Reseller Service Agreement

1. Parties

1.1. Service provider: WebJoiner Bilişim Teknolojileri (sole proprietorship)
Address: Göztepe Mah. Batışehir Cad. Batışehir K Blok No:2/2 İç Kapı No:115, Bağcılar / İstanbul
Tax office: Güneşli V.D.
E-mail: satis@webjoiner.com · KVKK requests: kvkk@webjoiner.com
(Referred to in this agreement as "WebJoiner".)

1.2. Reseller: The merchant or self-employed professional holding the trade name / full name, address, tax office and tax identification number declared and verified in the panel when the reseller account is opened, and the registered e-mail address. (Referred to in this agreement as the "Reseller".)

1.3. The Reseller acknowledges that it enters into this agreement within the scope of its commercial or professional activity, that it does not have the status of a consumer, and that the identity and tax information it has declared is accurate. WebJoiner does not sell directly to consumers.

Effective date and date of last update: 27.09.2026. The service level annex (Annex 1) is on the Service Level Agreement (SLA) page, and the data processing annex (Annex 3) is at the end of this page.

2. Definitions

• Panel: The reseller management software operating under the Reseller's brand at panel.webjoiner.com or on the Reseller's own domain name as defined by the Reseller.
• Client portal: The end-user interface operating under the Reseller's brand that the Reseller opens for its own clients through the Panel.
• End Client: A natural or legal person to whom the Reseller sells services in its own name and for its own account.
• Package: A reseller plan that determines quotas, modules and entitlements, as defined in the price list or specifically for the Reseller.
• Module: A function that can be enabled or disabled within the scope of the Package (e.g. hosting management, domain names, e-mail, SSL, backup, monitoring, SEO audit, support, billing, white-label).
• Balance (wallet): The amount the Reseller loads into the Panel in advance solely to pay for WebJoiner services, together with refund and credit amounts credited to the balance pursuant to this agreement.
• Central infrastructure: The server, DNS, domain name and certificate procurement infrastructure operated by WebJoiner or operated on its behalf, together with servers managed by WebJoiner specifically for the Reseller.
• Reseller infrastructure: The Reseller's own servers and own accounts connected by the Reseller to the Panel (e.g. its own cPanel/WHM or Plesk server, DNS/CDN, SMTP, domain name or SSL procurement account).
• Annexes: The documents listed in Article 25, which form an integral part of this agreement.

3. Subject matter of the agreement

3.1. This agreement sets out the terms under which WebJoiner provides the Reseller with the right to use the Panel and the Client portal and, according to the Package, the reseller infrastructure consisting of hosting, domain name, e-mail, SSL certificate, backup, monitoring, SEO audit, support system and white-label services, and under which the Reseller sells these services to its End Clients under its own brand, in its own name and for its own account.

3.2. Each order placed through the Panel (package, domain name, SSL, add-on module, server request) is a separate service order subject to this agreement. The price of the order is the price shown in the Panel at the time of the order.

3.3. The Reseller is the contracting party vis-à-vis its End Clients. No direct contractual relationship is established between WebJoiner and the End Client; WebJoiner is not liable to the End Client for the Reseller's commitments.

3.4. The relationship between the Parties is a service relationship between two independent merchants; it does not create an agency, partnership, joint venture or employer-employee relationship. The reseller relationship is non-exclusive: the Reseller may work with other providers and WebJoiner may work with other resellers. No territorial or client exclusivity is granted.

4. Packages and modules

4.1. Packages determine quotas (e.g. accounts, domain names, team members, SEO audit allowance), enabled modules, backup storage and retention policy, and the level of support. Package contents are shown in writing in the price list or, for a package specific to the Reseller, in the Panel.

4.2. Modules are enabled or disabled on a per-package basis. Certain modules (e.g. domain names, DNS/CDN, SMTP, SSL) may, at the Reseller's option, be run on the Reseller infrastructure. In that case:

• a) the contract, fees, rules and continuity of the relevant account are a matter between the Reseller and the provider of that account;
• b) WebJoiner is responsible only for the operation of the integration between the Panel and that account; the provider's outages, price changes, account closures or API changes are not WebJoiner's responsibility;
• c) the Reseller acknowledges that the access keys it enters into the Panel are authorized and that it permits the Panel to use these keys.

4.3. With respect to the content and use on the Reseller's own server connected to the Panel, the Reseller is the hosting provider within the meaning of Law No. 5651; the operation, security, licenses and backup of that server are the Reseller's responsibility.

4.4. Add-on modules are added to the package for an additional monthly fee; the fee is notified in the Panel or in writing before the order. A fee not shown at the time of the order shall not be charged subsequently.

4.5. Packages specific to the Reseller and requests for servers specific to the Reseller and managed by WebJoiner are defined by the written agreement of the Parties (e-mail or Panel approval is sufficient); this agreement applies to matters not set out in such written agreement.

4.6. Features marked as "Coming soon" or "beta" are not covered by any commitment; WebJoiner may change them or decide not to offer them. No fee is charged for beta features; if a fee is to be charged, this shall be notified in advance.

5. Prices and price changes

5.1. Prices are denominated in Turkish lira and are exclusive of VAT; VAT and any other statutory taxes are charged separately.

5.2. Each order and renewal is made at the current price shown in the Panel at that time. The price of a period for which payment has been received shall not be changed subsequently.

5.3. Changes to package and module fees shall be notified at least 30 days before they take effect to the Reseller's registered e-mail address and as a Panel notification. If the Reseller does not accept the change, it may terminate the agreement (or only the relevant package/module) before the effective date of the change without paying any additional fee or contractual penalty; in that case the old price applies until the end of the paid period. Failure to terminate despite the notification shall be deemed acceptance of the new price as of its effective date.

5.4. Domain name and SSL certificate prices may change depending on the costs of the registrar, registry or certificate authority and on exchange rates. For these products, the amount to be applied upon renewal is shown in the Panel before renewal; the Reseller may stop the renewal by disabling auto-renewal. This paragraph is an exception to the 30-day notice rule in 5.3.

5.5. Increases arising from changes in tax legislation (e.g. the VAT rate) apply from their effective date and are not deemed price changes under 5.3.

5.6. The Reseller freely determines the sale prices it applies to its End Clients. Recommended or calculated prices shown by WebJoiner in the Panel are not binding.

6. Balance (wallet), payment and auto-renewal

6.1. The Reseller tops up its balance by card (through the infrastructure of a licensed payment institution) or by bank transfer (EFT). Card details are neither seen nor stored by WebJoiner.

6.2. The balance is used only within the Panel to pay for WebJoiner services: purchases of services and products, renewals, package and module fees, and payment of invoices issued by WebJoiner. No interest accrues on the balance; the balance is not converted into cash, is not refunded, is not transferred to another account or reseller, and may not be used as a means of payment on behalf of End Clients. Payments by End Clients are made to the Reseller's own collection account; WebJoiner does not collect funds on behalf of End Clients.

6.3. Auto-renewal can be enabled or disabled separately for each service in the Panel. If enabled, the renewal fee is deducted from the balance on the due date. If the balance is insufficient, the renewal is not carried out and the service may end on its expiry date; for domain names, this may result in the loss of the domain name. Insufficient balance is notified to the Reseller through the reminders set out in Article 10.

6.4. A package upgrade takes effect immediately; the difference attributable to the remaining days of the current period (pro rata difference) is collected from the balance at the time of the upgrade.

6.5. A package downgrade takes effect at the end of the current period. If usage exceeds the quotas applicable after the downgrade, the Reseller is obliged to reduce its usage to the new quota by the end of the period; if it is not reduced, the downgrade is not applied and the Reseller is notified accordingly.

6.6. In the event of cancellation or termination in the middle of a period, no pro rata refund is made for the remaining part of the paid period; the service may be used until the end of the paid period. This rule does not apply to termination due to a price change under 5.3, to terminations attributable to WebJoiner under 18.2 and 19.3, or to erroneous/duplicate charges; in these cases the remaining part of the paid period is calculated pro rata and credited to the balance in accordance with 6.8.

6.7. Domain name registrations, renewals and transfers and SSL certificate orders are irreversible once completed with the registry or certificate authority, and their fees are non-refundable. The fees for domain name, transfer and SSL transactions that cannot be completed, are rejected or are cancelled, and the amounts refunded by the registry for cancellations permitted by the extension rules within a short period after registration, are credited to the balance.

6.8. Refunds are made only to the balance. Every amount to be refunded to the Reseller under this agreement and its annexes — including the fees for domain name, transfer and SSL transactions that cannot be completed, are rejected or are cancelled, pro rata amounts, service credits, and erroneous or duplicate charges — is credited in full, without deduction, to the Reseller's Panel balance. No refunds are made to a card account, bank account or in cash. Amounts credited to the balance are used for the purposes set out in 6.2.

6.9. Balance upon expiry: Irrespective of the reason for which the agreement ends, unused balance is not converted into cash and is not refunded; the balance is first set off against debts that have fallen due and against final invoices. Where the agreement ends without fault on the part of the Reseller (5.3, 16.2, 18.2, 19.3 and 22.1), WebJoiner shall enable the Reseller to use its remaining balance until the expiry date to purchase and renew services in the Panel (including multi-year renewals of domain names), and shall set off the remaining balance against the invoices and debts relating to the expiry period. Details are set out in the Refunds, Cancellation and Balance Policy (Annex 4).

7. Invoicing

7.1. WebJoiner issues invoices for its sales to the Reseller: through the e-Invoice system if the Reseller is registered for e-Invoice, otherwise as an e-Archive invoice. A copy of the invoice is also sent to the Reseller's registered e-mail address. Balance top-ups are invoiced at the time of the top-up with a "balance top-up" invoice; no separate invoice is issued for spending from the balance. For products and services purchased directly by card, an invoice for the relevant product is issued.

7.2. The Panel may prepare invoice drafts for the Reseller's own End Clients. Once approved by the Reseller, drafts are issued in the Reseller's name through the Reseller's own e-Invoice/e-Archive integrator account. The Reseller is the issuer of the invoice and is responsible for its content and for issuing it on time (Tax Procedure Law, Art. 231/5). This feature requires the Reseller's own e-Invoice/e-Archive registration and integrator account.

7.3. Objections to an invoice shall be made in writing within 8 days of receipt of the invoice (Turkish Commercial Code, Art. 21/2).

8. Late payment, suspension and termination procedure

8.1. Reminders: If an amount that has fallen due cannot be collected from the balance, WebJoiner sends the Reseller a reminder by e-mail and Panel notification. Reminders are sent at least on the due date and 2 days before the end of the grace period.

8.2. Grace period: Services continue uninterrupted for 7 days from the due date.

8.3. Suspension: If payment has not been made by the end of the grace period, the relevant service may be suspended. When the entire reseller account is suspended:

• a) End Clients cannot log in to the Client portal;
• b) the Reseller can access only the balance top-up, card payment and debt overview screens of the Panel;
• c) End Clients' live websites and e-mail remain live during the suspension; the suspension restricts only access to the Panel and the Client portal. If the agreement is terminated under 8.5, Article 20 applies;
• d) suspension does not prevent the renewal or transfer of domain names on the grounds of other unpaid services; a domain name is not renewed as long as its renewal fee remains unpaid.

The suspension is lifted automatically once payment is completed.

8.4. Default: At the end of the grace period, the Reseller is in default without the need for any further notice. In the event of default, advance interest may be applied pursuant to Art. 2/2 of Law No. 3095.

8.5. Termination: If the suspension is not lifted within 30 days, WebJoiner may terminate the agreement by notice sent by e-mail. Data handover and deletion after termination are carried out in accordance with Article 20.

9. Obligations of the Reseller

9.1. End Client contracts: The Reseller enters into contracts with its End Clients in its own name; these contracts shall include rules at least equivalent to this agreement and Annex 2 (Acceptable Use). If its End Client is a consumer, the Reseller fulfills the information, pre-contractual information, right of withdrawal and invoicing obligations arising from Consumer Protection Law No. 6502 and the Distance Contracts Regulation.

9.2. KVKK: The Reseller is the data controller with respect to personal data of its End Clients; privacy notices, explicit consent where required, data subject requests, VERBİS (if applicable) and data breach notifications are the Reseller's obligations. WebJoiner is the data processor with respect to such data (Annex 3).

9.3. Acceptable use: The Reseller and its End Clients comply with Annex 2. The Reseller does not sell services to persons hosting prohibited content or engaging in prohibited activities and, upon detecting such sales, stops the service.

9.4. Abuse reports: The Reseller responds to abuse or unlawful content reports forwarded to it by WebJoiner within 24 hours of the report and takes the necessary action (removal of the content, suspension of the account). In the case of decisions by competent authorities and in emergencies such as phishing, malware or network attacks, WebJoiner may temporarily suspend the relevant account without waiting for the Reseller's response; the Reseller is informed without delay.

9.5. Account security: The Reseller protects the Panel users, their permissions and passwords; it is encouraged to use two-factor authentication and uses it on administrator accounts; and it notifies WebJoiner without delay of any suspected unauthorized access. Actions carried out from the Reseller account are deemed to be the Reseller's until proven otherwise.

9.6. Accurate information: The Reseller enters the accurate contact information required by registry rules in domain name registrations; WebJoiner is not liable for the suspension or loss of a domain name due to inaccurate information.

9.7. Legislation: The Reseller fulfills its obligations under tax legislation, Law No. 5651, Law No. 6563, Law No. 6502, KVKK and other relevant legislation.

9.8. Indemnification: The Reseller shall bear the amounts WebJoiner is compelled to pay, and reasonable defense costs, due to claims brought against WebJoiner by third parties or public authorities arising from a breach by the Reseller or its End Clients of this agreement, its annexes or the legislation. WebJoiner shall notify the Reseller of the claim without delay and allow the Reseller to participate in the defense.

10. Obligations of WebJoiner

10.1. To provide the Panel and the modules enabled in the Package with due care, in accordance with the Service Level Annex (Annex 1).

10.2. To take reasonable technical and administrative security measures for accounts hosted on the Central infrastructure (Annex 3, Section 6).

10.3. To handle abuse reports, decisions of competent authorities and its obligations under Law No. 5651 in its capacity as hosting provider, and to forward these to the relevant Reseller.

10.4. To give notice of planned maintenance and price changes within the periods set out in this agreement and in Annex 1.

10.5. To provide the data handover and domain name transfer support set out in Article 20 upon expiry of the agreement.

11. White-label

11.1. The Panel and the Client portal operate with the Reseller's logo, colors and panel address; the WebJoiner name and the names of WebJoiner's infrastructure providers are not displayed in the interface.

11.2. The identity of the infrastructure, domain name, certificate, payment and accounting providers used by WebJoiner is WebJoiner's trade secret and need not be disclosed to the Reseller. For KVKK and audit purposes, sub-processors are specified by category in Annex 3; a list by name is provided only under a confidentiality obligation and where necessary.

11.3. The Reseller is aware that the registrar of a domain name may be visible in RDAP/WHOIS queries, the issuer of an SSL certificate may be visible in the certificate details, and server IP/network information may be visible in public records. The Reseller shall not commit to its End Clients that "the infrastructure provider will not be visible in any way".

11.4. The Reseller may not misrepresent the infrastructure to its End Clients or third parties: it may not attribute to itself or to the service features it does not have, such as a data center, certificates, accreditations, uninterrupted service or "24/7" support; and it may not make, on behalf of WebJoiner, commitments that WebJoiner has not made in this agreement. Any additional commitments the Reseller makes to its End Clients (e.g. an uptime guarantee, service credits) are the Reseller's own responsibility.

11.5. The Reseller may not use the WebJoiner name and brand without WebJoiner's written permission; WebJoiner likewise uses the Reseller's brand solely for the purpose of providing the white-label service. Mentioning the Reseller's name as a reference is subject to the Reseller's written permission.

12. Intellectual property and license

12.1. The Panel software is not sold. WebJoiner grants the Reseller a non-exclusive, non-transferable right of use for the term of the agreement, solely for use in the Reseller's own business. Within the scope of this right, the Reseller may grant its End Clients access only through the Client portal, for the purpose of using their own services; beyond this it may not grant sublicenses.

12.2. The Reseller may not copy, reverse engineer or decompile the software, circumvent its security measures, convert the software into another product, or use it to develop a competing product.

12.3. Rights to the content and data uploaded to the Panel by the Reseller and End Clients belong to them. WebJoiner uses such data solely to provide the service and for the purposes of this agreement.

12.4. WebJoiner may use suggestions and feedback shared by the Reseller to improve the product without paying any fee; this does not permit disclosure of the Reseller's confidential information.

13. Confidentiality

13.1. The Parties shall use information learned during the agreement that is designated as confidential or is confidential by its nature (prices and special package terms, client lists, infrastructure and security information, access keys, trade secrets) solely for the performance of the agreement and shall not disclose it to third parties.

13.2. Publicly available information, information obtained independently of the other party, and information required to be disclosed by law or by a decision of a competent authority (with prior notice to the other party where possible) are excluded from confidentiality.

13.3. WebJoiner shall not contact the Reseller's End Clients for direct sales purposes in a way that bypasses the Reseller, and shall not use End Client data for its own marketing.

13.4. The confidentiality obligation continues for 3 years after the end of the agreement; with respect to trade secrets and personal data, it continues indefinitely.

14. Protection of personal data

The data processing relationship between the Parties is governed by Annex 3 (Data Processing Annex). WebJoiner processes personal data of the Reseller's own authorized representatives and employees (account, billing, support) as data controller; this processing is explained in WebJoiner's KVKK Privacy Notice.

15. Liability

15.1. The liability of the Parties arising from this agreement, for whatever reason, is limited to the total amounts actually paid by the Reseller to WebJoiner in the last 12 months preceding the event giving rise to the damage.

15.2. The Parties are not liable for each other's indirect damages (loss of profit, loss of revenue, loss of reputation, loss of clients, business interruption, contractual penalties paid to third parties).

15.3. In particular, WebJoiner is not liable for:

• a) outages, data loss or security breaches occurring in the Reseller infrastructure (4.2, 4.3) or in the backup storage chosen by the Reseller;
• b) outages and decisions of third parties beyond WebJoiner's control, such as domain name registries, registrars, certificate authorities and the internet backbone (in such cases WebJoiner shall use reasonable efforts and inform the Reseller);
• c) the consequences of operations performed on the instruction of the Reseller or an End Client (deletion, restore, DNS changes, transfers);
• d) services that expire because the Reseller has turned off automatic renewal or because of insufficient balance.

15.4. The above limitations shall not apply in cases of willful misconduct or gross negligence, to personal injury, or in other cases where liability cannot be limited by law (Turkish Code of Obligations No. 6098, Art. 115). The Reseller's indemnification obligation under 9.8 and unpaid service fees are not subject to the cap in 15.1.

15.5. The Reseller's rights in the event that service level targets are not met are set out in Annex 1.

16. Force majeure

16.1. The parties shall not be held liable for failure to perform their obligations due to unforeseeable events beyond their reasonable control — natural disasters, fire, epidemics, war, terrorism, general strikes, decisions of competent authorities, general power or communication outages, large-scale cyberattacks (including DDoS), and general outages of upstream providers.

16.2. The party affected by force majeure shall notify the other party of the situation without delay and shall make reasonable efforts to mitigate its effects. If the force majeure event lasts longer than 60 days, either party may terminate the agreement without compensation; in that case, 6.9 applies to any unused balance.

16.3. Force majeure does not extinguish payment obligations that became due before the event.

17. Term

17.1. The agreement is concluded at the moment the Reseller electronically approves it in the Panel and continues for an indefinite term. Packages renew automatically at the end of the selected period (monthly/annual) if automatic renewal is enabled.

17.2. The approved text of the agreement and its annexes, together with the approval date and version, shall be kept accessible in the Panel indefinitely and may be downloaded by the Reseller (Law No. 6563, Art. 3/4).

18. Ordinary termination

18.1. The Reseller may terminate the agreement at any time by giving notice via the Panel or by e-mail; termination takes effect at the end of the paid period. Pursuant to 6.6, no pro-rata refunds are made.

18.2. WebJoiner may terminate the agreement by giving 60 days' prior written notice. In that case, package fees the Reseller has paid for the period after the termination date shall be credited to the balance on a pro-rata basis pursuant to 6.8; 6.9 applies to the remaining balance.

19. Termination for cause

19.1. Either party may terminate the agreement with immediate effect if the other party breaches a material obligation and the breach is not remedied within 15 days of written notice.

19.2. WebJoiner may also terminate without observing a notice period in the following cases: serious or repeated breach of Annex 2; the Reseller providing false identity or tax information; failure to pay a debt within the period set out in 8.5; a bankruptcy or concordat (composition) decision concerning the Reseller (to the extent permitted by law).

19.3. Where the Reseller terminates due to a material breach by WebJoiner, the fees for the remaining part of the paid period shall be credited to the balance on a pro-rata basis pursuant to 6.8; 6.9 applies to the remaining balance.

20. Consequences of expiry, data handover and deletion

20.1. Data handover period: Regardless of the reason for which the agreement ends, the Reseller's read-only and export access to the Panel shall continue for 30 days from the date of expiry; during this period the Reseller may download account backups and Panel data (client list, services, invoices) in a machine-readable format. Unpaid debts do not prevent data handover; however, during this period, sites and services published on the central infrastructure shall be kept running.

20.2. Domain names: For domain names registered in the name of the Reseller or an End Client, transfer codes shall be provided upon request and the transfer lock shall be removed; other unpaid services do not prevent the transfer. Transfer restrictions stipulated by registry rules (e.g. the restricted period after registration) are reserved.

20.3. Deletion: Accounts on the central infrastructure and Panel data shall be deleted within 30 days of the end of the data handover period; copies in WebJoiner's backups shall be deleted within the backup cycle, no later than 90 days. Deletion shall be confirmed in writing upon request.

20.4. Statutory retention: Records that must be retained under tax legislation and the Turkish Commercial Code (invoices, supporting documents for commercial books), traffic data under Law No. 5651, and audit logs required as evidence in the event of a dispute shall be retained for the period prescribed by the relevant legislation and destroyed at the end of that period.

20.5. The provisions on confidentiality, liability, indemnification, data deletion, governing law and evidence shall survive the expiry of the agreement.

21. Notices

21.1. Notices between the parties shall be given, for WebJoiner, to satis@webjoiner.com and, for the Reseller, to the e-mail address registered in the Panel and/or as a Panel notification. An e-mail is deemed served at the moment it is sent (or on the following business day if sent outside business hours).

21.2. The parties do not use a registered electronic mail (KEP) address; a party that obtains a KEP address shall notify the other party thereof. The e-mail procedure in this article does not override the mandatory service procedures under the Notification Law No. 7201.

21.3. The Reseller shall keep its registered e-mail address up to date. Unless a change of address has been notified, notices sent to the old address are valid.

22. Amendments to the agreement

22.1. WebJoiner may amend this agreement and its annexes, provided that it gives notice by e-mail and Panel notification at least 30 days before the amendment takes effect. If the Reseller does not accept the amendment, it may terminate the agreement before the effective date without paying any additional fee; 6.9 applies to its unused balance.

22.2. Amendments required by changes in legislation or by a decision of a competent authority may be applied on shorter notice; in that case as well, the Reseller's right of termination is reserved.

22.3. Amendments to the Reseller's detriment are deemed accepted when the Reseller approves the new version in the Panel or continues to use the service after the effective date.

23. Evidence agreement

The parties agree that, in disputes arising from this agreement, WebJoiner's Panel operation and access records, system logs, correspondence between the parties' registered e-mail addresses and electronic approval records in the Panel shall constitute evidence pursuant to Art. 193 of the Code of Civil Procedure No. 6100 (HMK). This provision does not remove the other party's right to prove the contrary by any means of evidence (HMK Art. 193/2).

24. Governing law and jurisdiction

24.1. This agreement is governed by the laws of the Republic of Türkiye.

24.2. As the parties are merchants, pursuant to Art. 17 of the Code of Civil Procedure No. 6100 (HMK), the Istanbul (Central) Courts and Enforcement Offices have jurisdiction over disputes.

24.3. The provisions on mandatory mediation as a precondition to litigation under Art. 5/A of the Turkish Commercial Code No. 6102 and Law No. 7036 are reserved.

25. Miscellaneous

25.1. Annexes: The following annexes form an integral part of this agreement. In the event of conflict, the order of precedence is: (1) any package arrangement specific to the Reseller, (2) this agreement, (3) Annex 3, (4) Annex 1, (5) Annex 2, (6) Annex 4, (7) the price list.

• Annex 1: Service Level Annex (webjoiner.com/hizmet-seviyesi/)
• Annex 2: Acceptable Use Policy (webjoiner.com/kabul-edilebilir-kullanim/)
• Annex 3: Data Processing Annex (at the end of this page)
• Annex 4: Refunds, Cancellation and Balance Policy (webjoiner.com/iade-iptal/)
• Annex 5: The current price list and the Reseller's package details (Panel)

25.2. Electronic commerce information: The Panel displays the total price before an order is placed and confirms the order electronically. Since the parties are not consumers, pursuant to Art. 3/3 and Art. 4/3 of Law No. 6563, it has been agreed otherwise with respect to those parts of the procedures in Art. 3/1–2 and Art. 4/1–2 that are not applied in the Panel.

25.3. Assignment: The Reseller may not assign its rights and obligations under the agreement without WebJoiner's written consent. In the event of a transfer of the business or incorporation, WebJoiner may assign the agreement to the acquiring business and shall notify the Reseller thereof; the Reseller has the right to terminate within 30 days of the notice.

25.4. Severability: The invalidity of any provision does not affect the other provisions; an invalid provision is deemed replaced by the valid provision closest to its purpose.

25.5. Waiver: Failure to exercise a right does not constitute a waiver of that right.

25.6. Entire agreement: This agreement and its annexes constitute the entire understanding between the parties regarding its subject matter and supersede all prior oral or written negotiations.

25.7. Acceptance: This agreement consists of 25 articles and 5 annexes. The Reseller approves the agreement electronically in the Panel when opening its account, with all articles displayed in legible form; the approval record (date, time, IP, version) is retained.

Annex 3: Data Processing Annex

1. Parties and roles

1.1. With respect to personal data of its End Clients and their users, the Reseller is the data controller within the meaning of Law No. 6698 on the Protection of Personal Data (KVKK), and WebJoiner is the data processor processing such data on behalf of and on the instructions of the Reseller.

1.2. Pursuant to KVKK Art. 12/2, the parties are jointly responsible for taking data security measures with respect to the data processed by WebJoiner.

2. Subject matter, nature and duration of processing

• Subject matter and purpose: Provision of hosting, domain name registration and management, e-mail, SSL, backup, monitoring, SEO audit, support ticket and draft invoice services.
• Categories of data subjects: End Clients (natural persons or authorized representatives of legal entities), client portal users of End Clients, domain name registrants and contact persons, users and visitors of hosted websites and e-mail accounts (within the scope of hosted content).
• Data categories: Identity, contact, client transaction (services, draft invoices), transaction security (IP, logs, access records), domain registration data, support correspondence; content uploaded by the Reseller/End Client to hosted websites and e-mails (WebJoiner has no knowledge of and does not review this content).
• Duration: The term of the agreement and the handover and deletion periods in Art. 20 of the Reseller Agreement.

3. Processing on instructions

3.1. WebJoiner processes personal data only in accordance with the Reseller's documented instructions. The Reseller Agreement, settings made and operations performed in the Panel, and written instructions given through support tickets are deemed documented instructions.

3.2. Where there is a legal obligation to process (e.g. traffic data under Law No. 5651, a request from a competent authority), WebJoiner shall inform the Reseller in advance unless legally prohibited from doing so.

3.3. If WebJoiner considers that an instruction infringes the legislation, it shall inform the Reseller without delay and may suspend the relevant processing until the instruction is clarified.

4. Confidentiality

WebJoiner shall ensure that its employees and auxiliary persons who access personal data are bound by written confidentiality obligations and that access is limited to what their duties require. This obligation survives the expiry of the agreement.

5. Sub-processors

5.1. The Reseller grants WebJoiner general authorization to use sub-processors in the following categories:

• data center, server and object storage service providers;
• domain name registrars and domain name registries (to the extent required by the extension);
• SSL certificate authorities and their resellers;
• DNS, CDN and security (DDoS/WAF, bot verification) service providers;
• e-mail delivery (SMTP) and notification service providers;
• payment institution (only with respect to the Reseller's own payments);
• e-Invoice/e-Archive invoice integrator and accounting software (if the Reseller's own integrator account is used, the provider of that account is the Reseller's own supplier).

5.2. In line with the white-label principle, the names of sub-processors are not shown in the interface or in publicly available texts. Where necessary to fulfill its KVKK obligations or to respond to the Board or a data subject request, the Reseller may request in writing the current list of sub-processors by name, subject to a confidentiality obligation; WebJoiner shall provide the list within 10 business days.

5.3. WebJoiner shall inform the Reseller at least 30 days before adding a new sub-processor category or changing the provider within a category. If the Reseller objects on reasonable grounds and the parties cannot find a solution, the Reseller may terminate the affected service; the remaining part of the paid period shall be credited to the balance on a pro-rata basis pursuant to Art. 6.8 of the Reseller Agreement.

5.4. WebJoiner shall impose on its sub-processors obligations substantially equivalent to those in this annex and shall be liable to the Reseller for their acts as for its own acts (subject to the limits in Art. 15 of the Reseller Agreement).

5.5. Transfer abroad: Some sub-processors may be located abroad. Such transfers are carried out in accordance with KVKK Art. 9 and the Regulation on the Procedures and Principles for the Transfer of Personal Data Abroad, limited to the data necessary to provide the service, and within the framework of the service and data processing terms accepted with the relevant service providers. As the data controller, the Reseller shall specify the cross-border transfer and the recipient groups in its privacy notice to its own End Clients; WebJoiner shall provide the information required for this purpose.

6. Security measures

WebJoiner shall implement and keep up to date at least the following technical and administrative measures:

• logical data separation between resellers (each reseller's data is kept separately);
• encryption in transit (TLS) and encryption of secrets stored in the Panel (API keys, passwords);
• role-based authorization, the principle of least privilege, strong authentication for administrator access;
• recording of Panel operations and administrator access in the audit log;
• regular tracking of security updates, a vulnerability reporting channel;
• regular backups and restore testing for the central infrastructure;
• confidentiality undertakings and KVKK awareness for employees.

A detailed list of the measures shall be provided to the Reseller upon request. WebJoiner may update these measures provided that the level of security is not reduced.

7. Data breach notification

7.1. When WebJoiner becomes aware of a breach affecting personal data it processes on behalf of the Reseller, it shall inform the Reseller without delay and no later than within 48 hours by e-mail and Panel notification.

7.2. The notification shall include, to the extent known at the time: the nature and time of the breach, the categories of data affected and the approximate number of persons, the likely consequences, the measures taken and proposed, and a contact person. Information not yet known shall be supplemented as it becomes available.

7.3. Notifying the breach to the Board (within 72 hours pursuant to Board Decision 2019/10) and to the data subjects is the obligation of the Reseller as the data controller; WebJoiner shall assist the Reseller by providing the information and documents required for such notification.

8. Data subject requests and assistance

WebJoiner shall not respond to data subject requests concerning the Reseller's End Clients that reach WebJoiner directly, and shall forward them to the Reseller without delay. WebJoiner shall provide reasonable assistance with responding to requests, data security, impact assessments and correspondence with the Board. A reasonable fee notified in advance may be charged for assistance beyond the ordinary scope.

9. Return and deletion upon expiry

Upon expiry of the agreement, WebJoiner shall make the data available for download by the Reseller pursuant to Art. 20 of the Reseller Agreement and shall delete it at the end of the handover period; copies in backups shall be deleted within the backup cycle. Data that must be retained by law shall be destroyed at the end of the retention period. Deletion shall be confirmed in writing upon request.

10. Audit

10.1. The Reseller shall audit compliance with the obligations in this annex primarily by requesting written information, documents and (if available) independent audit reports from WebJoiner.

10.2. If this is not sufficient, or if the Board so requests, the Reseller may carry out an on-site or remote audit, with at least 15 business days' prior written notice, no more than once a year, during business hours, without disrupting operations, and through an auditor who has given a confidentiality undertaking. No access shall be given to other resellers' data or to information that would jeopardize the security of the infrastructure. Audit costs shall be borne by the Reseller; if a material non-compliance is identified during the audit, WebJoiner shall bear the reasonable costs.

11. Precedence

In the event of a conflict between this annex and the Reseller Agreement regarding the protection of personal data, this annex shall prevail.