Personal Data Protection Notice (KVKK)

This Notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") to inform you about how your personal data is processed through the Dünya Şehir Cadde mobile application (the "App").

1. Data Controller

Your personal data is processed by [DATA CONTROLLER LEGAL NAME] (the "Data Controller") as the data controller, within the scope described below.

2. Categories of Personal Data Processed

• Identity: first name, last name.
• Contact: mobile phone number, e-mail address.
• Residence: unit (apartment) information, block, owner/tenant status.
• Transaction security: sign-in verification (SMS/e-mail OTP) and session records.
• Device: device identifier, push notification token, app version.
• Customer activity: orders, reservations, payment status, support requests and messages.
• Premises security: vehicle plate, QR access and entry/exit records.

3. Purposes of Processing

• Creating your membership and providing sign-in/identity verification,
• Providing and managing community services (announcements, access, reservations, shopping),
• Carrying out order, reservation, and support processes,
• Ensuring the security of common areas and entries/exits,
• Delivering notifications and handling requests/complaints,
• Ensuring information security and fulfilling legal obligations.

4. Legal Grounds for Processing

Your personal data is processed based on the following grounds under Article 5 of the KVKK:

• Being directly related to the conclusion or performance of a contract (Art. 5/2-c),
• Fulfilment of the Data Controller's legal obligation (Art. 5/2-ç),
• Establishment, exercise, or protection of a right (Art. 5/2-e),
• Legitimate interests, provided your fundamental rights are not harmed (Art. 5/2-f),
• Your explicit consent where required (Art. 5/1).

5. Transfer of Personal Data

Your personal data may be transferred — to the extent required by the processing purposes and in accordance with Articles 8 and 9 of the KVKK — to site management, the stores/businesses related to your order, payment and IT service providers (hosting/cloud, notification infrastructure), and legally authorised public authorities. Any cross-border transfer complies with the conditions set out in the KVKK.

6. Method of Collection

Your personal data is collected electronically through the App, based on your declarations and your use of the App, by automated or partly automated means.

7. Retention Period

Your personal data is retained for as long as the processing purpose requires and for the statutory limitation and retention periods set out in the relevant legislation; once these periods expire, the data is deleted, destroyed, or anonymised.

8. Your Rights as a Data Subject

Under Article 11 of the KVKK, by applying to the Data Controller you have the right to:

• Learn whether your data is processed and request information about it,
• Learn the purpose of processing and whether it is used accordingly,
• Know the third parties to whom your data is transferred domestically or abroad,
• Request correction of incomplete or inaccurate data,
• Request deletion or destruction within the conditions of Article 7,
• Request that corrections/deletions be notified to third parties,
• Object to results arising solely from automated analysis,
• Claim compensation for damages arising from unlawful processing.

9. How to Apply

You may submit your requests in writing to [KVKK EMAIL] or to [ADDRESS]. Your applications are concluded within thirty (30) days at the latest, depending on the nature of the request.