KVKK (Türkiye)

Information notice under Art. 10 of Turkish Law No. 6698

Data controller

The site is operated by: SMARTIA OOD (СМАРТИЯ ООД) · Burgas, Bulgaristan (AB). The data controller within the meaning of Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"): SMARTIA OOD (СМАРТИЯ ООД) · Burgas, Bulgaristan (AB). As the data controller is established in the European Union, processing is also subject to the GDPR; details are in the Privacy Policy.

Personal data processed

While you are only browsing the site (listing list/details), no personal data of yours is processed and you do not need to sign in. Data processing starts in two ways: (a) when you submit the Leave an enquiry form yourself, (b) when you choose to sign in with your Social-ID account (to publish a listing, open your profile page or report a piece of content).

(a) Enquiry form — not linked to your account:

Identity: full name
Contact: e-mail and/or phone (both optional)
Enquiry content: your message, the site language and — if you came from a listing page — the relevant listing number
Transaction security: your IP address (recorded in raw form), the surface the enquiry came from, its status and the submission time

(b) If you sign in with Social-ID — Burgaz.bg does not store or see passwords; from Social-ID we receive only your account identifier, your Social-ID number and, if present, your display name (authorisation scope profile social_number). E-mail, password, phone, date of birth and profile photo are not transferred. In addition, in our own database:

Account: your Social-ID number, display name (≤80 characters), language preference, and the account's creation/update time
Consent and status: the moment you accepted the terms of use, whether the account is active, and an administrator privilege flag if present
Listing content (user-generated): the listing title and description, transaction/property type, price, area, rooms, city and district, together with the photos you upload. The photos' EXIF data is removed entirely — GPS coordinates, device model and capture date do not pass into the listing; the long edge is scaled down to 1600 pixels.
Moderation: the content/user you reported, the reason, your note, the time and your account identifier; the user pairs you blocked
Session: a signed session cookie lasting 30 days and a security cookie that lives for 10 minutes during sign-in (details in the Cookie Policy)

Location data is not requested — the site does not access your device's location; only the property's city and district are recorded as you write them. Special categories of personal data are neither requested nor processed. As no payment is taken, no financial data is processed.

Visitor measurement: with the cookie-free measurement tools of our hosting provider Vercel (Vercel Analytics and Speed Insights), the address of the page viewed, the referring address, country, device type, operating system, browser, screen size and page-load speed values are processed. Your IP address is not stored; it is processed only momentarily to derive the country and to produce an irreversible digest that changes daily. There is no persistent identifier, no profiling and no cross-site tracking; details are in the Privacy Policy.

Purposes of processing

Receiving your enquiry, answering it and getting back to you
Providing information about the listing you are interested in
Detecting fake/automated bulk submissions and protecting site security

Legal basis

Name, contact details and enquiry content: KVKK Art. 5(2)(c) — being directly related to the conclusion or performance of a contract (steps taken at your request). IP record and security fields: KVKK Art. 5(2)(f) — the legitimate interest of the data controller. Account and listing data: KVKK Art. 5(2)(c) (opening your account and providing the listing publication service). The terms-acceptance stamp, account suspension and moderation records: KVKK Art. 5(2)(f) (legitimate interest — platform safety) and, where its conditions are met, Art. 5(2)(ç) (legal obligation).

Method of collection

Data is collected entirely by electronic means and directly from you: through the enquiry form on the site, the listing submission form and the report/block buttons. Your account fields (Social-ID number, display name, language) are received electronically from the Social-ID identity provider upon your sign-in consent. There is no collection channel other than these.

Transfers

Your data is not sold and is not shared for marketing. It is transferred, solely for the purpose of providing the service and to a limited extent, only to the providers used for the site's operation: hosting (including the same provider's cookie-free visitor measurement and the file store for listing photos), managed database and — if configured — e-mail delivery. When you choose to sign in, the Social-ID identity provider comes into play: your browser verifies your identity there and Social-ID returns to us the three fields above. The content of your published listing, in turn, becomes publicly visible at your own request. The database and serving region are in the European Union (Frankfurt). This processing outside Türkiye constitutes a transfer abroad within the meaning of KVKK Art. 9 and is necessary in order to convey your enquiry.

Retention

Your enquiry record is kept until your enquiry is concluded and afterwards for as long as necessary for abuse review and for tracing a possible dispute. No automatic deletion job is running; deletion is done manually upon request and resolved within 30 days.

Account and listing data is kept until you delete it. You can delete your account yourself, without waiting: the delete button on the My account page immediately deletes your account, your listings and your moderation traces. The detailed list and the exception concerning photo files are in the Privacy Policy §6.

Your rights (KVKK Art. 11)

You have the right to learn whether your personal data is processed; to request information if it has been processed; to learn whether it is used in line with its purpose; to know the third parties to whom it is transferred; to request rectification if it is processed incompletely or inaccurately; to request its erasure or destruction where the conditions are met; to request that these operations be notified to the third parties to whom the data was transferred; to object to a result arising to your detriment from analysis performed exclusively by automated systems; and to claim compensation for damage suffered due to unlawful processing.

Applications

You may send your applications to the address below; requests are resolved within 30 days.

You may also lodge a complaint with the Turkish Personal Data Protection Board. If you reside in the European Union, the Bulgarian Commission for Personal Data Protection (КЗЛД) or your own country's data protection authority is competent.