Privacy Policy

Disclosure Text on Protection and Processing of Personal Data

Effective Date: October 17, 2025

This Disclosure Text, as Royalyat Turizm Gıda Sanayi ve Ticaret Limited Şirketi (data controller), aims to inform about the processing and transfer of personal data obtained during the use of Bodrumdabirev.com website and any mobile applications in accordance with Article 10 of Law No. 6698.

1. Data Controller and Contact

• Company Name: Royalyat Turizm Gıda San Tic Ltd Şti
• Address: Arnavutköy Mh. Eğlence Sok. No:14/1 Beşiktaş İstanbul
• Tax Office: Beşiktaş Vergi Dairesi
• Tax No: 8590549659
• Mersis No: 0859054965900011
• Trade Registry No: 747173
• Email:: info@bodrumdabirev.com
• KEP Address: royalyatturizmgidasanayi@hs01.kep.tr
• Phone:: +90 850 307 77 77
• This service provider is registered with ETBİS.

2. Scope

This text applies to individual and corporate users and other third parties visiting the Portal. The Portal is a real estate listing and communication platform.

3. Personal Data Categories Processed

• Identity and contact data: Name, surname, T.R. ID number (when mandatory, front page of ID document), date of birth, company name, tax number, tax office, email, phone, address, billing information.
• Account and authentication data: Username, password, two-factor authentication information, trusted devices, e-government verification status and GUID generated by e-government, to the extent necessary.
• Customer transaction data: Listing contents, listing history, authorization certificates and power of attorney documents, title deed or representation authority documents (when necessary, uploaded with masking so that non-personal data sections are visible), rejection reasons, store and sub-user relationships, notification preferences, favorites, comments and ratings, call center history, profile photo if any.
• Communication and messaging data: In-Portal messages, questions and answers, notification records, call center voice recordings, support requests and feedback.
• Transaction security data: IP records, device and browser information, session records, access logs, and traffic records within the scope of Law No. 5651.
• Location data: If the user prefers, approximate location and data used to verify listing location.
• Payment and billing data: When paid services are used, invoice information, collection and receipt information, transaction numbers.
• Marketing data: If explicit consent is given, commercial message permissions, campaign participation information and interactions.
• Cookie data: Usage data obtained through cookies and similar technologies. Details are in the Cookie Policy and Management Panel.

4. Collection Methods

Data is obtained through Portal forms and messaging areas, call center and support channels, e-government integration, log records and cookies, and from payment institutions for paid services.

5. Processing Purposes

• Account creation and user verification: Establishment and performance of the contract, identity verification, secure login and authorization controls.
• Listing and moderation: Creating, editing, publishing listings, auditing compliance with standards, preventing suspicious transactions.
• Communication and customer relations: Managing requests and complaints, informational messages, support services, satisfaction studies.
• Security and fraud prevention: Obligations under 5651, system security, risk and compliance audits, bot and abuse detection.
• Billing and collection: Providing paid services, collection and refund processes, accounting transactions.
• Marketing and personalization: Campaign notifications, user segmentation and measurement if explicit consent is given. Consent can be withdrawn at any time.
• Analysis and product development: Usage statistics, measuring experience, improving service quality.
• Legal obligations: Storage, audit, reporting, mandatory notification and responding to requests.

6. Legal Grounds

Personal data is processed pursuant to Article 5 of the Law for establishment and performance of the contract, where explicitly provided by laws, fulfilling the data controller's legal obligation, establishing, exercising or protecting a right, and when necessary for our legitimate interests. Commercial electronic messages and marketing activities are conducted only with explicit consent. Special categories of personal data are not processed; in mandatory cases, they are processed in compliance with legal requirements and limited.

7. Transfers

• IT and infrastructure providers: Hosting, cloud, backup, and security service providers.
• Customer relations and support providers: Call center, live chat, email, and ticketing system providers.
• Payment institutions and financial service providers.
• Legal, financial consulting, independent audit, and consultancy: Persons and organizations from whom services are obtained.
• Authorized public institutions: Courts, enforcement offices, and regulatory authorities.
• Printing and promotional suppliers: Limited data sharing for providing printed materials ordered at user request.

8. International Transfers

Support may be received from suppliers located abroad for services such as hosting, storage, call centers, marketing, and analytics. In such cases, transfers are made within the scope of standard contracts announced by the Board pursuant to Article 9 of the Law or with your explicit consent. Transfer basis and supplier information will be provided upon request.

9. Retention Periods

Account and transaction data may be retained for the general statute of limitations period from the end of the contractual relationship. Traffic records under 5651 are retained for at least one year. Accounting documents are retained for at least five years in accordance with relevant legislation. After the period, data is deleted, destroyed, or anonymized.

10. Rights and Application Procedure

Pursuant to Article 11 of the Law, you have the right to learn whether your data is processed, request information if processed, learn the purpose of processing and whether it is used appropriately, know third parties to whom it is transferred domestically or abroad, request correction if processed incompletely or incorrectly, request deletion or destruction, object to adverse results from automated systems analysis, and claim compensation if you suffer damage. Applications can be submitted in Turkish in writing by mail or to kvkk@bodrumdabirev.com with secure electronic signature. Applications are finalized within thirty days at the latest. Responses are free for up to ten pages; the Board tariff applies for each additional page. Information and documents to verify your identity may be requested.

12. Third-Party Links

The Portal may contain links to third-party sites. We are not responsible for the privacy practices of these sites. We recommend that you review the policies of those sites separately.

13. Updates

This Disclosure Text may be updated in parallel with service and regulatory changes. The new version takes effect on the date it is published on the Portal.

1. Introduction

As BodrumdaBirEv ("we", "us", "our"), we respect the privacy of our users ("you", "your") and are committed to protecting your personal data. This Privacy Policy is intended to inform you about the information we collect, use, and protect when you use our website.

This policy has been prepared in accordance with the Law on the Protection of Personal Data No. 6698 ("KVKK") and related legislation.

2. Data Collected

We may collect the following information when you use our website:

• Personal Information: Name, surname, email address, phone number
• Contact Information: Address, city, postal code
• Account Information: Username, password (encrypted)
• Transaction Information: Search history, favorite listings, messages
• Technical Information: IP address, browser type, operating system, visit durations
• Cookie Information: Site usage preferences, session information

3. Purposes of Data Use

We use the data we collect for the following purposes:

4. Data Security

The measures we take to protect your personal data include:

• Encrypted connection with SSL certificate
• Secure data storage systems
• Regular security updates
• Limited access authorizations
• Notification within 72 hours in case of a data breach

5. Cookies

The types of cookies used on our website are:

6. Your Rights

You have the following rights under the KVKK:

7. Contact

You can contact us for questions about our privacy policy: