KVKK – Personal Data Protection Notice

Last Updated: September 2, 2026

1. Purpose of This Notice

This Personal Data Protection Notice (“Notice”) has been prepared by Boyut Group as the data controller in accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”).

The purpose of this Notice is to inform individuals whose personal data may be processed by Boyut Group about:

  • What personal data may be collected;

  • How personal data is collected;

  • The purposes for which personal data is processed;

  • The legal grounds for processing;

  • To whom personal data may be transferred;

  • How long personal data may be retained;

  • The rights of data subjects; and

  • How those rights may be exercised.

The Turkish Personal Data Protection Law No. 6698 was adopted on March 24, 2016 and published in the Official Gazette on April 7, 2016.

2. Data Controller

Within the scope of KVKK, the data controller is:

Boyut Group

Location: Istanbul, Türkiye

Telephone: +90 532 265 04 05
Email: ofida@boyutgroup.net

Business Hours: Monday – Friday, 09:00 AM – 07:00 PM

3. Categories of Personal Data Processed

Depending on your interaction with Boyut Group, the following categories of personal data may be processed:

Identity Information

  • Name

  • Surname

  • Title or professional information where voluntarily provided

Contact Information

  • Telephone number

  • Email address

  • Contact preferences

  • Communication details

Customer and Request Information

  • Property preferences

  • Investment preferences

  • Requested property information

  • Appointment information

  • Information contained in enquiry forms

  • Communications with our representatives

Transaction and Relationship Information

Where relevant to the services provided:

  • Records of communications

  • Requests and enquiries

  • Service-related information

  • Contract-related information

Transaction Security Information

Where technically necessary:

  • IP address

  • Browser information

  • Device information

  • Website access logs

  • Security and authentication records

Marketing Information

Where applicable and legally permitted:

  • Marketing preferences

  • Consent records

  • Communication preferences

  • Interaction with marketing communications

4. Methods of Collection

Personal data may be collected through:

  • Our website;

  • Contact forms;

  • Property enquiry forms;

  • Telephone communications;

  • Email communications;

  • Direct communications with our representatives;

  • Appointment requests;

  • Cookies and similar technologies;

  • Website analytics technologies;

  • Social media or third-party platforms where you interact with Boyut Group;

  • Other lawful communication channels.

Personal data may be collected electronically, verbally, in writing, or through automated systems depending on the nature of the interaction.

5. Purposes of Processing

Your personal data may be processed for the following purposes:

Communication

  • Responding to your enquiries;

  • Providing requested information;

  • Contacting you regarding a property or project;

  • Arranging meetings and consultations;

  • Providing customer support.

Real Estate and Investment Services

  • Understanding your property requirements;

  • Providing suitable property information;

  • Managing property enquiries;

  • Providing information about investment opportunities;

  • Arranging property-related communications and meetings.

Website and Information Security

  • Operating the website;

  • Maintaining website security;

  • Detecting unauthorized activity;

  • Preventing fraud and abuse;

  • Troubleshooting technical problems;

  • Improving website performance.

Legal Obligations

  • Complying with legal and regulatory obligations;

  • Responding to lawful requests by public authorities;

  • Maintaining records required by law;

  • Protecting and exercising legal rights.

Marketing

Where permitted by law and where required based on your consent:

  • Sending promotional communications;

  • Informing you about new projects;

  • Sending property and investment updates;

  • Providing event invitations;

  • Conducting marketing activities.

6. Legal Grounds for Processing

Personal data may be processed based on the applicable conditions under KVKK, including where:

  • Processing is expressly permitted by law;

  • Processing is necessary for the establishment or performance of a contract;

  • Processing is necessary for compliance with a legal obligation;

  • Processing is necessary for the establishment, exercise, or protection of a right;

  • Processing is necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not adversely affected;

  • Explicit consent is legally required and has been obtained.

The specific legal basis may vary depending on the type and purpose of processing.

7. Transfer of Personal Data

Your personal data may be transferred, where necessary and legally permitted, to:

  • Authorized employees and representatives of Boyut Group;

  • IT and hosting service providers;

  • Website and infrastructure providers;

  • Communication and email service providers;

  • Analytics and technology providers;

  • Professional advisers;

  • Legal and financial advisers;

  • Business partners where necessary to provide requested services;

  • Authorized public institutions and governmental authorities;

  • Other recipients where required or permitted by applicable law.

Boyut Group does not sell personal data to third parties.

8. International Transfers

Certain technology and service providers used by our website may operate or store information outside Türkiye.

Where personal data is transferred internationally, Boyut Group will comply with the applicable requirements of KVKK regarding cross-border data transfers and implement the safeguards required by law.

Where explicit consent or another legally recognized transfer mechanism is required, the relevant legal requirements will be followed.

9. Retention Period

Personal data will be retained for the period required to fulfil the purposes described in this Notice and for the periods required under applicable laws and regulations.

Once the applicable purpose and legal retention period have expired, personal data will be deleted, destroyed, or anonymized in accordance with applicable legislation.

10. Rights of the Data Subject

Pursuant to Article 11 of KVKK, data subjects have the right to:

  1. Learn whether their personal data is being processed;

  2. Request information if their personal data has been processed;

  3. Learn the purpose of processing and whether personal data is being used in accordance with that purpose;

  4. Know the third parties to whom personal data has been transferred domestically or internationally;

  5. Request correction of incomplete or inaccurate personal data;

  6. Request deletion or destruction of personal data where the legal conditions are met;

  7. Request notification of third parties regarding correction, deletion, or destruction;

  8. Object to a result arising against the data subject through the analysis of processed data exclusively by automated systems;

  9. Request compensation for damages arising from unlawful processing of personal data.

These rights are based on Article 11 of Law No. 6698.

11. Exercising Your Rights

You may submit your requests concerning your personal data to Boyut Group through the following contact details:

Boyut Group
Istanbul, Türkiye

Email: ofida@boyutgroup.net
Telephone: +90 532 265 04 05

For requests concerning personal data, you may be asked to provide sufficient information to verify your identity.

Boyut Group will respond to requests within the time period and under the procedures prescribed by applicable legislation.

12. Security Measures

Boyut Group takes reasonable technical and administrative measures to protect personal data against unauthorized access, unlawful processing, accidental loss, alteration, disclosure, or destruction.

These measures may include:

  • Access controls;

  • Authentication mechanisms;

  • Secure hosting infrastructure;

  • Security monitoring;

  • Technical updates;

  • Backup procedures;

  • Internal access restrictions;

  • Data minimization practices.

13. Special Categories of Personal Data

Boyut Group generally does not request or intentionally collect special categories of personal data through ordinary website enquiry forms.

If special categories of personal data become necessary for a specific legitimate purpose, such information will only be processed in accordance with the applicable requirements of KVKK.

14. Cookies and Online Technologies

Our website may use cookies and similar technologies for:

  • Essential website functionality;

  • Security;

  • Performance;

  • Analytics;

  • User experience improvements;

  • Marketing purposes where applicable.

Further information is available in our Cookie Policy.

15. Updates to This Notice

Boyut Group may update this Notice where necessary due to changes in legislation, technology, services, or data processing practices.

The current version will be published on this website.

Last Updated: September 2, 2026

16. Contact

For all questions concerning personal data protection and KVKK:

Boyut Group
Istanbul, Türkiye

Phone: +90 532 265 04 05
Email: ofida@boyutgroup.net

Office Hours: Monday – Friday, 09:00 AM – 07:00 PM

Chat with us