PERSONAL DATA PROTECTION
Enquiry Privacy Notice
Information on the use of personal data in advertising, building/residential, management company and partnership enquiries.
1. Data controller
Operating under the Asansör Reklam brand, Çayyolu Mim. Rek. Org. Ltd. Şti. is the data controller for enquiries received through asansorreklam.com.tr.
MERSİS registration no.: 0233141651000001
Address: Konutkent neighbourhood, 2965 Street, No. 6/27, Çankaya / Ankara
Email: info@asansorreklam.com.tr
Phone: +90 312 240 83 83
2. Data processed
Depending on the enquiry type, we collect your full name, phone number, email, represented company or property, declaration of role and authority, declared tax identification number, chosen area, campaign, portfolio and collaboration details, and your message. Residential enquiries also include the full address, apartment and independent-unit counts, block and elevator counts, security personnel, caretaker and camera availability, management arrangement and installation area. Management companies may add several properties in one enquiry. Submission time, tracking number, assessment status and email verification records are also processed.
To limit abuse, keyed hashes of IP or session information are used. Phone numbers are taken as declared and are not verified by SMS. Tax identification numbers are not checked through an automated official taxpayer enquiry.
Do not include identity documents, health information or unrelated third-party personal data in your message.
3. Purposes and legal grounds
Enquiry and contact data are processed to assess your request, contact you, prepare quotations and manage advertising or collaboration processes. Processing directly related and necessary to entering into or performing a contract relies on Article 5(2)(c) of the Turkish Personal Data Protection Law (KVKK).
Necessary processing for communication with organisational representatives, review of authority, controlled document access and application-system security relies on legitimate interests under Article 5(2)(f), provided your fundamental rights and freedoms are not harmed. Processing necessary for legal obligations relies on Article 5(2)(ç); records needed to establish, exercise or protect a right rely on Article 5(2)(e).
4. Collection and disclosure
Your information is collected electronically through website forms, email verification and correspondence concerning your enquiry. Authorised business managers can access enquiry details. Hosting, technical support and email providers may receive data as necessary to provide the service; authorised public bodies and courts may receive it under legal obligations.
The verification message is sent to your address through the site's email infrastructure configured on Kebirhost. Your tracking number and form information are sent to the business at asansorreklamlari@gmail.com for notification and assessment. Records are also stored in the management panel. Verification codes and session keys are not included in notification emails. Gmail and the recipient's email provider may process data abroad. International transfers must separately satisfy Article 9 of the KVKK; reading this notice does not constitute explicit consent to such transfers.
5. Retention and security
Email verification codes are valid for 10 minutes and verification sessions for 30 minutes. Expired temporary records are cleared during the next verification operation. Enquiry records and backups do not share this temporary retention period.
Enquiry data is retained only for the period necessary for assessment and the relevant relationship. Afterwards, only records required by applicable legal obligations or to protect legal rights are kept. When processing grounds cease to apply, deletion, destruction or anonymisation must follow applicable law. Retention and deletion requests are reviewed through the channels below.
6. Your rights and requests
Under Article 11 of the KVKK, you may learn whether your data is processed, request information if it is, learn the purpose and whether use matches that purpose, and identify third parties receiving it domestically or abroad.
You may request correction of incomplete or inaccurate data, deletion or destruction when legal conditions are met, and notification of these actions to recipients. You may object to an adverse result based solely on automated analysis and seek compensation for damage caused by unlawful processing.
Send requests in writing to the company address with information explaining your identity and request, or use other methods under the Turkish Communiqué on Procedures and Principles for Applications to Data Controllers. For a compliant email request, you may use the address previously provided to us and registered in our system. Do not send unnecessary identity documents or sensitive data.
7. Contact preferences
Submitting an enquiry does not automatically add you to a marketing list. Contact to respond to your enquiry does not constitute permission for advertising or campaign messages.
Notice date: 13 October 2026