Privacy Notice on the Processing of Personal Data

1. Data controller

For the personal data of site managers, the data controller is [Company name] (“PayAidat”), [Company address], contact: [contact e-mail].

For owners and renters whose data is entered by a site's management, the data controller is that apartment or site management. PayAidat processes this data on the management's instructions as a data processor.

2. Personal data processed

Site managers: first and last name, mobile phone, e-mail address, password (stored as an irreversible hash), the sites and buildings they manage, subscription and payment records, consent dates.

Owners and renters: first and last name, mobile phone, the flat or shop they are linked to and whether they are the owner or renter, dues, fixture fund and payment records.

All users: security data such as IP address, session and access logs.

3. Purposes

Creating the membership and performing the contract; providing apartment and site management services (building records, dues and balance tracking, notifications); subscription and billing; information security; answering requests and complaints; complying with legal obligations; and, if you consent, informing you about offers and news.

4. Legal grounds

Personal data is processed under KVKK Article 5/2: performance of a contract (c), legal obligations of the controller (ç), establishing, exercising or protecting a right (e) and the controller's legitimate interests provided they do not harm your fundamental rights (f).

Marketing messages are sent only with your explicit consent under KVKK Article 5/1 and Law No. 6563.

5. How data is collected

Personal data is collected electronically and partly automatically through the forms of the website and the application, from you or, for owners and renters, from the site management.

6. Transfers

Personal data may be transferred, limited to the purposes above, to our hosting, SMS, e-mail and payment service providers, to authorised public authorities and to competent bodies on request.

Personal data is not transferred abroad. If a provider located abroad is ever needed, the conditions of KVKK Article 9 are met.

7. Retention

Personal data is kept during the membership and afterwards for the periods required by law (for example 10 years for commercial records), then deleted, destroyed or anonymised.

8. Your rights

Under KVKK Article 11 you may learn whether your data is processed and request information about it, learn the purpose of processing and whether it is used accordingly, know the third parties it is transferred to, request correction of incomplete or inaccurate data, request deletion or destruction when the conditions are met and notification of these actions to third parties, object to a result against you arising solely from automated analysis, and claim compensation for damage caused by unlawful processing.

Send your requests by e-mail to [contact e-mail] or in writing to [Company address]. Requests are answered free of charge within 30 days. Owners and renters should first contact their site management, which is the data controller for their data.