Personal Data Protection and Privacy Policy

1. Introduction

At Kerem Ali Yörükoğlu — Kali Gayrimenkul Danışmanlığı ("Kali Real Estate"), we take your security seriously. We want to inform you about the Law on the Protection of Personal Data, which exists to protect the fundamental rights and freedoms of individuals, above all the privacy of personal life, and to safeguard personal data.

Law No. 6698 on the Protection of Personal Data (the "Law") was adopted and entered into force on 24 March 2016. It protects the fundamental rights and freedoms of individuals in the processing of personal data, above all the privacy of personal life, and sets out the obligations, procedures and principles that natural and legal persons processing personal data must follow.

2. Data controller

This document is published on behalf of Kerem Ali Yörükoğlu — Kali Gayrimenkul Danışmanlığı to fulfil the duty to inform arising under Article 10 of the Law. The "Protection of Personal Data and Consent to Data Sharing" statement is made available for users and visitors to read and review.

Fully aware of that responsibility, we process your personal data as the "data controller" defined in the Law, in the manner explained below and within the limits the legislation requires.

As Kali Real Estate, we will collect, use and process your personal data in accordance with the applicable legislation in our capacity as data controller. Any data controller representative we appoint will, once the legal framework allows, be registered in the Data Controllers Registry and announced on www.keremaliyorukoglu.com.

3. Collection of personal data

Your personal data may vary according to the services and commercial activities we provide, and may be collected verbally, in writing or electronically, by automated or non-automated means, through our offices, website, social media channels, mobile applications and similar means.

Your personal data may be created, updated and processed for as long as you make use of the products and services we offer.

Your personal data may also be processed when you use our website to access our services, visit our office, or attend events we organise.

4. Purposes of processing

The personal data collected is processed within the conditions and purposes set out in Articles 5 and 6 of the Law, in order to: carry out the work necessary for you to benefit from the products and services we offer; tailor and recommend those products and services according to your preferences, habits and needs; ensure legal and commercial security (administrative operations relating to communication, physical security and supervision of office locations, client assessment and complaint management, reputation research, event management, legal compliance, auditing, financial affairs and similar); and determine and implement commercial and business strategies.

5. Transfer of personal data

The personal data collected may be transferred to our business partners, suppliers, and to public bodies and private persons legally authorised to receive it, within the conditions and purposes set out in Articles 8 and 9 of the Law, for the purposes of enabling you to benefit from the products and services offered, ensuring legal and commercial security (administrative operations relating to communication, partner, client and supplier assessment processes, reputation research, legal compliance, auditing, financial affairs and similar), and determining and implementing commercial and business strategies.

6. Method of collection and legal basis

Your personal data is obtained verbally, in writing or electronically, for the purposes set out above, so that the products and services we offer can be provided within the applicable legal framework and so that we can fulfil our contractual and statutory responsibilities fully and accurately.

As a rule, personal data cannot be processed without the explicit consent of the data subject. However, processing without explicit consent is permitted where any of the following applies:

• It is necessary to process personal data belonging to the parties to a contract, provided the processing is directly related to the conclusion or performance of that contract
• Processing is mandatory for the establishment, exercise or protection of a right
• Processing is mandatory for the data controller to fulfil a legal obligation
• The data has been made public by the data subject
• Processing is mandatory for the legitimate interests of the data controller, provided it does not harm the fundamental rights and freedoms of the data subject
• Processing is expressly provided for by law

7. Channels through which data is collected

Your personal data, including data of a special nature, may be collected verbally, in writing or electronically with your consent through our website (www.keremaliyorukoglu.com), our social media accounts, forms collected during client visits, digital marketing channels and any other channel.

8. Rights of the data subject

Under Article 11 of the Law, you may apply to Kali Real Estate to exercise the following rights in relation to your personal data:

• Learn whether your personal data is being processed
• Request information if it has been processed
• Learn the purpose of processing and whether the data is used in line with that purpose
• Know the third parties in Türkiye or abroad to whom the data has been transferred
• Request correction where the data is incomplete or inaccurate
• Request deletion or destruction under the conditions set out in Article 7 of the Law
• Request that any correction or deletion be notified to the third parties to whom the data was transferred
• Object to an adverse outcome arising from analysis carried out solely by automated systems
• Claim compensation where you suffer loss because the data was processed unlawfully

These rights have been in force since 7 October 2016.

9. Contact

You can send us any request concerning your personal data through the following channels: