Skip to content
laynstack

Legal

Privacy and personal data

This notice explains which personal data is processed when you visit the site or fill in the contact form, why it is processed, how long it is kept and what you can ask us to do about it. It is written against both Turkish law no. 6698 on the protection of personal data (KVKK) and the EU General Data Protection Regulation (GDPR).

No cookies at all: no analytics, no tracking, no ad tools, and nothing written to your browser. We only receive data when you write to us.

Framework
KVKK + GDPR
Cookies
No cookies
Last updated
6 September 2026

01Data controller

Data controller
Çağlayan Doğan, trading as Laynstack.
Address
Kızılırmak Mah. Dumlupınar Blv. NextLevel No: 3/A İç Kapı No: 11, 06510 Çankaya / Ankara, Türkiye
Email
info@laynstack.com

This notice covers laynstack.com. Where we have signed a contract with you, the data terms in that contract come first.

02What we process and why

What you type into the contact form: your name, your email address, optionally your company, and your message. There is a single purpose, which is to receive your enquiry and reply to it. The form has no other fields.

If you email us directly instead, that correspondence is processed for the same purpose.

03Cookies and browser storage

This site sets no cookies. There is no analytics, tracking or advertising tool, and no use of local storage (localStorage, sessionStorage) or browser databases either. Pages load entirely from our own server, with no external scripts and no external fonts requested. Nothing belonging to this site is written to your browser at all.

That is why you are never asked to accept anything here. Asking for consent where no processing depends on it is treated as a misleading practice in the Turkish Data Protection Authority's guidance on cookies — and a question we do not ask produces no answer we would then have to store.

If a measurement or marketing tool is ever added, this section will list every cookie by name, provider, purpose and lifetime, and a preference screen will appear alongside it; nothing will run before you allow it. This notice and that screen are generated from the same source, so one cannot be updated while the other is left behind.

04Service providers and international transfers

The message and contact details you submit through this website are processed through Laynstack's Hostinger VPS infrastructure, located in Frankfurt, Germany, and through the Hostinger Email service, for the purpose of responding to the request. This infrastructure is used only for the Laynstack website and its contact process. There is no marketing tool, CRM or form service in between.

Hosting
Hostinger. The site runs on Hostinger's VPS infrastructure in Frankfurt, Germany.
Email
Hostinger Email.

The website and its email run with a single provider, Hostinger. Because the email service runs on servers outside Türkiye, your message is processed abroad. Beyond that we share your data with nobody. We do not sell it and we do not use it for advertising.

Data in client projects

For systems we build for clients, the server, the data-hosting location and the email service are determined separately, according to the project requirements and the applicable agreement. Production data that has to remain in Türkiye is hosted in the client's own infrastructure in Türkiye, or on Türkiye-based servers agreed by the parties. Client production data is not stored in the Laynstack website infrastructure or in the Laynstack corporate mailbox unless separately agreed.

05Retention periods

Website enquiries that go no further
At most 90 days after the last message.
Security and error logs
At most 14 days.

A submitted message is not held in the site's database and leaves no copy on the server. If delivery fails, the content of the message is not written anywhere: you are shown an error and the address to write to directly.

Where a conversation turns into a project, the correspondence is kept for as long as the contract and the relevant statutory retention obligations require.

To have it deleted sooner, email info@laynstack.com. You do not need to give a reason.

These periods cover the website contact process only. In client projects, retention, access, backup and deletion are set separately by the project agreement and the technical architecture.

06Security and logs

The site is served over HTTPS only. The server writes every incoming request to an access log: the path requested, the date and time, the response code, and your IP address with its last segment removed. A visit from 203.0.113.45 is recorded as 203.0.113.0; your full address is never written to disk.

Your browser, its version and your operating system (the User-Agent) are not recorded. That combination is close to a fingerprint on its own, so it never reaches the log.

These entries exist only to keep the system running and safe: so a failing page can be seen, and an automated scan against the site can be noticed. They are not used for analytics, measurement or advertising, they are shared with nobody, and they are deleted automatically after 14 days.

Application logs never carry your name, your email address, the content of your message or any mail account details.

07Your rights and how to reach us

Article 11 of the KVKK gives you the right to see the data we hold about you, to have it corrected or deleted, and to object to it being processed. If you are in the EU, the same rights apply under the GDPR.

Email info@laynstack.com and that is enough to start. We answer within one month at the latest. If our answer does not satisfy you, you can go to the Turkish Personal Data Protection Authority under the KVKK, or to the supervisory authority in your country under the GDPR.