence
• Domain WHOIS information
• DNS configuration records

PURPOSE OF DATA USE

Collected personal data is processed for the following purposes:

1. Service Delivery

• Setup and management of purchased hosting, server, domain and other services.
• Providing access to the customer panel.
• Providing technical support services.

2. Contractual and Payment Operations

• Establishment and performance of the service agreement.
• Issuing invoices and processing payments.
• Sending renewal notifications.

3. Communication

• Service announcements and technical notifications.
• Responding to support requests.
• Notifying customers of planned maintenance windows.

4. Legal Obligations

• Maintaining access logs in compliance with applicable internet law.
• Responding to requests from competent authorities (courts, prosecutors, etc.).
• Fulfilling obligations under tax legislation.

5. Security and Improvement

• Detecting fraud and unauthorized access.
• Ensuring and monitoring system security.
• Improving service quality.
• Enhancing website usability.

Note: GalaxyShell does not use your personal data for purposes other than those stated above. Marketing communications are only sent with your explicit consent.

DATA SHARING

Your personal data will not be shared with third parties except in the following circumstances:

1. Legal Obligations

Your personal data may be transferred to relevant authorities pursuant to court orders, prosecution requests or legal notifications from competent authorities.

2. Domain Registration Operations

For domain registration and renewal operations, the information required by domain registrars such as ICANN and Nic.tr is shared. This information may become publicly visible in the WHOIS database.

3. Payment Processors

Only the information strictly necessary for processing the payment is shared with payment infrastructure providers for credit card and bank payments.

4. Data Center Partners

Technical information necessary for service delivery may be shared with our infrastructure providers. This sharing is limited solely to the purpose of technically providing the service.

5. Business Partners

Necessary information is shared with the relevant license providers for software licenses (cPanel, Plesk, CloudLinux, etc.) and SSL certificates.

Important: GalaxyShell will never sell or rent your personal data to third parties for advertising or marketing purposes under any circumstances.

DATA SECURITY

GalaxyShell applies industry-standard technical and administrative security measures to protect the personal data collected.

1. Technical Security Measures

• SSL/TLS Encryption: Our website and customer panel are protected with a 256-bit SSL certificate. All data transfers are encrypted.
• Firewall: Our servers are protected with advanced firewall systems.
• DDoS Protection: Our data centers are equipped with DDoS attack protection infrastructure.
• Encrypted Storage: Sensitive data is stored in encrypted form.
• Regular Backups: Data is backed up at regular intervals.

2. Administrative Security Measures

• Access Control: Personal data is accessible only by authorised personnel. Access rights are restricted according to role definitions.
• Staff Training: Our employees receive regular training on data security and privacy.
• Confidentiality Agreements: All employees and business partners sign confidentiality agreements.
• Regular Audits: Our security policies and practices are reviewed periodically.

3. Data Center Security

The data centers in Turkey, Germany (Düsseldorf), England, France, the Netherlands and the United States through which we provide our services are equipped with physical security, 24/7 monitoring, uninterruptible power supply (UPS), generator support and fire suppression systems.

Security Breach Notification: In the event of a potential data breach, the relevant individuals and the appropriate data protection authority will be notified as soon as possible in accordance with applicable legal requirements.

COOKIE POLICY

The GalaxyShell website uses cookies to improve user experience and enhance service quality.

1. What is a Cookie?

Cookies are small text files sent to your browser by websites you visit and stored on your device. Cookies are used to recognise you on your next visit, remember your preferences and analyse site usage.

2. Types of Cookies Used

• Essential Cookies: Cookies required for the website to function properly. Used for session management, security and cart operations. These cookies cannot be disabled.
• Performance Cookies: Help us understand how visitors use the site. Anonymous data such as page load times and error reports are collected.
• Functionality Cookies: Remember your personalised settings such as language preference and region selection.
• Analytics Cookies: Used to anonymously analyse site traffic and user behaviour through tools such as Google Analytics.

3. Managing Cookies

You can refuse to accept cookies or delete existing cookies through your browser settings. However, disabling essential cookies may cause some website functions to not work properly.

Cookie settings in common browsers:

• Chrome: Settings > Privacy and security > Cookies
• Firefox: Settings > Privacy & Security > Cookies
• Safari: Preferences > Privacy > Cookies
• Edge: Settings > Privacy > Cookies

4. Third-Party Cookies

Cookies from third-party services such as Google Analytics, live support tools and social media plugins may also be used on our website. These cookies are subject to the privacy policy of the respective third party.

YOUR DATA PROTECTION RIGHTS

You have the following rights under applicable personal data protection legislation:

• To learn whether your personal data is being processed.
• To request information about the processing of your personal data.
• To learn the purpose of processing and whether data is being used in accordance with that purpose.
• To know the third parties to whom your personal data is transferred domestically or internationally.
• To request correction of incomplete or incorrectly processed personal data.
• To request deletion or destruction of your personal data within the applicable legal framework.
• To request notification to third parties to whom your data has been transferred regarding corrections, deletions or destructions.
• To object to the emergence of a result against you arising solely from automated processing of your data.
• To claim compensation if you suffer damage due to unlawful processing of your personal data.

Legal Bases for Processing

Your personal data is processed on the following legal bases:

• Necessity for the establishment and performance of a contract.
• Compliance with a legal obligation.
• Legitimate interests of the data controller.
• Explicit consent of the data subject.

How to Submit a Request

To exercise the rights above, you may submit a written request to [email protected] along with information to verify your identity. Your request will be processed free of charge within a maximum of 30 days. Where processing requires an additional cost, the applicable fee schedule set by the competent data protection authority will apply.

DATA RETENTION PERIOD

Personal data is retained for the duration required by the purpose of processing. Retention periods are determined according to the following criteria:

1. During the Service Period

All data necessary for service delivery is retained for as long as the customer relationship continues.

2. Statutory Retention Periods

• Invoice and accounting records: 5 years under applicable tax legislation.
• Access logs: 2 years under applicable internet law.
• Contract records: 10 years under applicable civil obligations law.
• Commercial electronic communication consents: 3 years under applicable legislation.

3. After Service Termination

After the service relationship ends, personal data is retained for the period required by legal retention obligations. Once these periods expire, data is securely deleted, destroyed or anonymised.

4. Deletion and Destruction

GalaxyShell deletes, destroys or anonymises personal data whose retention period has expired or whose processing purpose has ceased, either on its own initiative or upon the request of the relevant person, in accordance with applicable data protection legislation and regulations on the deletion, destruction or anonymisation of personal data.

CONTACT

You can contact us for questions about our privacy policy, requests relating to your personal data or complaints.

Data Controller

GalaxyShell Internet Technologies
Ermenek mh. Kuleli 3 sk. No:7
Muratpaşa / ANTALYA
Turkey

Email

General: [email protected]
Data Protection Requests: [email protected]

Phone

0850 466 66 07

Web

galaxyshell.com
galaxyhosting.com.tr

You may submit your data protection requests, along with documents to verify your identity, via the contact channels above. Your requests will be reviewed and concluded within the legally prescribed timeframes.

You can also review all our agreements and policies on our Service Agreements page.