Legal
Privacy Policy
KVKK Disclosure Notice — Last updated: June 3, 2026
1. Data Controller
As the data controller under Law No. 6698 on the Protection of Personal Data ("KVKK"):
- Emlak Pro Takip
- Address: Kültür, 3864. Sk. No:20, 07090 Kepez/Antalya, Türkiye
- Email: [email protected]
- Web: www.emlakprotakip.com
2. What Personal Data Is Processed?
Identity and Contact Data
Name, surname, email address, phone number, occupation information (real estate consultant, office manager, property owner, etc.)
Account and Usage Data
Username, password hash, session information, in-platform transaction history, preferences and settings.
Subscription and Payment Data
Billing information, selected plan, payment dates. Card details are processed only by the payment infrastructure provider and are not stored on Emlak Pro Takip systems.
Real Estate and Portfolio Data
Property information, lease agreements, tenant/owner information, and payment plans entered by the user. This data belongs entirely to the user; Emlak Pro Takip processes it solely to provide the service.
Technical Data
IP address, browser/device information, operating system, app version, session durations, error logs.
Cookie Data
Session cookies, preference cookies, analytics cookies (see the cookies section below for details).
3. Purposes of Processing Personal Data
- Platform registration and identity verification
- Subscription management and billing
- Providing, improving and technically supporting the service
- Ensuring system security and fraud prevention
- Fulfilling legal obligations
- Delivering user notifications and service updates
- Analyzing anonymized usage statistics for product development
Separate explicit consent is obtained for marketing communications; no marketing messages are sent to users who have not consented.
4. Legal Bases for Processing
| Purpose | Legal Basis |
|---|---|
| Account creation and service delivery | Establishment and performance of the contract |
| Billing and accounting | Legal obligation |
| Security and log records | Legitimate interest |
| Marketing communications | Explicit consent |
| Product analytics (anonymized) | Legitimate interest |
5. Parties Personal Data Is Transferred To
Infrastructure and Technology Providers
Server hosting, database, email delivery and push notification services (e.g. Firebase). These providers act as data processors and only act on our instructions.
Payment Infrastructure
Credit card transactions are carried out through a PCI DSS compliant payment provider. Card data is not transferred to Emlak Pro Takip.
Legal Authorities
Data may be shared with competent public authorities in case of a court order, prosecutorial request, or legal obligation.
Your data is never sold or rented to advertising companies, data brokers, or third-party marketers.
6. Data Transfer Abroad
Part of the platform infrastructure may run on servers located abroad (e.g. Firebase/Google Cloud). These transfers are carried out in accordance with Article 9 of the KVKK, with adequate protective measures in place. Explicit consent is obtained from the user when required.
7. Data Retention Periods
| Data Category | Retention Period |
|---|---|
| Account and usage data | Duration of subscription + 3 years |
| Invoice and payment records | 10 years (Tax Procedure Law) |
| Technical logs and security records | 2 years |
| Marketing consents and opt-outs | 3 years |
| Deleted account data | Permanently deleted after 30 days |
Data with no legal retention obligation is automatically deleted or anonymized once the period expires.
8. Data Security
Emlak Pro Takip applies the following technical and administrative measures to protect personal data:
- TLS/SSL encryption during transmission
- Encrypted storage of sensitive data in the database
- Passwords stored only as one-way hashes
- Role-based access control
- Regular security updates and backups
- Staff privacy training and commitments
In the event of a data breach, the Personal Data Protection Authority is notified within 72 hours pursuant to Article 12 of the KVKK; affected users are informed as soon as possible.
9. Your Rights Under KVKK
Pursuant to Article 11 of the KVKK, you have the following rights:
- Information: Learn whether your personal data is being processed
- Access: Request access to your processed data
- Correction: Request correction of incomplete or inaccurate data
- Erasure: Request deletion of your data where conditions are met
- Restriction of processing: Request that processing be halted in certain circumstances
- Portability: Request your data in a structured format
- Objection: Object to processing based on legitimate interest
- Objection to automated decisions: Object to decisions made solely by automated systems
How to Apply: You can send your requests to [email protected] from your registered email address with the subject "KVKK Application". Requests are answered within 30 days; this period may be extended to 60 days for complex cases, and you will be informed accordingly.
If you are not satisfied with the outcome of your application, you may file a complaint with the Personal Data Protection Authority (kvkk.gov.tr).
10. Cookies
The platform uses cookies for session management, security, and improving user experience.
| Cookie Type | Purpose | Mandatory |
|---|---|---|
| Session cookies | Maintaining login state | Yes |
| Preference cookies | Language, theme settings | No |
| Analytics cookies | Usage statistics | No |
Your consent is requested on first visit for non-mandatory cookies. You can manage cookies through your browser settings; however, disabling mandatory cookies may affect platform functionality.
11. Policy Updates
This policy may be updated from time to time. You will be notified at your registered email address of significant changes, and the "Last updated" date at the top of the policy will be revised. Continuing to log into the platform means you accept the current policy.
12. Contact
- Email: [email protected]
- Address: Kültür, 3864. Sk. No:20, 07090 Kepez/Antalya, Türkiye
- Working hours: Monday – Friday, 09:00 – 18:00