Privacy Policy.
This Privacy Policy explains how EKSA Yapı A.Ş. ("EKSA") collects, uses and protects personal data under Turkey's Personal Data Protection Law No. 6698 ("KVKK") and, where applicable, GDPR principles.
1. Data Controller
EKSA is an Eksioğlu Group company operating in real estate development. It acts as the data controller under KVKK.
Address: Barbaros Mah. Şen Sk. No: 16/6 Ataşehir · Istanbul
Email: kvkk@eksa.tr
Phone: 0850 346 46 52
2. Categories of Personal Data
We collect and process the following personal data through our website, sales offices and electronic communication channels:
- Identity: first name, last name
- Contact: email address, phone number
- Transaction security: IP address, cookie IDs, browser info, visit timestamp
- Customer activity: project of interest, request / inquiry content, preferred contact method
3. Purposes of Processing
Your personal data is processed for the following purposes:
- Responding to your inquiries and managing the sales process,
- Conducting pre-contractual negotiations and, where a contract is signed, performing obligations,
- Ensuring website security and measuring performance,
- Fulfilling our legal obligations (tax, commercial, consumer law, etc.),
- Sending promotional and marketing communications only with your explicit consent.
4. Legal Basis
Your personal data is processed under KVKK Article 5/2 on the grounds that (a) processing is expressly stipulated by law, (c) necessary for the conclusion or performance of a contract, (ç) necessary for compliance with a legal obligation, (e) necessary for the establishment, exercise or protection of a right, and (f) necessary for our legitimate interests. Marketing-related processing takes place only under your explicit consent (Article 5/1).
5. Data Sharing
Your personal data may be shared with our business partners (independent architectural studios, sales advisors, our law firm), IT service providers (hosting, email, analytics) and, where required, authorised public institutions. Cross-border transfers are evaluated under KVKK Article 9 and carried out only with appropriate safeguards and contractual guarantees.
6. Retention
Personal data is retained only for as long as the purpose of processing requires and for the minimum periods stipulated by relevant legislation. After the retention period, your data is deleted, destroyed or anonymised.
7. Your Rights (KVKK Article 11)
As a data subject you have the right to: learn whether your data is being processed; request information about the processing; learn its purpose and whether it is used in accordance with that purpose; know the third parties to whom data has been transferred domestically or abroad; request correction if data is incomplete or inaccurate; request deletion or destruction under KVKK Article 7; request notification of such corrections / deletions to third parties; and object to outcomes against you resulting from analysis carried out exclusively through automated systems.
To exercise these rights, please submit your request in writing to kvkk@eksa.tr. Requests within the scope of the Communiqué on Application Procedures and Principles are answered within 30 (thirty) days at the latest.
8. Updates
This policy may be revised from time to time due to legislative changes or updates to our processing activities. The effective date is shown at the top.