NİNA AI TEKNOLOJİ GELİŞTİRME SANAYİ VE TİCARET ANONİM ŞİRKETİ
Stadionstraße 8, 35759 Driedorf, Germany
Barınaklar Blv. Atmaca Apt. No:2 Daire:2, 07230 Muratpaşa/Antalya, Türkiye
+49 177 580 6125
info@dijitalemlakofisi.com
Last updated: February 10, 2026
As NİNA AI Teknoloji Geliştirme Sanayi ve Ticaret A.Ş. ("Company"), we value the privacy and security of your personal data within the scope of our dijitalemlakofisi.com website and Dijital Emlak Ofisi services. This document has been prepared for informational purposes in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the European Union General Data Protection Regulation ("GDPR").
1. Data Controller
2. What Data Do We Collect?
| Identity | First name, last name |
| Contact | Phone number, email address |
| Customer Transaction/Content | Real estate requests, preferences, information shared by the user, written customer meeting notes (free text) |
| Security | IP address, access/log records, device and browser information, error logs |
| Cookie/Preference | Cookie preference records, consent status |
Note: Our company does not collect: national ID number, date of birth, biometric data, voice recordings, or video recordings.
3. For What Purposes Do We Process Data?
- Real estate consultancy and management of customer requests
- Conducting CRM processes (communication, request/portfolio matching, offers/feedback)
- Evaluating written customer notes to improve service quality
- Information security, prevention of misuse, protection of systems
- Fulfillment of legal obligations and conducting legal processes
- (If consent is given) Analytics and advertising measurement processes (within the limits of the cookie policy)
4. Legal Basis (KVKK/GDPR)
- Performance of contract – request management, service delivery
- Legal obligation – financial/administrative obligations, official requests
- Legitimate interest – information security, service quality, fraud prevention (provided it does not harm your fundamental rights and freedoms)
- Explicit consent – especially for marketing/analytics cookies and advertising measurement activities
5. Use of Artificial Intelligence (ChatGPT / Google Gemini)
Use Without Sharing Personal Data
Our company may use artificial intelligence services to analyze meeting notes and content "in a way that does not contain personal data."
- Personal data such as names, phone numbers, emails, full addresses, and identifying numbers are not sent to AI services.
- Texts are anonymized/generalized before submission (e.g., "Customer A", "city-based", etc.).
- AI outputs are for decision support/advisory purposes only; they do not produce binding decisions.
6. Third-Party API Usage (Meta & Google)
Our platform integrates with third-party APIs to enhance service quality:
Meta Graph API (Facebook/Instagram)
- Used in compliance with Meta Platform Terms and Developer Policies.
- User data is processed only within permitted scope and for specified purposes.
- Token-based secure access is used.
- Data deletion requests from Meta are responded to within 24 hours.
- Data is retained in accordance with Meta's specified retention periods.
Google API (Calendar, Gmail, Drive)
- Used in compliance with Google API Terms of Service and User Data Policy.
- Secure authorization is provided via OAuth 2.0.
- Only data explicitly authorized by the user is processed.
- Full compliance with Google's "Limited Use" requirements is maintained.
- Access can be revoked and data deleted at the user's request.
7. Data Transfer and International Transfers
- Your personal data is not transferred abroad.
- Within the scope of website infrastructure, information security, and operational necessities; service providers (hosting/infrastructure/maintenance) may be used with limited access only when necessary. These service providers operate under confidentiality and security obligations.
- Analytics and advertising cookies (Google Analytics, Meta Pixel, etc.) are only activated if "consent" is given and are explained in the cookie policy.
8. Retention Periods
| Customer relations and requests | Duration of business relationship + 10 years |
| Communication records | 3 years |
| Security logs | 2 years |
| Cookie data | Periods specified in the cookie policy (maximum 2 years) |
9. Security Measures
Our company implements technical and administrative measures such as access controls, authorization, logging, network security, backup, updates, and encryption where necessary.
10. Your Rights and How to Apply
Under KVKK Article 11 and GDPR Articles 15-22, you have rights including access, rectification, erasure, restriction of processing, objection, data portability (GDPR), and withdrawal of consent.
For applications:
info@dijitalemlakofisi.com
Complaints: You have the right to apply to the KVKK Authority in Turkey; or to the relevant data protection authority in the EU.
Effective Date: This policy is effective as of its publication date. It may be updated when necessary.
Digital Real Estate Office Application