Personal data protection — privacy notice (KVKK)
DRAFT · The text is pending legal review; the information published here is current and complete.
Data controller
Under Article 10 of the Personal Data Protection Law No. 6698 (“KVKK”), this notice explains how your personal data is processed by STAY ISTANBUL (“StayIstanbul”) as data controller. Address: Merkez Mah. Duci Sok. Bina No:4 D.348 Şişli / İstanbul. Email: hello@stayistanbul.com.tr. It is written for visitors of stayistanbul.com.tr, people who use the contact form, write by email or WhatsApp, and property owners who request a call.
Personal data processed
Identity and contact data: name and surname, email address, phone number (optional), the country and time zone you live in. Property and request data: the property’s district, number of rooms, vacant or tenanted status, the package you are interested in and the content of your message. Transaction security data: IP address and time of submission when the form is sent (only to prevent abuse, kept briefly). The site uses no analytics or tracking cookies; see the Cookie policy. Special categories of data (health, religion, biometrics and the like) are not requested; if you include them in your message on your own initiative, they are processed only to the extent needed to handle your request.
How data is collected
Your data is collected electronically and partly by automated means through the contact form on the site, emails you send to hello@stayistanbul.com.tr, messages to the WhatsApp line and information you share during the call.
Purposes of processing
To assess your call request and contact you; to answer your question; if you ask, to identify the package that fits your property and prepare a service contract; if a contract is concluded, to deliver the management service (rent collection, owner statement, power of attorney procedures); to meet our legal obligations (tax, e-invoicing, record keeping); to keep the form and contact channels secure. Your data is not used for marketing profiling or automated decision-making.
Legal grounds
KVKK art. 5/2-c: processing directly related to the conclusion or performance of a contract (call request, proposal, service contract). KVKK art. 5/2-ç: compliance with a legal obligation of the controller (tax and commercial legislation). KVKK art. 5/2-f: our legitimate interest, provided it does not harm your fundamental rights and freedoms (security of contact channels, keeping records of requests). For any processing outside these grounds we rely on the explicit consent you give by ticking the box in the form (KVKK art. 5/1); you may withdraw consent at any time, without affecting the lawfulness of earlier processing.
Transfers
Your data is transferred only to the extent necessary to handle your request and in line with KVKK arts. 8 and 9: to our email delivery and site hosting providers (whose servers may be located abroad; this transfer is necessary to perform the service and is made under the procedure in KVKK art. 9); if a service contract is concluded, to our partner law firm and accountant; where legally required, to competent public authorities. Your data is never sold or shared with third parties for advertising or marketing.
Retention
Call requests and questions are deleted within a reasonable time after the request is closed if no service contract is concluded. If a contract is concluded, data is kept for the term of the contract and, after it ends, for the limitation and retention periods set by law (Turkish Code of Obligations art. 146, general limitation of ten years; Tax Procedure Law art. 253, five years; Turkish Commercial Code art. 82, ten years); at the end of the period it is deleted, destroyed or anonymized. Transaction security records (IP, time) are kept only for the short period needed to prevent abuse.
Data security
Under KVKK art. 12 we take reasonable technical and organizational measures against unauthorized access, loss and unlawful processing: encrypted connections (HTTPS), access limited to authorized staff, data processing agreements with the email and hosting providers, and no unnecessary logging of personal data.
Your rights as data subject
Under KVKK art. 11: to learn whether your personal data is processed; to request information if it is; to learn the purpose and whether it is used accordingly; to know the third parties to whom it is transferred in Turkey or abroad; to request correction if incomplete or inaccurate; to request deletion or destruction under the conditions in art. 7; to request that corrections, deletions and destructions be notified to third-party recipients; to object to a result against you produced exclusively by automated analysis; and to claim compensation for damage caused by unlawful processing.
How to apply
You may submit requests concerning your rights, together with information identifying you, by email to hello@stayistanbul.com.tr or in writing to Merkez Mah. Duci Sok. Bina No:4 D.348 Şişli / İstanbul, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Your application is concluded free of charge within thirty days at the latest; if the process requires an additional cost, the tariff set by the Personal Data Protection Board applies. If your application is refused, the answer is found insufficient or no answer is given in time, you may lodge a complaint with the Personal Data Protection Board under KVKK art. 14.
Changes
This notice may be updated to reflect changes in legislation or in our services; the current version and its date are published on this page.