Data Protection Notice (KVKK)
This notice explains how your personal data is processed under Turkey's Personal Data Protection Law No. 6698 (KVKK).
Data Controller
Daire Takip CRM (the "Platform") is the data controller for the personal data described here. Contact: dairetakip@gmail.com.
Categories of Data Processed
Identity (name, national ID), contact (email, phone, address) and financial (contracts, collections, balances) data are processed.
Mobile App Data
Categories of personal data processed by the mobile app: authentication data (e-mail, password, SMS code), session token, uploaded apartment and document photos, and the device notification token. Biometric verification (Face ID, fingerprint) takes place entirely on the device; no biometric data is transmitted to or processed by us. This data is processed to provide the service and manage secure sessions, to authenticate the user, to upload and store photos, and to deliver collection and due-date notifications. The legal basis is Article 5/2-c of Law No. 6698 (performance of the contract) and, for notifications, Article 5/2-f (legitimate interest); no separate explicit consent is required and notifications can be disabled in the app settings. Data is transmitted only over TLS to the app.dairetakip.com server, is not shared with third parties for advertising or analytics, and is deleted at the end of the retention period or upon an account deletion request.
Purposes of Processing
Customer and project management, contract and collection tracking, fulfilling legal obligations and improving service quality.
Legal Basis
Data is processed under Article 5 of the KVKK on the grounds of contract performance, legal obligation and legitimate interest.
Data Transfers
Data may be shared with authorised processors (hosting, e-mail and payment providers) to deliver the service. For card payments the payment institution iyzico Ödeme Hizmetleri A.Ş. processes name, e-mail, IP address and invoice details under its own privacy notice in order to execute the payment and prevent fraud; card details never reach the Platform. Cross-border transfers apply the safeguards of KVKK Art. 9.
Retention Periods
Data is retained for statutory periods and for the lifetime of your active account; on a deletion request it is permanently anonymised after a 30-day recovery window.
Your Rights (Art. 11)
You may request information, rectification, erasure, object to processing and request data portability via dairetakip@gmail.com.