Legal

Privacy Policy

KVKK Disclosure Notice — Last updated: June 3, 2026

1. Data Controller

As the data controller under Law No. 6698 on the Protection of Personal Data ("KVKK"):

  • Emlak Pro Takip
  • Address: Kültür, 3864. Sk. No:20, 07090 Kepez/Antalya, Türkiye
  • Email: [email protected]
  • Web: www.emlakprotakip.com

2. What Personal Data Is Processed?

Identity and Contact Data

Name, surname, email address, phone number, occupation information (real estate consultant, office manager, property owner, etc.)

Account and Usage Data

Username, password hash, session information, in-platform transaction history, preferences and settings.

Subscription and Payment Data

Billing information, selected plan, payment dates. Card details are processed only by the payment infrastructure provider and are not stored on Emlak Pro Takip systems.

Real Estate and Portfolio Data

Property information, lease agreements, tenant/owner information, and payment plans entered by the user. This data belongs entirely to the user; Emlak Pro Takip processes it solely to provide the service.

Technical Data

IP address, browser/device information, operating system, app version, session durations, error logs.

Cookie Data

Session cookies, preference cookies, analytics cookies (see the cookies section below for details).

3. Purposes of Processing Personal Data

  • Platform registration and identity verification
  • Subscription management and billing
  • Providing, improving and technically supporting the service
  • Ensuring system security and fraud prevention
  • Fulfilling legal obligations
  • Delivering user notifications and service updates
  • Analyzing anonymized usage statistics for product development

Separate explicit consent is obtained for marketing communications; no marketing messages are sent to users who have not consented.

4. Legal Bases for Processing

PurposeLegal Basis
Account creation and service deliveryEstablishment and performance of the contract
Billing and accountingLegal obligation
Security and log recordsLegitimate interest
Marketing communicationsExplicit consent
Product analytics (anonymized)Legitimate interest

5. Parties Personal Data Is Transferred To

Infrastructure and Technology Providers

Server hosting, database, email delivery and push notification services (e.g. Firebase). These providers act as data processors and only act on our instructions.

Payment Infrastructure

Credit card transactions are carried out through a PCI DSS compliant payment provider. Card data is not transferred to Emlak Pro Takip.

Legal Authorities

Data may be shared with competent public authorities in case of a court order, prosecutorial request, or legal obligation.

Your data is never sold or rented to advertising companies, data brokers, or third-party marketers.

6. Data Transfer Abroad

Part of the platform infrastructure may run on servers located abroad (e.g. Firebase/Google Cloud). These transfers are carried out in accordance with Article 9 of the KVKK, with adequate protective measures in place. Explicit consent is obtained from the user when required.

7. Data Retention Periods

Data CategoryRetention Period
Account and usage dataDuration of subscription + 3 years
Invoice and payment records10 years (Tax Procedure Law)
Technical logs and security records2 years
Marketing consents and opt-outs3 years
Deleted account dataPermanently deleted after 30 days

Data with no legal retention obligation is automatically deleted or anonymized once the period expires.

8. Data Security

Emlak Pro Takip applies the following technical and administrative measures to protect personal data:

  • TLS/SSL encryption during transmission
  • Encrypted storage of sensitive data in the database
  • Passwords stored only as one-way hashes
  • Role-based access control
  • Regular security updates and backups
  • Staff privacy training and commitments

In the event of a data breach, the Personal Data Protection Authority is notified within 72 hours pursuant to Article 12 of the KVKK; affected users are informed as soon as possible.

9. Your Rights Under KVKK

Pursuant to Article 11 of the KVKK, you have the following rights:

  • Information: Learn whether your personal data is being processed
  • Access: Request access to your processed data
  • Correction: Request correction of incomplete or inaccurate data
  • Erasure: Request deletion of your data where conditions are met
  • Restriction of processing: Request that processing be halted in certain circumstances
  • Portability: Request your data in a structured format
  • Objection: Object to processing based on legitimate interest
  • Objection to automated decisions: Object to decisions made solely by automated systems

How to Apply: You can send your requests to [email protected] from your registered email address with the subject "KVKK Application". Requests are answered within 30 days; this period may be extended to 60 days for complex cases, and you will be informed accordingly.

If you are not satisfied with the outcome of your application, you may file a complaint with the Personal Data Protection Authority (kvkk.gov.tr).

10. Cookies

The platform uses cookies for session management, security, and improving user experience.

Cookie TypePurposeMandatory
Session cookiesMaintaining login stateYes
Preference cookiesLanguage, theme settingsNo
Analytics cookiesUsage statisticsNo

Your consent is requested on first visit for non-mandatory cookies. You can manage cookies through your browser settings; however, disabling mandatory cookies may affect platform functionality.

11. Policy Updates

This policy may be updated from time to time. You will be notified at your registered email address of significant changes, and the "Last updated" date at the top of the policy will be revised. Continuing to log into the platform means you accept the current policy.

12. Contact

  • Email: [email protected]
  • Address: Kültür, 3864. Sk. No:20, 07090 Kepez/Antalya, Türkiye
  • Working hours: Monday – Friday, 09:00 – 18:00