Disclosure Text

EYG Personal Data Security
Welcome to EYG!
As EYG GAYRİMENKUL YATIRIM ORTAKLIĞI A.Ş. (EYG), we take utmost care in protecting your personal data and private information. Therefore, we want you to feel secure when visiting our company, offices, social and digital platforms, website, and call center. During your visit, it is essential for us to safeguard your personal space while processing your personal data. Administrative and technical measures necessary to protect your data are implemented in all operations related to your personal data. The personal information recorded during your visit to our company, offices, social and digital platforms, website, and call center is processed in accordance with the legislation on Personal Data Protection. Please review our Data Security Policy, which you can also find on our website. The Data Security Code of Conduct applicable to EYG can be found within this policy. However, it is important to note that EYG cannot guarantee data security for other websites you may be directed to (linked) through EYG websites. Please carefully review the privacy agreement of the respective page.

1. Our Principles Regarding the Processing of Personal Data

As EYG, we adhere to the following principles:
a) Processing in compliance with the law and principles of honesty,
b) Striving to ensure accuracy and up-to-dateness,
c) Processing for specific, explicit, and legitimate purposes,
ç) Being relevant, limited, and proportionate to the purposes for which they are processed,
d) Retaining data for as long as required by relevant legislation or necessary for the purpose for which it is processed.

2. Disclosure Text Regarding Personal Data

Article 10 of the Personal Data Protection Law No. 6698 (KVKK) requires that individuals whose data is being processed be informed when their consent is obtained. The title of the article is “Obligation of the Data Controller to Inform.” According to the provisions of the KVKK, EYG is the ‘data controller.’ In this context, the obligation to inform includes providing information to “data subjects” about the identity of the data controller, the purposes of processing personal data, the recipients of personal data and the purposes of sharing, the legal grounds for collecting personal data, potential recipients, and methods of data transfer. Additionally, it includes informing data subjects about their rights listed in Article 11 of the KVKK, such as the right to request updates, deletions, or anonymization of their data.

As EYG, we are committed to informing and enlightening all our visitors, including you, our valued customers and guests, in accordance with Article 10 of the KVKK through the brief disclosure statement provided below.

3. Identity of the Data Controller

According to Article 3, paragraph 1, subparagraph (ı) of the KVKK, a data controller is defined as “the natural or legal persons who determine the purposes and means of processing personal data and are responsible for establishing and managing the data recording system.” In this context, the data controller is EYG, the entity you visit on our website.

EYG GAYRİMENKUL YATIRIM ORTAKLIĞI A.Ş.
Necip Fazıl Mah. Hamza Yerlikaya Bulvarı No: 10
Ümraniye / İstanbul
[email protected]

4. Data Processor

A data processor (KVKK Art. 3) refers to a natural or legal person who processes personal data on behalf of the data controller based on the authority granted by the data controller.

5. Methods of Collecting and Processing Personal Data

Your data is retained and processed by EYG only with your consent or in cases of legal compliance. Your personal data is collected by EYG through various channels and based on legal grounds for the purpose of conducting our commercial activities. Your personal data may also be collected, processed, and transferred for the purposes specified in this Disclosure Text, in accordance with the personal data processing conditions and purposes outlined in Articles 5 and 6 of the KVKK.

Your personal data may be collected verbally, in writing, or electronically through both automated and non-automated methods, including our company, call center, website, social and digital platforms, mobile applications, forms, sales offices, subcontractors, business partners, individuals or entities with whom we have a business relationship, and similar means.

Your personal data is updated as necessary to ensure its accuracy and up-to-dateness.

When you physically visit EYG’s office buildings, sales offices, or agencies to benefit from our products and services or to obtain information, when you use our call centers, or when you visit our websites and/or other social and digital platforms, as well as when you participate in events, seminars, organizations, training sessions, and similar activities organized by EYG—your personal data may be processed.

This includes, but is not limited to, situations that comply with legal regulations.

In the following cases, your personal data may be processed without the requirement of explicit consent:

6. Purposes of Processing Personal Data

Your personal data is processed in accordance with the Personal Data Protection Law and all relevant legislation for the following purposes:

• To fulfill our legal obligations as required or mandated by legal regulations,
• To provide software services and other outsourced services necessary for the execution of operational activities,
• To ensure that our company’s commercial activities are conducted in compliance with legislation and company policies, including necessary work by relevant units, determination of business strategies, and execution of activities accordingly,
• To identify, plan, and implement our company’s short, medium, and long-term commercial policies.
• To customize the services, products, and projects offered by our company based on the preferences, usage habits, and needs of relevant individuals, and to provide information about products, services, and projects,
• To ensure effective customer service,
• To prepare and present services and offers,
• To provide information about all types of promotions, campaigns, and lotteries,
• To carry out all types of marketing and advertising activities,
• To identify visitor and customer profiles,
• To respond to and resolve requests, demands, and complaints,
• To conduct market research and statistical studies,
• To establish and manage information technology infrastructure,
• To track financial and/or accounting transactions, including billing,
• To monitor legal matters,
• To plan and execute corporate communication activities,
• To update data,
• To carry out necessary work by our relevant business units to provide you with the products and services offered,
• To ensure the legal and commercial security of individuals engaged in business relationships with us,
• To implement human resources policies,
• And for any other purposes that may be communicated to you during the collection of personal data, as permitted by law and not limited to the above. 

7. Recipients of Processed Personal Data and Purposes of Transfer
 

Your personal data may be transferred to other EYG entities, our shareholders, legally authorized public institutions and organizations, suppliers and business partners, service providers, or other third parties, and/or abroad for the purposes specified in our data security policy and this disclosure text. This transfer will be carried out in accordance with the personal data processing conditions and purposes outlined in Articles 8 and 9 of the Personal Data Protection Law.

8. Rights of the Personal Data Owner

According to Article 11 of the Personal Data Protection Law, you have the following rights. To facilitate the exercise of these rights, EYG has prepared a dedicated application form for you. By applying through the relevant section announced on our website, you have the right to:

a) Learn whether your personal data has been processed,

b) Request information regarding your processed personal data,

c) Understand the purpose of processing your personal data and whether it has been used in accordance with that purpose,

d) Know the third parties to whom your personal data has been transferred, either domestically or internationally,

e) Request the correction of your personal data if 

it is incomplete or inaccurately processed,

f) Request the deletion or destruction of your personal data within the framework of the conditions specified in Article 7,

g) Request notification of the actions taken under (d) and (e) to the third parties to whom your personal data has been transferred,

h) Object to the emergence of a result against you, solely based on the analysis of your processed data through automated systems,

i) Demand compensation for damages incurred due to the unlawful processing of your personal data.

9. Areas of Use for Your Data

We process your data to inform you about our services and, when necessary, to enlighten you and provide better products and services. In this context, the information we hold at EYG is used in accordance with your consent and the purpose of processing.

10. How Do We Protect It?

Necessary technical and administrative measures are taken to protect personal data collected by EYG and to prevent unauthorized access, ensuring that our customers and potential customers are not harmed. In this context, it is ensured that software complies with standards, third parties are carefully selected, and adherence to the data protection policy is maintained within the company.

11. Right to Apply and Obtain Information

If you have any doubts regarding your personal data, please contact the EYG Data Controller, whose address and contact information are provided on our website. A dedicated application form has also been prepared to facilitate your requests. Your applications will be responded to as soon as possible, or at the latest within 30 days of reaching our company, depending on the content of your request. Only the sections related to you will be answered; applications regarding your spouse, relatives, or friends will not be accepted. You can submit your applications:

• In person, via Notary, or by registered mail with return receipt,
• By sending it to the registered electronic mail (KEP) address of our company.