DRAFT — the [ ] fields must be filled in and the text reviewed before publishing. Remove this box when ready.

This is an English translation for information. The Turkish version (KVKK Aydınlatma Metni) is legally binding.

Notice on the Protection of Personal Data (KVKK)

Version 1.0

1. Data controller

[Name / title of the data controller], [address], [e-mail] (“Avlu”). Site managements may also be data controllers for the property, dues and payment records of their own sites: [description of the relationship].

2. Personal data processed

• Identity and contact: full name, mobile phone number
• Property details: site, block, unit number, owner / occupant information
• Financial: dues and extra charge balances, payments, credit balance, receipt numbers
• Security: session records, verification code records (the code itself is not stored), device notification ID
• [Other]

3. Purposes

Creating your account and verifying your phone; running the site's dues, payment and expense management; sending debt, payment and announcement notifications; password reset; information security; meeting legal obligations. [Other]

4. Legal grounds

[Grounds under KVKK art. 5/2: conclusion and performance of a contract, legal obligation, legitimate interest, etc. — to be stated for each purpose.]

5. Transfers

Personal data may be shared with [SMS provider] for SMS, [notification provider] for push notifications, [hosting provider] for hosting, and with competent public authorities as required by law. [Describe any transfer abroad.]

6. How data is collected

Electronically, through the information you or your site management enter in the mobile app and while you use the app.

7. Retention

[Periods]. You can delete your account in the app; your name and phone number are then anonymised, and the financial records the site management must keep are retained for [period].

8. Your rights (KVKK art. 11)

You have the right to learn whether your personal data is processed, to request information, to learn the purpose of processing and whether it is used accordingly, to know the third parties it is transferred to, to request correction if it is incomplete or inaccurate, to request deletion or destruction, to request that these actions be notified to the recipients, to object to a result against you arising from automated analysis, and to claim compensation for damages.

9. Applications

You can send your requests via [application method — e-mail / postal address].