Terms of service

This English version is provided for convenience; the Turkish version prevails.

This agreement governs the use of the dedicated and cloud server services offered under the dor.net brand. By opening an account in the console you accept this agreement together with the Acceptable use policy, the Service level agreement, the Cancellation and refund terms, the Privacy policy and the KVKK privacy notice. Customers ordering as consumers are additionally covered by the Distance sales agreement.

1. Parties and company details

Provider: MGN Teknoloji A.Ş. ("dor.net" or the "Provider")

• Address: Fenerbahçe Mah. İğrip Sk. No: 13 İç Kapı No: 1, Kadıköy/İstanbul, Türkiye
• Tax office / number: Göztepe Tax Office / 6201650498
• MERSİS: 0620165049800001
• KEP (registered e-mail): mgnteknolojianonim@hs06.kep.tr
• E-mail: legal@dor.net
• Hosting provider (yer sağlayıcı) certificate: BTK certificate noto be filled in

Customer: the natural or legal person who opens an account in the dor.net console and accepts this agreement. A user opening an account on behalf of a legal entity represents that they are authorised to bind that entity.

2. Definitions

Console

dor.net's management interface and API at https://dor.net.

Organisation (account)

the customer account to which services, balance and invoices belong. An organisation may have several users (team members).

Dedicated server

a physical server allocated to the Customer in the data centre in Türkiye, billed in monthly periods.

Cloud server

a virtual server created on the Provider's virtualisation infrastructure, billed hourly.

Balance

the amount the Customer has loaded in advance, from which service fees are deducted.

Service period

for dedicated servers, the monthly period paid in advance.

Consumer

a natural person acting for purposes outside their trade or profession, within the meaning of Article 3 of the Consumer Protection Law No. 6502.

Annexed policies

the documents listed in the opening paragraph, which form an integral part of this agreement.

Content

any data, software or information the Customer stores, processes or transmits on its servers.

3. Subject matter and order of precedence

3.1. The subject of this agreement is the provision of the dedicated and cloud server services ordered through the console and the related ancillary services (IP addresses, network access, support).

3.2. The annexed policies form part of this agreement. In case of conflict the order of precedence is: (a) for consumers, the Distance sales agreement and pre-contractual information form; (b) this agreement; (c) the annexed policies; (d) product pages and order summaries in the console.

3.3. The agreement is drawn up in Turkish. The English translation is for convenience; in case of discrepancy the Turkish text prevails.

4. Account opening, verification and fraud prevention

4.1. Opening an account is free. The Customer warrants that the information given at registration and afterwards is accurate and current, and updates changes in the console.

4.2. To prevent abuse and payment fraud and to meet its obligations under Law No. 5651, the Provider requires account verification: e-mail verification, phone verification (one-time code), for natural persons matching of the Turkish ID number against the civil registry (NVİ) or upload of an identity document, and for legal entities the tax identification number and, where needed, proof of authority.

4.3. Orders may be placed before verification is complete; however server access credentials (root password, console access, IP allocation) are released only after verification. Unverified accounts may run a limited number of cloud servers at a time; the limit is shown in the console.

4.4. The Provider may refuse verification, request additional documents or close the account in case of stolen payment instruments, false identity, sanctions listing, repetition of a breach that led to the closure of another account, or reasonable suspicion. In that case the unused balance is refunded to the original payment source, subject to legal obligations (for example anti-money-laundering rules).

4.5. Uploaded identity documents are reviewed solely for verification and deleted no later than 90 days after the review is completed; only a record that verification took place (date, result, method) is kept. Details are in the KVKK privacy notice.

5. Account security, team accounts and API

5.1. The Customer is responsible for keeping credentials confidential and for all actions taken under the account. If the Customer suspects that credentials have been compromised it must change its password immediately and notify the Provider. The Provider is liable for damage caused by actions before such notice only to the extent of its own fault.

5.2. Two-factor authentication (TOTP) is available for all accounts and mandatory for team members. Backup codes are single-use and must be stored securely.

5.3. The organisation owner may invite team members, assign roles (owner, admin, operator, viewer and other roles defined in the console) and transfer ownership. Actions taken by team members on behalf of the organisation bind the Customer. The Customer must remove the access of people who leave its team.

5.4. API keys belong to the organisation; scope (read/write) and expiry can be set. The full key is shown only when created. The Customer agrees not to share keys with third parties, to revoke them on suspicion of leakage and to use the API within the fair-use limits (rate limits are published in the console and documentation). Actions performed through the API have the same legal effect as actions performed in the console.

6. Scope of services

6.1. Dedicated servers

• Orders are placed for servers shown as in stock in the console. There is no setup fee. The setup time is stated on the product page; the service period does not start and no fee accrues until the server is delivered.
• The service period is monthly and the fee is deducted from the balance in advance at the start of each period. Unless cancelled, the service renews on the same terms at the end of the period.
• The server comes with at least one IPv4 address and the network connection stated on the product page. In case of hardware failure the Provider replaces the faulty part with an equivalent or offers an equivalent server; data on the disks is the Customer's responsibility (see clause 12).
• The server is unmanaged: operating system, security updates, software and configuration are the Customer's responsibility. The Provider supplies network, power, cooling, hardware and remote management (reboot, rescue mode, OS reinstallation).

6.2. Cloud servers

• A cloud server is billed hourly from creation until deletion; every started hour counts in full. A server that reaches 730 hours in a calendar month is not charged further in that month; the monthly price is a cap.
• A stopped server is still billed, because its disk and IP address remain reserved for the Customer. Billing stops only when the server is deleted. Data on a deleted server cannot be recovered.
• Snapshots, additional disks, additional IP addresses and similar resources are billed separately as stated on the product page.
• When the balance falls below zero, cloud servers are suspended; no hourly fee accrues during suspension. Servers restart automatically when the balance becomes positive again.

6.3. Common provisions

• Services are provided from the data centre in Türkiye. Customer data is not moved outside Türkiye; transfers made by the Customer through its own configuration are outside this scope.
• The Provider does not access the content of the Customer's servers; it intervenes only on the Customer's express request, where legally required, or where technically necessary to protect network security, and only to the extent needed.
• Support is provided through the ticket system in the console. Support covers keeping the infrastructure operational; in-OS administration, application installation and data recovery are out of scope unless agreed separately.

7. Pricing and prepaid balance

7.1. dor.net operates a prepaid balance model. The Customer loads balance by credit card (through a licensed payment institution) or by bank transfer/EFT; service fees are deducted from the balance. Card details are not stored by the Provider.

7.2. Minimum and maximum top-up amounts per currency are shown in the console. Bank transfers are credited after the funds reach the Provider's account and are matched; the account e-mail must be written in the transfer description. Unmatched transfers are resolved by contacting the Customer using the sender details.

7.3. The balance is held to be set off against the Customer's fee obligations; it bears no interest and cannot be transferred to another account. Refund of unused balance is governed by the Cancellation and refund terms.

7.4. When the balance is expected to be insufficient for upcoming fees, the Provider sends low-balance warnings in the console and by e-mail. Failure to send a warning does not relieve the Customer of its payment obligation.

7.5. Prices are shown on product pages and in the order summary. For customers in Türkiye, TRY prices include 20% VAT. For customers established outside Türkiye, EUR/USD prices exclude VAT; tax obligations are determined by the law of the Customer's country. Statutory changes in tax rates apply from their effective date.

8. Invoicing and e-documents

8.1. For every top-up and every service period the Provider issues an e-Fatura (for e-Fatura registered taxpayers) or an e-Arşiv invoice under the Tax Procedure Law and related communiqués. Invoices can be downloaded from the console and are sent to the Customer's e-mail address or e-Fatura mailbox.

8.2. Cloud usage fees are invoiced at the end of each calendar month with a usage statement. Dedicated fees are invoiced at the start of each period.

8.3. The Customer is responsible for the accuracy of its invoicing details (name, address, tax office/number or Turkish ID number). Correction of an invoice issued with wrong details is made within the legal limits and on the Customer's request.

9. Price changes

9.1. The Provider may change prices. Price increases affecting existing services are announced at least 30 days before they take effect, in the console and to the registered e-mail address. The increase applies to service periods (dedicated) or hours (cloud) that start after the notice period has elapsed.

9.2. If the Customer does not accept the announced increase, it may cancel the service before the increase takes effect without any additional charge. Price reductions may be applied without notice.

9.3. Passing on changes in exchange rates, taxes or statutory charges directly is not a price increase; the Customer is nevertheless informed.

10. Late payment, suspension and termination

10.1. If the balance is insufficient on the renewal date of a dedicated server, the service enters "payment pending" status and the Customer is notified. The timeline is:

If balance is loaded during suspension, the suspension is lifted automatically and the period fee is deducted. The day counts are operational settings of the Provider; they are not shortened to the Customer's detriment and the current values are shown in the console and in this agreement.

10.2. For cloud servers clause 6.2 applies: suspension as soon as the balance goes negative, automatic restart when balance is loaded. If a suspension exceeds 14 days, the Provider may delete the server and release its resources after giving at least 7 days' notice by e-mail.

10.3. The Provider may also suspend a service in case of breach of the Acceptable use policy, an order of a competent authority, compromise of account security or a threat to the network. Wherever possible the Customer is notified in advance and given an opportunity to cure; in emergencies (ongoing attack, court order, serious illegality) notice may be given at the same time as the suspension. Fees continue to accrue for a service suspended for abuse.

11. Term, cancellation and termination

11.1. The agreement is concluded when the account is opened and is of indefinite duration. Each service continues in its own period.

11.2. Cancellation by the Customer. A dedicated server is cancelled by selecting "cancel at period end" in the console; the service continues until the end of the paid period, does not renew, and no refund is made for the remaining time. A cloud server can be deleted at any time; hours accrued up to deletion are charged. A Customer wishing to close the account terminates all services and may request a refund of the unused balance.

11.3. Termination by the Provider. The Provider may terminate for cause with immediate effect if (a) the Customer materially breaches this agreement or the annexed policies and does not cure the breach within 7 days of notice; (b) the periods in clause 10 have elapsed; (c) the account is found to be used for fraud; (d) a competent authority so orders. If the Provider wishes to terminate without cause, it gives at least 30 days' notice and refunds the unused balance and the unused part of any paid period.

11.4. If the Provider decides to discontinue a product or location it gives at least 60 days' notice and a reasonable transition period.

11.5. Termination or cancellation does not affect claims that arose before it.

12. Data, backups and deletion

12.1. Backups are the Customer's responsibility. Unless a separate backup service has been purchased, the Provider does not back up Customer data. The Customer must regularly back up its data to a location outside the server. For data loss resulting from hardware failure, disk error, suspension, cancellation or abuse, the Provider is liable only within the limits of clause 18 and only to the extent of its own fault.

12.2. When a service ends (cancellation, termination, deletion) the data on the server is irreversibly deleted within a reasonable time. Dedicated server disks are securely wiped before the server is given to a new customer. When a cloud server is deleted its disk and snapshots (unless kept separately) are deleted.

12.3. Traffic data kept under Law No. 5651 and records kept under tax law are not deleted before their statutory retention periods expire.

13. Acceptable use

13.1. The Customer uses the services in accordance with applicable law and the Acceptable use policy. The Customer is solely responsible for content hosted, software run and traffic sent from its servers.

13.2. The Customer must respond to abuse reports forwarded to it (complaints received via abuse@dor.net) within 24 hours and take the necessary measures.

13.3. The Customer may resell the service to third parties; in that case it is responsible to the Provider for the actions of its sub-customers and fulfils the hosting-provider obligations under Law No. 5651 in respect of its own customers.

14. Hosting provider status and Law No. 5651

14.1. The Provider is a "hosting provider" (yer sağlayıcı) under Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed by Means of Such Publications, and has filed the hosting provider notification with the Information and Communication Technologies Authority (BTK). A hosting provider is not obliged to monitor the content it hosts or to investigate whether it is unlawful (Art. 5/1).

14.2. Under Art. 5/3 and the related regulation, the Provider retains traffic data relating to its services (IP address, connection start and end time, volume of data transferred and similar) for the period set in the regulation and protects its accuracy, integrity and confidentiality.

14.3. When a court order or an order of the BTK or another competent authority concerning unlawful content is served, the Provider complies within the statutory period (blocking access, removing content, providing information). The Customer is informed where possible; no information is given where the law prohibits it.

14.4. A Customer that provides hosting to its own customers files its own hosting provider notification and fulfils its own obligations.

15. Personal data

15.1. The Provider processes the Customer's account data as data controller in accordance with the Personal Data Protection Law No. 6698 and as described in the KVKK privacy notice.

15.2. For personal data the Customer processes on its servers, the Customer is the data controller and the Provider is merely a data processor supplying infrastructure without accessing content. The Provider does not process such data outside the Customer's instructions, implements the technical and organisational measures of Art. 12 KVKK at infrastructure level, and informs the Customer without undue delay when it becomes aware of a data breach. Detailed processor terms may be set out in a separate data processing agreement on request.

15.3. Customer data is hosted in Türkiye. The Provider does not transfer the Customer's server content abroad.

16. Service level

The network availability commitment, measurement method, outage credits and exclusions are set out in the Service level agreement. Outage credits are not the Customer's sole and exclusive remedy for SLA breaches where the Customer is a consumer; statutory consumer rights remain unaffected.

17. Intellectual property and licences

17.1. The console, API, documentation and the dor.net brand belong to the Provider. The Customer is granted only a limited, non-transferable right to use them for the purpose of using the service.

17.2. The Customer's content belongs to the Customer. The Provider processes content only to the extent required to deliver the service (storage, transmission, backup copies).

17.3. Operating system images and software supplied by the Provider are subject to their own licence terms, which the Customer agrees to observe. The Customer is responsible for the licences of software it installs.

18. Warranties and limitation of liability

18.1. The Provider undertakes to deliver the services at the level defined in this agreement and the SLA, with the diligence of a prudent merchant. No further warranty is given that the service will be uninterrupted, error-free or fit for the Customer's particular purpose.

18.2. The Provider's total liability under this agreement is limited to the total fees paid by the Customer to the Provider for the affected service in the 3 months preceding the event giving rise to the damage.

18.3. The Provider is not liable for loss of profit, loss of business, loss of reputation, loss of data (clause 12 remains applicable) or indirect damage.

18.4. These limitations do not apply to damage caused by the Provider's intent or gross negligence, to injury to life, health or physical integrity, or to liability that cannot be limited under Article 115 of the Turkish Code of Obligations No. 6098 or other mandatory law. Consumers' rights under Law No. 6502 remain unaffected.

19. Indemnity

The Customer compensates the Provider, in proportion to its fault, for claims, penalties and costs (including reasonable attorney fees) brought against the Provider by third parties or public authorities because of the Customer's content, its unlawful use or use in breach of this agreement, or the actions of its sub-customers. The Provider notifies the Customer of any such claim without delay and cooperates in the defence.

20. Force majeure

20.1. Unforeseeable events beyond the parties' control (earthquake, flood, fire, epidemic, war, terrorism, general strike, acts of public authorities, nationwide power or telecommunications outages, wide-scale failures of upstream network providers) constitute force majeure. The obligations of the affected party are suspended for its duration.

20.2. If force majeure lasts more than 30 days, either party may terminate the affected service by notice; the unused balance and the unused part of any paid period are refunded.

20.3. Payment obligations cannot be deferred on grounds of force majeure.

21. Amendments, versioning and consent record

21.1. The Provider may amend this agreement and the annexed policies because of changes in law, new services or operational needs. Amendments to the Customer's detriment are announced at least 30 days before they take effect, in the console and by e-mail. A Customer that does not accept an amendment may cancel its services before the effective date without additional charge and with refund of the unused balance.

21.2. Every document carries a version number. The version accepted at registration and the time of acceptance are stored in the Customer's account record and shown on the account page in the console. When a new version takes effect, renewed acceptance may be requested in the console.

21.3. The current version is always available and downloadable at https://dor.net/legal (Law No. 6563, Art. 3).

22. Notices

22.1. Notices from the Provider to the Customer are given in the console notification centre and to the account's registered e-mail address; an e-mail is deemed served when sent. The Customer must keep its e-mail address current.

22.2. Notices from the Customer to the Provider are given through the ticket system, to legal@dor.net or to the mgnteknolojianonim@hs06.kep.tr address. For termination and dispute notices KEP or notary service is preferred; cancellations performed in the console are nevertheless valid.

23. Assignment

The Customer may not assign the agreement without the Provider's written consent; the ownership-transfer function in the console serves as such consent. The Provider may assign the agreement, with notice to the Customer, to a group company or to a successor that maintains the same service terms.

24. Governing law, disputes and evidence

24.1. This agreement is governed by Turkish law.

24.2. The courts and enforcement offices of İstanbul Anadolu, where the Provider has its registered office, have jurisdiction. If the Customer is a consumer, it may, under Articles 68 and 73 of Law No. 6502 and depending on the value thresholds, apply to the Consumer Arbitration Committee or the Consumer Court at its own place of residence or at the Provider's seat; this right is not restricted by any provision.

24.3. The parties agree that the Provider's console records, system logs, e-mail records and consent records constitute conclusive evidence within the meaning of Article 193 of the Code of Civil Procedure No. 6100. This evidence clause is relied on against consumers only to the extent permitted by law.

25. Miscellaneous

25.1. If a provision is held invalid the remaining provisions are unaffected; the invalid provision is deemed replaced by a valid one closest to its purpose.

25.2. Failure by the Provider to exercise a right does not constitute a waiver.

25.3. This agreement, with the annexed policies, constitutes the entire agreement of the parties on its subject and takes effect when the account is opened.

Company details

MGN Teknoloji A.Ş. · Fenerbahçe Mah. İğrip Sk. No: 13 İç Kapı No: 1, Kadıköy/İstanbul, Türkiye · Göztepe Tax Office / 6201650498 · MERSİS 0620165049800001 · KEP mgnteknolojianonim@hs06.kep.tr · legal@dor.net