Privacy Notice (KVKK)

This English text is provided for information only. If there is any difference between the two versions, the Turkish text prevails.

Last updated: 29 October 2026

This privacy notice has been prepared in accordance with the Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform, in order to inform you of the purposes for which and the manner in which your personal data are processed, to whom they may be transferred, and your rights.

1. Data Controller

Your personal data are processed by Evin Gayrimenkul Danışmanlık Ltd. Şti. (“Evin Gayrimenkul”) in its capacity as data controller.

Address: Yaşamkent Mah. 3158. Cad. No: 1/3, Çankaya/Ankara
E-mail: ayhankardaslar@gmail.com
Telephone: +90 537 470 67 62
Real Estate Trading Licence Number: 0605760-001

2. Personal Data Processed

Depending on the nature of the service, the following personal data of yours may be processed:

Identity: first name and surname; for contracts and title deed transactions, Turkish identity number and identity document details.
Contact: telephone number, e-mail address, postal address.
Customer transaction: listings you are interested in, the content of your enquiries and messages, appointment dates and times, viewing records, meeting notes.
Property information (for property owners): the address, title deed details and features of the property, its photographs and videos, the sale price or rent.
Finance: information relating to the sale price, rent, holding deposit, security deposit and service fee; payment and invoicing details.
Transaction security: the IP address, browser and device information, and date and time of access generated when you visit the website; session records for users who log in as members.

Evin Gayrimenkul does not request special categories of personal data (health, religion, biometric data, etc.) in order to provide its services. If documents you share contain such data, please redact them before sharing.

3. Methods of Collecting Personal Data

Your personal data are collected by automated and non-automated means through the following channels:

The contact, information request, viewing appointment, property valuation and listing submission forms on our website,
Telephone calls, WhatsApp and e-mail correspondence,
Your visits to our office and documents drawn up during viewings,
Communication you establish with us through listing platforms such as sahibinden.com and through our social media accounts,
Property enquiries referred to us, at your request, by our business partners such as Homefinders,
Server logs generated when you visit our website.

4. Purposes of Processing Personal Data

Receiving your enquiries about properties for sale and for rent, and identifying and presenting listings that suit you,
Scheduling viewing appointments and conducting viewings,
Assessing property owners’ properties, preparing them for listing and marketing them,
Concluding and performing brokerage (authorisation) agreements, and conducting sale and rental processes,
Fulfilling obligations arising from the Regulation on Real Estate Trade and from tax and commercial legislation,
Responding to your requests, suggestions and complaints,
Carrying out invoicing, accounting and financial operations,
Establishing, exercising and protecting rights in legal disputes; responding to requests from competent authorities,
Ensuring the security of the website and preventing misuse,
Where you have given explicit consent, informing you about new listings and promotions.

5. Legal Grounds for Processing Personal Data

Your personal data are processed on the basis of the following legal grounds listed in Article 5 of the KVKK:

Processing is directly related to the conclusion or performance of a contract (Art. 5/2-c): enquiry, appointment, viewing and brokerage processes,
Processing is necessary for the data controller to fulfil its legal obligations (Art. 5/2-ç): real estate trade, tax and commercial legislation,
Processing is necessary for the establishment, exercise or protection of a right (Art. 5/2-e),
Processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (Art. 5/2-f): website security, improving service quality,
Processing is expressly provided for by law (Art. 5/2-a),
In all other cases, in particular for promotional and informational messages, your explicit consent (Art. 5/1).

6. Transfer of Personal Data

Within Türkiye, your personal data may be transferred to the following recipients for the purposes above and in accordance with Article 8 of the KVKK:

The other party to the transaction that is the subject of your enquiry (buyer, seller, tenant or landlord), only to the extent required by the transaction,
Public authorities and institutions authorised by law (the Ministry of Trade, Land Registry and Cadastre Directorates, tax offices, judicial authorities, etc.),
The accounting, legal and information technology suppliers from whom we obtain services and, where the transaction requires it, banks and appraisal companies.

Abroad, your personal data may be transferred in the following cases in accordance with Article 9 of the KVKK:

E-mail: Forms on our website and e-mail correspondence are transmitted and stored via the Gmail service of Google LLC, whose servers are located abroad.
WhatsApp: If you correspond with us via WhatsApp, your messages are transmitted via the infrastructure of WhatsApp (Meta Platforms), whose servers are located abroad.
Website infrastructure: Listing maps are loaded from OpenStreetMap (OpenStreetMap Foundation, United Kingdom). In the process, your IP address and browser information are transmitted to this service provider.
Google Maps: The office map on the contact page is loaded from Google Maps (Google LLC, USA); when the map is displayed, your IP address, browser and device information are transmitted to Google. Links on the map and in addresses take you to Google Maps, where Google’s own privacy terms apply.
Form security: Cloudflare Turnstile (Cloudflare, Inc., USA) is used to protect our forms against automated (bot) submissions. When you open pages containing forms, your IP address, browser and device information are transmitted to Cloudflare for this verification; the information you type into the forms is not sent to Cloudflare.
United Kingdom (Homefinders): Evin Gayrimenkul is the Türkiye Office of Homefinders, which provides real estate services in the United Kingdom. If you make an enquiry concerning a property in the UK (purchase, rental, investment, financing, finding a tenant or property management), your name, surname, contact details and enquiry details (budget, area and property preferences, meeting notes) are shared with Homefinders, only to the extent required by the enquiry, so that your enquiry can be dealt with, and Homefinders may contact you directly for this purpose. How Homefinders processes this information as part of its own services is explained in Homefinders’ own privacy notice.
Other overseas business partners: If your enquiry concerns a property in another country, your data may be shared, for the same purpose and to the same extent, with our real estate business partners in that country.

Transfers abroad are made on the basis of one of the following conditions: an adequacy decision exists in respect of the destination country; one of the appropriate safeguards set out in Article 9/4 of the KVKK (e.g. the standard contract published by the Board) is provided; or, in incidental cases where these are not possible, you have given your explicit consent under Article 9/6 or the transfer is necessary for the performance of a contract concluded with you.

7. Retention Period of Personal Data

Your personal data are retained for as long as required by the purpose of processing and for the periods stipulated in the relevant legislation:

Information on enquiries and appointments that did not result in a transaction: 2 years from the date of last contact,
Brokerage agreements, viewing documents, invoices and accounting records: for the period stipulated in the relevant legislation (up to 10 years under tax and commercial legislation),
Server and access logs: for the period stipulated in the relevant legislation.

When the period expires or the conditions for processing cease to exist, your personal data are erased, destroyed or anonymised.

8. Cookies

Our website does not use cookies for advertising or visitor tracking, and it has no analytics tool. Only the strictly necessary cookies required for the features you use are used:

Favourite listings: When you add a listing to your favourites with the heart icon, the numbers of the listings you have favourited are written to a cookie stored in your browser for 30 days and used to display your list on the My Favourites page. The cookie contains only listing numbers; no favourites record relating to you is kept on our server. This cookie is not created unless you add a favourite.
Member login: Cookies that keep the session active for users who log in as members; they are deleted when you log out or the session expires.

You may block or delete cookies at any time in your browser settings; in that case, your favourites list and member login may not work.

9. Your Rights as a Data Subject

Under Article 11 of the KVKK, by applying to Evin Gayrimenkul, you may:

Learn whether your personal data are processed,
Request information about the processing if they have been processed,
Learn the purpose of the processing and whether the data are used in accordance with that purpose,
Know the third parties to whom they are transferred within Türkiye or abroad,
Request their rectification if they have been processed incompletely or inaccurately,
Request their erasure or destruction within the framework of the conditions set out in Article 7 of the KVKK,
Request that rectification, erasure or destruction be notified to the third parties to whom the data have been transferred,
Object to a result to your detriment arising from the analysis of the processed data exclusively by automated systems,
Claim compensation for damage if you suffer damage as a result of unlawful processing

These are your rights as a data subject.

10. Application Method

You may submit requests concerning your rights, together with information enabling your identity to be established, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller:

By a petition bearing your wet signature, delivered by hand or by post to Yaşamkent Mah. 3158. Cad. No: 1/3, Çankaya/Ankara,
By e-mail to ayhankardaslar@gmail.com from the e-mail address you have previously notified to us and that is registered in our system,
By registered electronic mail (KEP), secure electronic signature or mobile signature.

Your application will be concluded free of charge within 30 days at the latest; if the process requires an additional cost, a fee may be charged in accordance with the tariff set by the Personal Data Protection Board. If your application is rejected, if you find the response inadequate or if no response is given in time, you may lodge a complaint with the Personal Data Protection Board.

You can access the explicit consent text here and the terms of use here.