Last updated: September 29, 2026
At Otto34 Gayrimenkul, we value the protection of your personal data. This Notice has been prepared pursuant to Article 10 of Law No. 6698 on the Protection of Personal Data (“KVKK”) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform, in order to inform you about the personal data we process through the website https://otto34.com (including its English version at https://otto34.com/en/, the “Website”) and the contact channels offered on the Website.
1. Data Controller
Under the KVKK, the data controller is Otto34 Gayrimenkul (“Otto34”, “we”, “us”), whose details are set out below.
- Trade name: Otto34 Gayrimenkul
- Tax office and number: Esenyurt Tax Office – 2810153707
- Address: Yeşilkent Mah., Nazım Hikmet Blv. No:55-1/6, 34515 Esenyurt/İstanbul, Türkiye
- Phone: +90 212 320 70 70
- Email: [email protected]
- Website: https://otto34.com/en/
2. Personal Data We Process
Only the following personal data is processed through the Website and its contact channels:
| Data category | Personal data | Source |
|---|---|---|
| Identity | Full name | Application and contact forms |
| Contact | Phone number, email address | Application and contact forms |
| Request and application details | Depending on the form: message/short note, budget range, project of interest, room type, payment preference, target area, area of residence, industry experience, investment capacity, short self-introduction, and the page from which the form was submitted | Contact, Project Request, Consultant Application and Franchise Application forms |
| Contact channel records | Information you share with us when you contact us via WhatsApp, phone or email (e.g., phone number, email address, message content) | WhatsApp, phone, email |
| Transaction security | Log records such as IP address, browser information and access time; security (bot protection) cookie | Hosting server and Cloudflare |
| Website usage data (only if you give consent) | Online identifiers and statistical data on Website usage obtained through Google Analytics cookies | Google Analytics cookies |
The listings you add to your favorites and your currency preference are stored only in your own browser (localStorage); they are not sent to our servers and cannot be accessed by Otto34.
Our forms do not request special categories of personal data (KVKK Article 6; e.g., data concerning health, religion, ethnic origin or biometric data). Please do not include such data, or personal data of other people, in free-text fields such as the message or short self-introduction.
3. How We Collect Personal Data
Your personal data is collected by automated means, or by non-automated means provided that it forms part of a data filing system, through the following methods:
- directly from you, when you fill in the Contact, Project Request, Consultant Application or Franchise Application forms on the Website;
- when you contact us via WhatsApp, phone or email using the buttons on the Website;
- through log records kept by the hosting server and Cloudflare and through strictly necessary cookies while you visit the Website;
- through Google Analytics cookies, only if you give consent.
Information you submit through a form is stored as an “Application” record in the Website’s administration panel and is forwarded as a notification to authorized Otto34 employees via the Telegram messaging application.
4. Purposes and Legal Grounds for Processing
| Purpose of processing | Data categories concerned | Legal ground |
|---|---|---|
| Responding to questions and requests you send us via the Contact form, WhatsApp, phone or email | Identity, contact, request and application details, contact channel records | If your request concerns the establishment of a contract, KVKK Article 5(2)(c) (processing directly related to the establishment or performance of a contract); otherwise, KVKK Article 5(2)(f) (legitimate interest) |
| Evaluating property and project requests submitted via the Project Request form, contacting you about them, and providing portfolio or project information that matches your request | Identity, contact, request and application details | KVKK Article 5(2)(c) (processing directly related to the establishment or performance of a contract) |
| Evaluating applications submitted via the Consultant Application and Franchise Application forms and contacting applicants | Identity, contact, request and application details | KVKK Article 5(2)(c) (processing directly related to the establishment or performance of a contract) and KVKK Article 5(2)(f) (legitimate interest) |
| Recording applications in the administration panel and notifying authorized employees via Telegram so that requests can be answered in a timely manner | Identity, contact, request and application details | KVKK Article 5(2)(f) (legitimate interest) |
| Ensuring Website and information security and preventing spam and malicious traffic | Transaction security | KVKK Article 5(2)(ç) (compliance with legal obligations, including the data security obligation under KVKK Article 12) and KVKK Article 5(2)(f) (legitimate interest) |
| Establishing, exercising or defending rights in potential disputes, and responding to lawful information requests from competent public authorities | The categories above, to the extent necessary | KVKK Article 5(2)(e) (establishment, exercise or protection of a right) and KVKK Article 5(2)(ç) (legal obligation) |
| Statistically analyzing how the Website is used and improving the Website | Website usage data | KVKK Article 5(1) (explicit consent), only if you give consent in the cookie preference panel |
The KVKK checkbox on our forms is intended for you to confirm that you have read this Notice. Data you submit through the forms is processed on the legal grounds set out in the table above. Your explicit consent for analytics cookies is obtained separately from this Notice, through the cookie preference panel.
5. Transfers of Personal Data
5.1. Transfers within Türkiye
Your personal data may be transferred to competent public authorities and judicial bodies only where there is a legal obligation to do so and to the extent requested, in accordance with KVKK Article 8 and Article 5(2)(ç) and (e). Your personal data is not sold to third parties.
5.2. Transfers abroad
Because the servers of the service providers we use to operate the Website and to forward your requests are located outside Türkiye, your personal data is transferred to the following recipients in accordance with the conditions set out in Article 9 of the KVKK:
| Recipient | Service and purpose of transfer | Location | Data transferred |
|---|---|---|---|
| Hetzner Online GmbH | Hosting: servers on which the Website and application records are kept | Finland (European Union) | Form data and server log records |
| Cloudflare, Inc. | Content delivery network (CDN) and security: delivering Website traffic and protecting it against malicious traffic | US-based, global network | Data transmitted while you access the Website, including log records such as IP address, browser information and access time; security cookie |
| Telegram | Notifying authorized Otto34 employees of form submissions | Outside Türkiye | Identity, contact, request and application details |
| Google Ireland Limited / Google LLC | Analyzing Website usage with Google Analytics (only with your consent) | Ireland (European Union) / United States | Website usage data |
| Meta Platforms (WhatsApp) | Carrying out communications that you initiate via WhatsApp | Outside Türkiye | Information and message content you share via WhatsApp |
Transfers abroad are carried out in accordance with the conditions set out in KVKK Article 9, within the framework of that article’s provisions on adequacy decisions, appropriate safeguards (e.g., standard contracts) and the exceptions for incidental transfers (e.g., explicit consent). The use of WhatsApp is also subject to WhatsApp’s own terms of service and privacy policy.
6. Retention Period
Your personal data is retained for as long as required by the purpose of processing and for the statutory limitation periods set out in the applicable legislation. When these periods expire, your personal data is erased, destroyed or anonymized, either on our own initiative or upon your request, in accordance with KVKK Article 7 and the applicable legislation.
Favorites and currency preferences stored in your browser remain on your device until you clear your browser data. Cookie durations are set out in our Cookie Policy.
7. Your Rights as a Data Subject
Under Article 11 of the KVKK, you have the right to apply to the data controller to:
- learn whether your personal data is being processed;
- request information about the processing if your personal data has been processed;
- learn the purpose of the processing and whether your personal data is used in line with that purpose;
- know the third parties in Türkiye or abroad to whom your personal data has been transferred;
- request the rectification of your personal data if it is incomplete or inaccurate;
- request the erasure or destruction of your personal data under the conditions set out in Article 7 of the KVKK;
- request that the actions taken upon your rectification, erasure or destruction requests be notified to the third parties to whom your personal data has been transferred;
- object to any outcome to your detriment arising from the analysis of your processed data exclusively by automated systems;
- claim compensation for damages you suffer as a result of the unlawful processing of your personal data.
Where processing is based on explicit consent, you may withdraw your consent at any time. You can withdraw your consent to analytics cookies through the cookie preference panel; withdrawal does not affect the lawfulness of processing carried out before it.
8. How to Submit a Request
You may submit requests regarding the rights above in accordance with the Communiqué on the Procedures and Principles for Applications to the Data Controller, using the following methods:
- In writing: by a wet-signed letter delivered in person, by registered mail with return receipt, or through a notary public to Yeşilkent Mah., Nazım Hikmet Blv. No:55-1/6, 34515 Esenyurt/İstanbul, Türkiye;
- By email: to [email protected], from an email address you have previously provided to us and that is registered in our system.
Under the Communiqué, your request must include: your full name and, if the request is in writing, your signature; for citizens of the Republic of Türkiye, your Turkish identity number, and for foreign nationals, your nationality, passport number or, if any, identity number; your residential or business address for notification purposes; if any, your email address, phone and fax number for notification purposes; and the subject of your request. We may ask for additional information if we cannot verify your identity.
Your request will be concluded free of charge as soon as possible depending on its nature, and within thirty (30) days at the latest. If the action requires an additional cost, a fee may be charged in accordance with the tariff set by the Personal Data Protection Board (the “Board”). If your request is rejected, if you find our response insufficient, or if we do not respond in time, you may file a complaint with the Board under KVKK Article 14 within thirty (30) days of learning of our response and, in any case, within sixty (60) days of the date of your request.
9. Changes
This Notice may be updated to reflect changes in legislation or in our data processing activities. The current version is always published on this page, and the date of the last update appears at the top of the page.
For our general privacy practices regarding the Website, please see our Privacy Policy; for detailed information on cookies, please see our Cookie Policy.
This English version is provided for convenience. In the event of any discrepancy, the Turkish version (KVKK Aydınlatma Metni) shall prevail.