Privacy and personal data

01Data controller

Data controller

Çağlayan Doğan, trading as Laynstack.

Address

Kızılırmak Mah. Dumlupınar Blv. NextLevel No: 3/A İç Kapı No: 11, 06510 Çankaya / Ankara, Türkiye

Email

info@laynstack.com

This notice covers laynstack.com. Where we have signed a contract with you, the data terms in that contract come first.

02What we process and why

What you type into the contact form: your name, your email address, optionally your company, and your message. There is a single purpose, which is to receive your enquiry and reply to it. The form has no other fields.

If you email us directly instead, that correspondence is processed for the same purpose.

The site sets no cookies. There is no analytics, tracking or advertising tool, and nothing runs in the background of these pages to collect anything else.

03Service providers and international transfers

The message and contact details you submit through this website are processed through Laynstack's Hostinger VPS infrastructure, located in Frankfurt, Germany, and through the Hostinger Email service, for the purpose of responding to the request. This infrastructure is used only for the Laynstack website and its contact process. There is no marketing tool, CRM or form service in between.

Hosting

Hostinger. The site runs on Hostinger's VPS infrastructure in Frankfurt, Germany.

Email

Hostinger Email.

The website and its email run with a single provider, Hostinger. Because the email service runs on servers outside Türkiye, your message is processed abroad. Beyond that we share your data with nobody. We do not sell it and we do not use it for advertising.

Data in client projects

For systems we build for clients, the server, the data-hosting location and the email service are determined separately, according to the project requirements and the applicable agreement. Production data that has to remain in Türkiye is hosted in the client's own infrastructure in Türkiye, or on Türkiye-based servers agreed by the parties. Client production data is not stored in the Laynstack website infrastructure or in the Laynstack corporate mailbox unless separately agreed.

04Retention periods

Website enquiries that go no further

At most 90 days after the last message.

Security and error logs

At most 14 days.

A submitted message is not held in the site's database and leaves no copy on the server. If delivery fails, the content of the message is not written anywhere: you are shown an error and the address to write to directly.

Where a conversation turns into a project, the correspondence is kept for as long as the contract and the relevant statutory retention obligations require.

To have it deleted sooner, email info@laynstack.com. You do not need to give a reason.

These periods cover the website contact process only. In client projects, retention, access, backup and deletion are set separately by the project agreement and the technical architecture.

05Security and logs

The site is served over HTTPS only. The server access log is switched off for ordinary visits: the pages you look at, your IP address and your browser details are not recorded in normal use.

When something fails, or a request is refused for security reasons, an IP address, the requested path and a timestamp may be recorded. Those entries exist only to keep the system running and safe. They are not used for analytics or advertising, and they are deleted after at most 14 days.

Application logs never carry your name, your email address, the content of your message or any mail account details.

06Your rights and how to reach us

Article 11 of the KVKK gives you the right to see the data we hold about you, to have it corrected or deleted, and to object to it being processed. If you are in the EU, the same rights apply under the GDPR.

Email info@laynstack.com and that is enough to start. We answer within one month at the latest. If our answer does not satisfy you, you can go to the Turkish Personal Data Protection Authority under the KVKK, or to the supervisory authority in your country under the GDPR.