Personal Data Protection and Processing Policy

1. Categories of Personal Data Processed

2. Collection Methods, Processing and Purposes

Your personal data is collected through the platform (registration forms, profile pages, property listing forms), payment systems, cookies and similar technologies, and via email and telephone communications. Processing purposes include:

• Creating and managing your membership account
• Delivering and continuously improving platform services
• Processing payments, issuing invoices and managing subscription plans
• Customer relations management and technical support
• Ensuring platform security and preventing fraud and unauthorised access
• Verification of professional credentials (real estate licence, SPK)
• Fulfilling legal and regulatory obligations
• Sending marketing communications (only with your explicit consent)

3. Transfer of Personal Data

Your personal data may be shared with the following parties within the scope of legal requirements and service delivery needs:

• Business Partners: Service providers and solution partners operating within the platform ecosystem
• Service Providers: Software, hosting, cloud infrastructure, payment processing and data processing companies
• Advisors: Legal, financial and technical consultants retained by the Company
• Public Authorities: Judicial, administrative authorities and regulatory bodies when required by law

International data transfers are carried out in accordance with Article 9 of KVKK (adequate protection or explicit consent). Data is shared only to the minimum extent necessary for the stated purposes.

4. Data Retention Periods

Personal data is retained for the period prescribed by applicable law or for as long as necessary to fulfil the purpose for which it was collected. Once the purpose ceases to exist or the legal retention period expires, data is deleted, destroyed or anonymised in accordance with Article 7 of KVKK. Data subject to an ongoing legal dispute or investigation is retained until final resolution.

5. Legal Basis for Processing

Personal data is processed on the following legal bases under Articles 5 and 6 of KVKK:

• Performance of a Contract: Data necessary for fulfilling obligations arising from the service agreement
• Legal Obligation: Data required to be processed under applicable legislation
• Legitimate Interest: Platform security, fraud prevention and service quality improvement
• Explicit Consent: Marketing communications and processing beyond legal requirements

6. Your Rights Under KVKK Article 11

As a data subject, you have the following rights:

• To learn whether your personal data is being processed
• To request information about processing if your data has been processed
• To learn the purpose of processing and whether data is used accordingly
• To know the third parties to whom your data has been transferred domestically or abroad
• To request correction of incomplete or inaccurate data
• To request deletion or destruction of your data within the conditions of KVKK Article 7
• To request notification of corrections or deletions to third parties who received your data
• To object to results arising against you through automated processing systems
• To claim compensation for damages arising from unlawful processing of your personal data

7. How to Exercise Your Rights

You may submit your data subject requests by the following methods:

• Written Application: In person or by notarised mail to our registered address
• KEP (Registered Electronic Mail): Via the Company KEP address
• Secure Electronic Signature: Application signed with a secure e-signature, sent by email
• Registered Email: Via your email address registered with us, to kvkk@emlakcilarportali.com

Requests are responded to within 30 (thirty) calendar days free of charge. In case of any conflict between language versions, the Turkish text shall prevail.