Privacy Notice on the Processing of Personal Data

1. Data controller

The data controller is [Şirket unvanı]. Address: [Şirket adresi]. Trade registry (MERSİS): [MERSİS numarası]. Contact: kvkk@kiralai.com.tr

For listing and letting processes carried out through partner real estate agencies, the agency is the data controller and kiralai acts as a data processor. Which relationship applies depends on the stage of service you are at.

2. Personal data we process

Depending on the stage of service, we process:

• Identity data: first and last name; at the booking verification stage, national ID number and ID document details.
• Contact data: mobile phone number, email address.
• Preference data: the neighbourhoods, budget range and number of rooms you are looking for.
• Transaction security data: booking records, generation and use records of the single-use door code, entry and exit times.
• Call data: the recording, transcript and summary of your conversation with the voice assistant.
• Biometric verification result: whether the face check succeeded and when. No facial image or biometric template is stored by us.
• Technical data: IP address, browser and device information, form submissions on this site.

3. Purposes of processing

• Acting on your listing-alert request and notifying you when matching listings appear.
• Creating, changing and cancelling viewing appointments.
• Confirming that the person who booked is the person entering the home, and keeping the property and its visitors safe.
• Generating, delivering and expiring the single-use door code.
• Producing and retaining the viewing record required by the Turkish real estate trade regulation.
• Measuring service quality, detecting errors in the voice assistant and improving it.
• Meeting our legal obligations and providing evidence in any dispute.

4. Legal grounds

We process your data on the grounds set out in Article 5 of the KVKK:

• Processing is directly related to the formation or performance of a contract (booking and letting).
• Compliance with our legal obligations (viewing records, tax and commercial law).
• Processing is necessary for our legitimate interests (security records, service improvement).
• Your explicit consent (waiting list registration, commercial electronic messages, biometric verification).

5. How we collect it

We collect data electronically through the forms on this website, phone calls with the voice assistant, WhatsApp and SMS exchanges, the identity verification app and the smart lock system.

6. Transfers

Your data may be shared, only to the extent the service requires, with:

• The partner real estate agency that published the listing.
• Telephony and messaging infrastructure providers.
• Voice AI and speech processing providers.
• The identity and face verification provider.
• The smart lock manufacturer and its cloud management platform.
• Hosting and database providers.
• Public authorities where required by law.

7. International transfers

Some of the cloud, AI and messaging services we use host their servers outside Turkey. Where that happens, transfers are made in line with Article 9 of the KVKK. We will tell you which providers operate in which countries on request.

8. Retention

We keep your data for as long as the purpose requires and until the end of the statutory limitation periods. We delete your waiting list record within thirty days of your request at the latest. Call recordings are kept for a limited period for quality and dispute purposes.

9. Your rights

Under Article 11 of the KVKK you have the right to:

• Learn whether your personal data is processed and request information about it.
• Learn the purpose of processing and whether it is used in line with that purpose.
• Know the third parties, in Turkey or abroad, your data is transferred to.
• Request correction if it is incomplete or inaccurate.
• Request erasure or destruction within the conditions set by law.
• Request that correction, erasure and destruction be notified to third parties the data was transferred to.
• Object to an adverse outcome produced solely by automated analysis.
• Claim compensation if you suffer loss due to unlawful processing.

10. Making a request

To exercise these rights, write to kvkk@kiralai.com.tr. We respond in writing within thirty days at the latest.