Privacy Policy | Fiba Real Estate

The principles followed by Fiba Gayrimenkul Geliştirme İnşaat ve Ticaret A.Ş. (“Company”) in collecting and using personal data obtained via the website (“Website”), based on the users’ (“User(s)”) consent, are set out in this Privacy Policy.

Personal Data That May Be Collected

Identity Information
Transaction Security Information
IP Information
Legal Transaction and Compliance Information
Contact Information
Request/Complaint Management Information
User Information
Incident Management Information
User Transaction Information
The Company may also collect any other information that may be necessary for the provision of the services offered on the Website and that qualifies as personal data under the Law on the Protection of Personal Data and all applicable legislation. The User expressly consents to the processing of the data they may share with the Company at their own discretion, within the scope and for the purposes set out in this Privacy Policy.
Pursuant to Articles 3 and 7 of the Law on the Protection of Personal Data, data that has been irreversibly anonymized shall not be considered personal data under the provisions of the said Law, and processing activities related to such data will be carried out without being bound by the provisions of this Privacy Policy.

Use of Cookies

The Company automatically collects certain data during Users’ navigation on the Website, such as the sections visited and the areas clicked. These data, obtained through a technology known as “cookies,” are statistical in nature. The purpose of this technology is to make the content related to the sections visited by Users more easily accessible starting from their first visit to the Website. Most browsers are designed to accept these technical communication files known as cookies by default; however, Users may at any time change their browser settings to prevent cookies from being received or to be notified when a cookie is sent.

For the purposes of online behavioral advertising and marketing, the Company has the right to associate Users’ behavior on the Website with a cookie stored in the browser and to create remarketing lists based on metrics such as the number of pages viewed, duration of visits, and the number of goal completions. Subsequently, the User may be shown targeted advertising content based on their interests on the Website or on other websites within the display advertising network.

Purpose of Data Processing

The Company may process the personal data collected in order to enable the User to benefit from the Website; to complete membership registration where applicable; to improve and develop the services offered; to introduce new services and provide information in this regard; to provide the User with the necessary notifications within this scope; to establish communication with the User; and to fulfill the obligations arising from the nature of the services provided.

The personal data in question may also be processed as part of the Company’s reporting and business development activities, and may be used for purposes such as conducting various statistical analyses, creating databases, and carrying out market research without disclosing the identity of the User. If the User provides additional consent, such information may be processed, stored, and transferred to third parties by the Company and its business partners for the purpose of direct marketing. The User may also be contacted through such information regarding the promotion of various applications, products, and services, as well as maintenance and support activities.

Furthermore, the Company may process and share personal data with third parties without obtaining the separate consent of the User in accordance with Articles 5 and 8 of the Law on Personal Data Protection and/or in the presence of exceptions in the relevant legislation. The primary cases are specified below:

It is explicitly prescribed by the law:

It is mandatory for the protection of life or physical integrity of the person or another person who is unable to express their consent due to actual impossibility or whose consent is not granted legal validity; the processing of personal data is necessary, provided that it is directly related to the establishment or performance of any contract between the User and the Company; it is mandatory for the fulfillment of legal obligations; it has been made public by the User themselves; data processing is mandatory for the establishment, exercise, or protection of a right; and data processing is mandatory for the legitimate interests of the Company, provided that it does not harm the User’s fundamental rights and freedoms.

Sharing of Data

The Company may transfer personal data belonging to Users and any new data obtained by utilizing such personal data to third parties from whom it receives services for the purpose of performing the services offered to the User as part of the Website, limited to the procurement of the said services. In this context, the Company may share User data with third parties—such as outsourced service providers, hosting service providers, law firms, research companies, and call centers—to enhance User experience (including improvement and personalization), ensure User security, detect fraudulent or unauthorized usage, conduct operational evaluation research, troubleshoot errors regarding the Website or Company services, and fulfill any of the purposes set forth in this Privacy Policy or other privacy notices provided to the User.

The User agrees and acknowledges in advance that the aforementioned third parties may store the User’s personal data on servers located anywhere in the world, limited to the purposes specified above, and hereby consents to this matter.

User’s Right of Access to Data and Requests for Correction

The User has the following rights regarding themselves by applying to the Company:
Acquiring whether personal data is being processed,
Requesting information if personal data has been processed,
Acquiring the purpose of processing personal data and whether they are used in accordance with their purpose,
Finding out the third parties to whom personal data are transferred domestically or abroad,
Requesting correction of personal data in case of incomplete or incorrect processing
Requesting the erasure or destruction of personal data within the framework of the conditions stipulated in the relevant legislation,
Requesting that the processes of correction, erasure, and destruction carried out in accordance with the relevant legislation be notified to third parties to whom the personal data has been transferred,
Objecting to the emergence of a result to the detriment of the person himself/herself by analysing the processed data exclusively through automated systems,
Requesting compensation in case of loss due to unlawful processing of your personal data in accordance with personal data law.
The User may submit the aforementioned requests through the methods specified in the Data Subject Application Form. The Company may provide its reasoned positive/negative response to the requests above in written or digital form. In principle, no fee shall be charged for the necessary procedures regarding the requests. However, should the procedures involve a cost, the Company reserves the right to request a fee based on the tariff determined by the Personal Data Protection Board in accordance with Article 13 of the Personal Data Protection Law.
The User undertakes that the information provided to the Company, which is the subject of this Privacy Policy, is complete, accurate, and up-to-date, and that they will update this information immediately in the event of any changes. The Company shall not be held liable in the event that the User fails to provide updated information.
The User accepts and declares that in the event they make a request that results in the Company being unable to use any of their personal data, they may not be able to fully benefit from the services committed by the Company, and that any liability arising in this context shall rest with them.

Retention Period of Personal Data

The Company shall retain the personal data provided by the User for the duration of the provision of services in order to fulfill the obligations arising from the nature of the services offered.
In addition, in the event of any dispute that may arise between the User and the Company, the Company may retain personal data for the duration of the limitation periods determined in accordance with the relevant legislation, limited to the purpose of performing the necessary defenses as part of the dispute.

Measures, Commitments, and Liability Regarding Data Security

The Company undertakes, under the conditions specified in the relevant legislation or expressed in this Privacy Policy:
to prevent the unlawful processing of personal data,
to prevent unlawful access to personal data, and to take the necessary technical and administrative measures and to have the necessary audits conducted in order to ensure the appropriate level of security for the preservation of personal data.
In the event that links are provided to other applications on the Site, the Company bears no responsibility regarding the privacy policies and contents of such applications.
The Company does not accept liability for any damages that may occur as a result of the use of personal data within the framework of the aforementioned terms.

Changes to the Privacy Policy

Those who benefit from the services offered on the Website are deemed to have read and accepted all of these terms. The Company reserves the right to change the provisions of the Privacy Policy without prior notice. The current Privacy Policy shall enter into force on the date it is presented to the User by any means.