01
Data controller
The data controller is Şah Emlak ve Danışmanlık Ltd. Şti. (“Şah Emlak”). Address: Altınkum Mah., Yalı Cad. 74 Sk., Nurettin Bey Sitesi No:3/b, Didim / Aydın. Email: info@sahemlakdidim.com. Phone: +90 532 732 96 22.
MERSİS no.: [DOĞRULANMALI: MERSİS no]. VERBİS: [DOĞRULANMALI: VERBİS kaydı/istisnası].
02
Categories of personal data
- Identity: name and surname.
- Contact: phone number, email address, WhatsApp number.
- Enquiry details: listings you are interested in, budget and saved-search preferences, property details you share for a valuation (including the property address) or a management request, appointment preferences.
- Correspondence: messages sent via forms, email and WhatsApp; messages you write to the AI assistant (passed to Google to generate a reply, not stored on our site's server).
- Marketing: your notification preferences for new listings, price changes and saved searches, if you have separately opted in.
- Security: IP address, browser and device information, server logs, consent records.
Please do not enter ID or passport numbers, health information or other sensitive data in forms or in the assistant. Documents needed for the title deed transfer are requested separately by your adviser, in person or through a secure channel.
03
Purposes of processing
- Replying to your enquiries and giving information about listings.
- Arranging viewings and video tours.
- Providing valuation, sales, letting and after-sales management services and preparing offers.
- Answering your questions about the listings on this site through the AI assistant, and replying when you write to us on WhatsApp.
- Complying with real estate trading, tax and commercial regulations.
- Keeping the site secure, fixing errors and preventing misuse.
- Sending new-listing, price-change and saved-search notifications if you have separately opted in. Registration in the Message Management System (İYS) for commercial electronic messages: [DOĞRULANMALI: İYS kaydı].
04
How data is collected and legal bases
Your data is collected, partly by automated means, through the website forms, the AI assistant, WhatsApp, phone and email. At present the site only links to our office's WhatsApp number; no automated reply system runs on WhatsApp. If you press the “Ask our consultant on WhatsApp” button in the assistant, the text of your question is placed into a WhatsApp message addressed to our number; it reaches us only when you press send in WhatsApp.
- Necessary for entering into or performing a contract (KVKK Art. 5/2-c): replying to questions and requests sent via the forms and the assistant, appointments, service offers.
- Compliance with a legal obligation (Art. 5/2-ç): real estate trading and tax law.
- Establishing, exercising or defending a legal claim (Art. 5/2-e).
- Our legitimate interests, provided they do not harm your fundamental rights (Art. 5/2-f): site security and service quality.
- Your explicit consent (Art. 5/1): only for marketing notifications and optional analytics. You may withdraw consent at any time.
The checkbox in our forms confirms that you have read this notice; replying to your request does not rely on your consent.
05
Transfers within Turkey
Where necessary, your data may be shared with the owner or counterparty of the property you are interested in, with competent public authorities on request (Ministry of Trade, land registry offices, tax offices) and with our legal or financial advisers.
06
Transfers abroad
Our website and services rely on providers whose servers may be located outside Turkey. These transfers take place continuously while you use the site (page views, the map, the assistant). Your data is transferred to the following recipients within the meaning of KVKK Art. 9:
- Google LLC (Gemini API): for each question, your latest messages to the assistant (up to 12) are sent to Google together with the site's own listing and office information to generate a reply. The assistant currently runs on the free tier of the Gemini API; under Google's Gemini API terms (effective 23.03.2026), content sent on the free tier may be used to improve Google's products and may be read by human reviewers. Please therefore do not write ID, contact or other personal details to the assistant. Content may be processed in any country where Google has facilities.
- Google Firebase / Google Cloud (Google): form requests and the listings database (Firestore); listing photos, 360° and video files (Firebase Storage / Google Cloud Storage). These files may load directly from Google, in which case your IP address reaches Google.
- Vercel Inc. (USA): website hosting, server and function logs. Server region: [DOĞRULANMALI: Vercel sunucu bölgesi].
- OpenFreeMap (tiles.openfreemap.org): map tiles. When a map opens, your IP address and the map area you view reach the provider.
- Meta WhatsApp: conversations you start with us on WhatsApp.
These transfers are subject to the safeguards set out in KVKK Art. 9. [DOĞRULANMALI: m.9 aktarım dayanağı — standart sözleşme imza ve Kurul'a bildirim tarihi]
07
Retention periods
- AI assistant conversations: not stored on our site's server. The conversation is kept only in your own browser (sessionStorage) and is deleted when you close the tab. Our server keeps only aggregate cost counters (token counts) that contain no message content. For Google's abuse-monitoring logs, see “Transfers abroad”.
- WhatsApp conversations: [DOĞRULANMALI: WhatsApp yazışmalarının saklama süresi].
- Form requests (contact, listing question, video tour, viewing, valuation with property address, management, saved search): stored in Google Firebase (Firestore) once the office panel is connected. Retention period: [DOĞRULANMALI: talep kayıtlarının saklama süresi — ofis belirleyecek].
- Contracts, invoices and accounting records: for the periods required by law.
- Marketing consent: until you withdraw it; the withdrawal record is kept for the period required by law.
When the period ends, the data is deleted, destroyed or anonymised.
08
Your rights under KVKK Article 11
- To learn whether your personal data is processed;
- To request information about the processing;
- To learn the purpose of processing and whether data is used accordingly;
- To know the third parties in Turkey or abroad to whom data is transferred;
- To request correction of incomplete or inaccurate data;
- To request deletion or destruction under the conditions of KVKK Art. 7;
- To request that corrections, deletions or destruction be notified to third parties who received the data;
- To object to an outcome against you resulting solely from automated analysis;
- To claim compensation for damage caused by unlawful processing.
09
How to apply
To exercise your rights, email info@sahemlakdidim.com or write to the address above. Under the Communiqué on the Procedures and Principles of Application to the Data Controller, your request will be answered free of charge within 30 days at the latest. Our reply is given in writing or electronically; information given by phone or in person does not count as a reply. If you are not satisfied with the reply, you may lodge a complaint with the Turkish Personal Data Protection Board.