KVKK Disclosure Text
Effective Date: 16.08.2026
Pursuant to Article 10 of the Law No. 6698 on the Protection of Personal Data, this text is an information notice provided by Emlakme in its capacity as the data controller. The scope of this text is created based on the modules, widgets, and integrations currently active on this site; explanations regarding unused activities are not included herein.
2. Categories of Processed Personal Data
- Identity and contact data: first name, last name, email, phone
- Transaction security data: IP, session and access logs, device/browser information
- Request/complaint management data: messages and attachments you submit to us
The following sections list additional data categories belonging only to the services active on this site.
3. Processing Purposes
- Execution of communication and request management activities
- Execution of information security processes
- Execution of activities in accordance with legislation and informing authorized persons/institutions
- Improvement of service and ensuring business continuity
4. Legal Grounds (KVKK Art. 5 and Art. 6)
- Art.5/2-c — being directly related to the establishment or performance of a contract
- Art.5/2-ç — fulfillment of a legal obligation by the data controller
- Art.5/2-e — establishment, exercise, or protection of a right
- Art.5/2-f — legitimate interest, provided that it does not harm the fundamental rights and freedoms of the data subject
- Art.5/1 — explicit consent (only for processing based on consent)
5. Collection Method
Your personal data is collected by fully or partially automated means through forms and account transactions on the site, email and phone correspondence, cookies and similar technologies, and integrations active on the site.
6. Membership Data
Within the scope of membership registration, identity and contact data as well as customer transaction data are processed based on the legal grounds of the establishment and performance of the membership agreement (Art. 5/2-c) and the execution of information security processes (Art. 5/2-f).
7. Payment and Financial Data
Financial data is processed on the grounds of performance of a contract (Art. 5/2-c) and legal obligation (Art. 5/2-ç). It is transferred to the payment institution for the purpose of carrying out the payment transaction; card information is not stored in the data controller's systems.
8. Reservation Data
Identity, contact, and customer transaction data within the scope of the reservation are processed for the execution and performance of the contract (Art. 5/2-c). In cases where the service is provided by a third-party supplier (facility, tour operator, transportation provider), only the data essential for the performance of the service is transferred.
9. Form Data
The personal and contact information collected via the form is processed for the purpose of managing requests/complaints and conducting pre-contractual discussions, based on the legitimate interest (Art. 5/2-f) and, if requested, for the establishment of a contract (Art. 5/2-c).
10. Transfer
Your data may be transferred to our hosting and IT infrastructure providers, financial and legal advisors, and legally authorized public institutions, strictly limited to the relevant purpose. Transfers required by the services active on the site are explained in the relevant sections above. In the event of transfer abroad, the requirements of Article 9 of the KVKK are complied with.
11. Storage and Disposal
Your personal data is retained for the period stipulated in the relevant legislation or required for the purpose for which it is processed; upon expiration of the period, it is deleted, destroyed, or anonymized.
12. Rights of the Data Subject (KVKK Art. 11)
Under Article 11 of the Law, you have the right to learn whether your personal data is processed, request information if it has been processed, learn the purpose of processing and whether it is used in accordance with its purpose, know the third parties to whom your data is transferred, request the correction of data if it is incomplete or incorrectly processed, request its deletion or destruction when the relevant conditions are met, request that these operations be notified to third parties to whom the data has been transferred, object to any outcome against you resulting exclusively from analysis through automated systems, and demand compensation for damages incurred.
