Cookie Policy

As ERRA PROPTECH GAYRİMENKUL GELİŞTİRME ANONİM ŞİRKETİ (“Errahome”), we show utmost sensitivity to the security of your personal data.
This policy has been prepared to inform you about the principles adopted by Errahome in the protection and processing of personal data, the purposes for which your personal data is processed, the method and legal purpose of collecting your personal data, and the transfer of your personal data.

PERSONAL DATA ABOUT USERS
Your personal data specified below may be processed by Errahome in line with the purposes and processing conditions specified in this text.

a. Identity Data
Name, surname, Turkish ID Number, Passport Number, Date of Birth, Place of Birth.

b. Communication Data
Phone number, email address, internal company contact information (company phone number, extension phone number, corporate email address)

c. Payment Information
Redirection to card payment system.

d. Customer Transaction Data
Website usage data, statistical data.

e. Location Information
Your country, city and address information entered manually.

f. User Transaction Records, Login Methods

h. Other Data

If the accommodation is sponsored by a company; company name, company tax identification number, company address, Invoice-Bills-Cheque Information, Order Information, reservation history information, IP address information, website login-logout records, request-complaint information.

PURPOSE OF PROCESSING PERSONAL DATA
Within the scope of Article 10 of the KVKK and Article 5 of the Communiqué, personal data of members may be processed for the following purposes in accordance with the processing conditions specified in Article 4 of the KVKK:

Fulfillment of service obligations in accordance with the service contract.
Carrying out contract processes regarding reservations made through the website.
In order to fulfill the requirements of the services we provide to our customers in accordance with the requirements of the contract and technology and to improve the services we offer;
To provide information to prosecutors, courts and relevant public officials on matters related to public security and legal disputes, upon request and in accordance with the legislation;
To be able to offer a wide range of opportunities to our members or to share these opportunities with individuals or institutions that can offer them within the legal framework;
Carrying out the reservation process, payment process and issuing invoices.
To be able to communicate with users during the contract process.
Creating your membership registration and logging into your account.
Providing information about possible changes in the terms of service,
Preparing all records and documents that will form the basis of the transaction in electronic (internet/mobile etc.) or paper format,
Fulfilling legal obligations and exercising rights arising from current legislation,
Providing information to authorized persons, institutions and organizations
Execution of emergency management processes
Carrying out communication activities
Carrying out accounting and financial affairs
Carrying out storage and archive activities
Conducting analyses, reporting and auditing activities to improve products and services.
To be able to provide information regarding complaints/suggestions.

METHOD AND LEGAL REASON FOR COLLECTING PERSONAL DATA
Personal data may be obtained directly from the relevant person, third parties, and legal authorities during the establishment of a legal relationship. In this context, personal data is collected verbally, in writing, or electronically through written or verbal communication channels with our Company, such as through tools such as email, as required by the user agreement.
According to Article 5 of the Personal Data Protection Law (KVKK), personal data cannot be processed without the explicit consent of the data subject. The law specifies exceptions where explicit consent is not required. Personal data may be processed by our company without explicit consent, provided that there is an explicit provision in the law, it is directly related to the establishment or performance of a contract, processing personal data belonging to the parties to the contract is necessary, it is necessary for the company to fulfill its legal obligation, it has been made public by the data subject, data processing is necessary for the establishment, exercise, or protection of a right, and processing is necessary for the legitimate interests of the data controller, provided that it does not prejudice the fundamental rights and freedoms of the data subject.
In order for ERRAHOME to continue its activities, personal data is processed within the scope of the conditions and purposes of processing specified in Articles 5 and 6 of the KVKK and in line with the principles and procedures stipulated by other relevant legislation, in order to achieve the purposes specified in this Disclosure Text and to fulfill legal obligations, for the legal reasons stated above.
In this context, your name, surname, contact information, address, Turkish ID Number, date of birth, place of birth, payment information, customer transaction information obtained from the website; and if the accommodation is sponsored by a company; company name, company tax identification number, company address, Invoice-Bills-Cheque Information, Order Information, reservation history information, IP address information, website login-logout records, request-complaint information are processed automatically through the website because they are necessary for the establishment and performance of the contract established with ERRAHOME, the processing of personal data to fulfill our legal obligations, and is mandatory for our legitimate interests.
In addition, your name, surname and contact information are processed, with your explicit consent, during the conduct of promotions, campaigns and advertising activities within the scope of products and services provided by ERRAHOME, within the scope of advertising, promotion and information in the areas where ERRAHOME operates commercially.

TO WHOM AND FOR WHAT PURPOSE PERSONAL DATA MAY BE TRANSFERRED
Customers' personal data may be shared and transferred with our shareholders, direct or indirect domestic/international affiliates; member companies using the errahome.com infrastructure, including but not limited to persons and organizations related to the services provided; program partner organizations from whom we receive services, cooperate, domestic/international organizations, and private legal entities from whom we receive services (in matters of audit, law, etc.); independent auditing firms; financial institutions; business partners at home and abroad, primarily direct and indirect affiliates; companies located at home and abroad that provide storage, archiving, and information technology support (servers, hosting, programs, cloud computing); and legally authorized public institutions, provided that adequate and effective measures are taken in accordance with the security and confidentiality principles set forth in the legislation in order to achieve the above-mentioned purposes.

STORAGE PERIOD OF PERSONAL DATA
In accordance with the provisions of the Personal Data Protection Law, when the purpose requiring processing of your personal data for the purposes specified in this text is eliminated in accordance with Article 7/f.1 of the Personal Data Protection Law and/or when the limitation periods required for processing your data by us in accordance with the legislation expire, your personal data will be deleted, destroyed or anonymized and will continue to be used by us, taking into account the Personal Data Storage and Destruction Policy.

OUR LEGAL OBLIGATIONS REGARDING THE PROCESSING OF PERSONAL DATA
As ERRAHOME, we hereby inform you of our legal obligations arising from KVKK as the data controller with this policy.

Obligation to Disclose

As ERRAHOME, we fulfill our obligation to inform you within the scope of the processing of your personal data, in accordance with the Communiqué on the Procedures and Principles to be Complied with in Fulfilling the Obligation to Inform You.

Our obligation to inform; in accordance with the Communiqué; the purposes and method of obtaining your personal data, legal reasons, retention periods, your rights arising from KVKK as the relevant person, within the scope of our information as the data controller. “Information Text” We present it to you with.

Obligation to Ensure the Security of Personal Data

As ERRAHOME, we aim to prevent your personal data from being processed unlawfully, to prevent unlawful access to your personal data, and to ensure that your personal data is stored in accordance with the law. We take all necessary technical and administrative measures.

In addition, we fulfill the obligations stipulated by the KVKK regarding the deletion, destruction and anonymization of your personal data and take the necessary actions at the end of the legal periods. According to Article 7/f.1 of the KVKK, when the purpose requiring processing ceases and/or when the limitation periods required for us to process your data pursuant to the legislation expire, your personal data will be deleted, destroyed or anonymized and will continue to be used by us, taking into account the Personal Data Storage and Destruction Policy.

Obligation to Respond to Related Person Applications

At ERRAHOME, we ensure that all requests and applications from interested parties are resolved and responded to as quickly as possible. Your requests will be evaluated and finalized by the Company as quickly as possible, and in any case, within 30 (thirty) days.

Obligation to Register in the Data Controllers Registry Information System (VERBIS)

We fulfill our company's obligation to register with the Data Controllers Registry Information System ("VERBIS"), in accordance with Article 16 of the Personal Data Protection Law and the Regulation on the Data Controllers Registry. As part of our company's data processing activities, we keep our VERBIS registration up-to-date and make details about our data processing activities publicly available.

Obligation to Fulfill Personal Data Protection Board Decisions

At ERRAHOME, we are extremely committed to ensuring compliance with KVKK, its communiqués, and Board Decisions. In this context, we follow the principles and Board decisions that are binding on all data controllers and take the necessary steps to implement all technical and administrative measures.

PROTECTION OF PERSONAL DATA
ERRAHOME is obligated to protect the systems and databases that house your personal data, in accordance with Article 12 of the Personal Data Protection Law, from unlawful processing of personal data, to prevent unauthorized access, and to implement software and physical security measures, such as hashing, encryption, transaction logging, and access management, to ensure their safekeeping. If it becomes known that personal data has been obtained by others through unlawful means, the situation must be reported immediately, in accordance with legal regulations, and in writing to the Personal Data Protection Board.

BASIC PRINCIPLES ON THE PROTECTION OF PERSONAL DATA
As Halapp, we comply with the general principles and conditions set forth in the legislation regarding the protection and processing of personal data, and we act in accordance with the principles listed below in order to ensure that personal data is processed in accordance with the Constitution and the Personal Data Protection Law.

Personal Data Processing Activities Must Be in Compliance with Law and the Rule of Integrity
Ensuring that Personal Data is Accurate and Up-to-Date when Necessary
Processing of Personal Data for Specific, Clear and Legitimate Purposes
Being Relevant, Limited and Proportionate to the Purpose for Which They Are Processed
Preservation for the Period Stipulated in the Relevant Legislation or Necessary for the Purpose for which they are Processed

YOUR RIGHTS AS A RELATED PERSON AND THEIR USE
As the relevant person, you can benefit from all the rights granted to personal data owners in accordance with the Personal Data Protection Law.
Article 20 of the Turkish Constitution stipulates that everyone has the right to be informed about personal data concerning them, and Article 11 of the Personal Data Protection Law stipulates that a Data Subject has the right to "request information." In this context, the Company will provide you with information upon your request.
You also have the following rights under Article 11 of the KVKK:

To learn whether your Personal Data is being processed,
To request information regarding the processing of personal data,
To learn the purpose of processing your Personal Data and whether they are used in accordance with their purpose,
To know the third parties to whom Personal Data is transferred, either domestically or abroad,
To request correction of your Personal Data if it is processed incompletely or incorrectly,
To request the deletion/destruction of your Personal Data within the framework of the conditions stipulated in Article 7 of the KVKK and to request notification to third parties to whom your Personal Data has been transferred,
To object to any adverse results arising from the analysis of processed data exclusively through automated systems,
To request compensation in case they suffer damage due to processing of their Personal Data in violation of KVKK.

As personal data owners, you can submit your requests regarding these rights to us by submitting a petition prepared in accordance with the conditions specified in the Communiqué on the Procedures and Principles of Application to the Data Controller, using one of the methods listed below.

APPLICATION METHOD	APPLICATION ADDRESS
Written Application in Person	Hamidiye Neighborhood, Cendere Street, No: 103/1, Porta Vadi T2 Block Floor: 1 Flat: 5, Kağıthane/Istanbul
Notary / Cap	erraproptech@hs01.kep.tr
From your e-mail address that you previously provided to Errahome	bilgi@errahome.com

Your requests will be evaluated and resolved by the Company as soon as possible and in any case within 30 (thirty) days. errahome.com may respond to submitted requests, whether positive or negative, in writing or digitally, provided that they are reasoned and responded to within 30 days. Essentially, the necessary procedures related to requests are free of charge. However, if these procedures require a fee, errahome.com reserves the right to charge a fee. These fees are determined by the Personal Data Protection Board according to the tariff set in accordance with Article 13 of the Personal Data Protection Law.

Policy update date: 04.12.2023

Personal Data	: Any information relating to an identified or identifiable natural person.
Processing of Personal Data	: Any operation performed on personal data, such as obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data, either fully or partially by automatic means or non-automatic means provided that it is part of any data recording system.
Data Controller	: The natural or legal person responsible for determining the purposes and means of processing personal data and for establishing and managing the data recording system. Within the scope of this text, the data controller is "Erra Proptech Gayrimenkul Geliştirme A.Ş."
Data recording system (VERBIS)	: It is a recording system in which personal data is structured and processed according to certain criteria.
Explicit Consent	Consent: Consent based on information and expressed with free will regarding a specific subject.
Board	: Refers to the Personal Data Protection Board.
Cookies	Cookies are small files that are saved on users' computers or mobile devices and help store preferences and other information about the web pages they visit.
Contact Person	: The real person whose personal data is processed.