KVKK Notice
Last updated: 2026-09-29
This notice informs users of Pingolab in line with Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform. More detail is available in the Privacy Policy.
1. Data controller
Pingolab is a free monitoring service operated by an individual. You can reach the data controller at support@pingolab.net.
2. Categories of personal data processed
| Category | Data |
|---|---|
| Identity | Name (from your Google account) |
| Contact | E-mail address, e-mail addresses you add as alert channels, Telegram chat id |
| Visual | Address of your Google profile photo |
| Customer transaction | Monitor settings, check results, incidents, status pages, alert logs, API key hashes, language/timezone/report preferences, donation link clicks |
| Marketing | Marketing website visit data (Google Analytics cookies: pages viewed, referrer, approximate location, device/browser type); Google Ads conversion cookies (ad click ID) |
| Transaction security | IP address, browser information, session and audit logs, Google account identifier |
We do not process special categories of personal data (health, biometric, …).
3. Purposes
Managing memberships; providing monitoring, alerting and status page services; information security; preventing abuse and attacks; handling requests and complaints; sending weekly reports if you want them; meeting legal obligations and informing competent authorities; measuring visits to the marketing website.
4. Legal bases
- KVKK Art. 5/2-c — Directly related to the conclusion or performance of a contract (providing your account and the Service).
- KVKK Art. 5/2-ç — Necessary for the data controller to meet a legal obligation.
- KVKK Art. 5/2-e — Necessary to establish, exercise or protect a right.
- KVKK Art. 5/2-f — Legitimate interests of the data controller, provided your fundamental rights and freedoms are not harmed (security, abuse prevention, debugging, measuring visits to the marketing website).
5. How data is collected
From Google when you sign in with Google, from the information you enter in the panel and API, and automatically by electronic means while the Service runs (server and application logs).
6. Transfers
Your personal data is transferred only as far as needed for the purposes above, to:
- Service providers: hosting provider (Turkey), Google LLC (authentication and Google Analytics visit measurement and Google Ads sign-up conversion measurement on the marketing website, USA), Brevo / Sendinblue SAS (e-mail delivery, France), Cloudflare, Inc. (DNS, e-mail forwarding, external monitoring, encrypted backup storage and bot protection; USA/EU).
- Channels you choose: only alert content is sent to the Telegram, Discord, Slack or webhook addresses you add.
- Competent authorities: only upon a lawful request.
Transfers to providers located abroad are made in accordance with the procedures and safeguards set out in Article 9 of the KVKK.
7. Retention
Account data is kept while the account exists and destroyed within 30 days after it is deleted. Raw check results are kept for 30 days, hourly aggregates 90 days, daily aggregates 2 years, alert logs 90 days, audit logs 1 year, application error logs 14 days and database backups at most 30 days. Expired data is deleted automatically.
8. Your rights under KVKK Article 11
By applying to the data controller, you have the right to:
- learn whether your personal data is processed and request information about it;
- learn the purpose of processing and whether it is used accordingly;
- know the third parties in Turkey or abroad to whom it is transferred;
- request rectification of incomplete or inaccurate data and notification of this to those third parties;
- request erasure or destruction under the conditions of KVKK Article 7 and notification of this to those third parties;
- object to a result against you arising exclusively from automated analysis;
- claim compensation for damage caused by unlawful processing.
9. How to apply
Send your request to support@pingolab.net from the e-mail address registered on your account, so we can verify your identity. Requests are handled free of charge as soon as possible and within 30 days at the latest. If your request is rejected, the answer is insufficient or no answer is given in time, you can complain to the Personal Data Protection Board.
You can also correct your profile, export your data and delete your account yourself in the panel.