1. Personal data we process

What we process depends on which of our services you use. Only the categories that apply to you are processed.

• Enquirers — identity and contact data: name, telephone number, e-mail address and the free text of your enquiry.
• Newsletter subscribers — contact data: e-mail address.
• Reviewers — identity, contact and transaction security data: name, e-mail, telephone if given, IP address, browser details and the moment consent was given.
• Property management clients — client transaction and financial data: rent collected, expense items and the associated receipt and invoice images.
• Portal users — transaction security data: IP address and browser details at sign-in.
• Staff and regional managers — identity, contact and transaction security data: name, e-mail, role, session records and a log of actions taken in the panel.

We do not request special categories of personal data (health, religion, membership and similar) anywhere on this site. Please do not enter such information into the free-text fields of our forms.

2. Purposes of processing

• Responding to your purchase, sale and letting enquiries
• Identifying and presenting suitable properties and arranging viewings
• Tracking rent and expenses under our property management service and reporting to the owner
• Where you request it, delivering the documents required for tax filing to your accountant
• Verifying that published reviews come from real people and preventing fraudulent reviews
• Maintaining information security and detecting misuse and automated attacks
• Meeting our obligations under applicable legislation and exercising our right of defence against legal claims

3. Method of collection and legal basis

Your personal data is collected by wholly or partly automated means through the forms on our website, the owner portal and the management panel. Each category has its own legal basis:

• Enquiry and property management data — KVKK art. 5/2-c: directly related to the conclusion or performance of a contract.
• Newsletter subscription and review publication — KVKK art. 5/1: your explicit consent, which you may withdraw at any time.
• IP and browser records — KVKK art. 5/2-f: the legitimate interest of the data controller in information security, provided this does not harm your fundamental rights and freedoms.
• Invoices, receipts and accounting records — KVKK art. 5/2-a: expressly provided for by law, and art. 5/2-ç: compliance with a legal obligation.

4. Transfers

Your data is not transferred to any person or organisation other than those listed below. It is never transferred to third parties for advertising, marketing or data trading purposes.

• Our regional offices: your enquiry is made available only to authorised staff at the office covering the relevant area.
• Your accountant: for property management clients, access to a given year's records is granted ONLY at your request, through a time-limited and revocable link. Access ends when the link expires or when we revoke it.
• Competent public authorities: only where required by legislation and limited to the scope requested.
• Our hosting provider: as a data processor at the data centre in Germany, so that the site and database can operate. Details below.

Transfers abroad — our website and database are hosted in a data centre located in Germany, within the European Union. The hosting provider is a data processor for the purposes of the KVKK; your data is processed only on our instructions and only to the extent the service requires, and may not be used for the provider's own purposes. Because holding data on a server outside Türkiye constitutes a transfer abroad under Article 9 of the KVKK, this transfer is carried out on the basis of one of the appropriate safeguards set out in that article — a standard contract signed with the provider and notified to the Personal Data Protection Board.

The transfer abroad covers every category of data listed in section 1 of this notice; by the nature of hosting, no distinction can be drawn between them. You may request detailed information about the scope, legal basis and recipient of the transfer using the procedure in section 8.

5. Retention periods

• Enquiry records: for the limitation period set out in the applicable legislation, running from the closure of the enquiry.
• Property management and accounting records: for the retention period required by tax legislation.
• Unverified reviews: deleted automatically once the verification window expires.
• Portal and panel session records: expired sessions are purged on a regular schedule.
• Newsletter subscription: until you unsubscribe.

At the end of the applicable period your data is erased, destroyed or irreversibly anonymised.

6. Security measures

• Transport security: all traffic is carried with current encryption (HTTPS).
• Access control: staff see only the data of their own region, and publishing rights are restricted.
• Password security: passwords are stored hashed with argon2id and exist in plain text nowhere.
• Session control: sessions can be revoked individually on the server.
• Image privacy: location and device information (EXIF) is stripped from uploaded photographs on the server.
• Traceability: every action in the panel is recorded together with the person who performed it.

7. Your rights as a data subject

Under Article 11 of the KVKK you have the right to:

• Learn whether your personal data is being processed and, if so, request information about it
• Learn the purpose of processing and whether the data is used in accordance with that purpose
• Know the third parties in Türkiye or abroad to whom the data is transferred
• Request correction where the data is incomplete or inaccurate
• Request erasure or destruction within the conditions set out in the law
• Request that correction, erasure and destruction be notified to third parties to whom the data was transferred
• Object to a result reached to your detriment through analysis carried out exclusively by automated systems
• Claim compensation where you suffer loss as a result of unlawful processing

8. How to make a request

In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit your request in writing to our address, or by e-mail to the address below from the e-mail address registered in our system. Your application must clearly state the information identifying you and the subject of your request.

Your application will be concluded as soon as possible and in any event within thirty days. No fee is charged unless the process entails a separate cost. If your application is refused, you retain the right to lodge a complaint with the Personal Data Protection Board within thirty days of the response being served on you.

9. Data controller

INTERESTING REAL ESTATE
Istanbul / Türkiye
contact@interestingrealestate.com

For a plain-language summary of what this site collects and which cookies it sets, see our Privacy Policy.