PRIVACY POLICY AND PERSONAL DATA PROTECTION POLICY

Last Update: 29.10.2026

Website: https://balvista.com.tr/

1. INTRODUCTION AND PURPOSE

As Balvista Real Estate and Investment Consultancy ("Balvista"), we attach importance to the privacy and security of the personal data of our customers, website visitors, real estate owners, buyer and tenant candidates, business partners and users registered in our system.

This Privacy Policy and Personal Data Protection Policy have been prepared within the framework of the Personal Data Protection Law No. 6698 ("KVKK"), relevant secondary legislation and other applicable legal regulations.

The purpose of this policy is; It is to explain for what purposes personal data is collected, on what legal grounds it is processed, with whom it can be shared, how it is protected, for how long it is stored and the rights of the relevant persons.

Balvista is based on acting in accordance with the law and the rules of honesty in the processing of personal data, processing data for specific, clear and legitimate purposes, acting in a limited and proportionate manner in connection with the purpose of processing, and complying with the necessary retention periods.

2. IDENTITY OF THE DATA CONTROLLER

Contact information for the data controller within the scope of Law No. 6698 is provided below.

Company Title: Balvista Real Estate and Investment Consultancy

Address: Kasaplar Mahallesi, Bigadiç Caddesi, No:14/A, Altıeylül / Balıkesir

Telephone: 0535 391 64 96

Email: info@balvista.com.tr

Website: https://balvista.com.tr/

Balvista is obliged to take the necessary administrative and technical measures to protect personal data and to carry out data processing activities in accordance with the applicable legislation.

3. PERSONAL DATA THAT MAY BE PROCESSED

Depending on the nature of the service offered by Balvista and the transactions carried out by the relevant person, the following categories of personal data may be processed.

Credentials: Name, surname and other information requested for identity verification purposes in legally required transactions.

Contact Information: Phone number, e-mail address, correspondence address and contact preferences.

Real Estate Information: Necessary information regarding the address, location, type, features, photographs of the real estate subject to sale or rental, the requested sales or rental price, ownership and authorization procedures.

Customer Transaction Information: Real estate requests, appointments, negotiations, offers, negotiation processes, contracts, service records and transaction history.

Membership Information: User account, membership date, account transactions, registered portfolio recommendations and transactions performed on the user panel.

Financial and Legal Transaction Information: Service fees, invoice information, payment records, contract and authorization documents and information required to fulfill legal obligations.

Transaction Security Information: IP address, access time, session records, device and browser information and technical records kept within the scope of system security.

Request and Complaint Information: Contact forms, customer requests, complaints, feedback and related correspondence.

Special categories of personal data can only be processed by taking the necessary security measures when it is legally required and the processing conditions stipulated in Article 6 of the KVKK are met.

4. PURPOSES OF PROCESSING PERSONAL DATA

Personal data obtained by Balvista may be processed for the following purposes, limited to the relevant activity:

• Providing real estate consultancy services for sale and rental.

• Providing communication between real estate owners and prospective buyers or tenants.

• Creation and management of real estate portfolios.

• Carrying out real estate showing, evaluation and appointment processes.

• Carrying out authorization and contract processes within the scope of real estate trade.

• Evaluation of customer demands, offers and complaints.

• Creating and managing user memberships.

• Operation of portfolio recommendation and reward programs.

• Providing information regarding service processes.

• Carrying out finance, accounting and billing operations.

• Fulfillment of legal obligations.

• Ensuring information security and website security.

• Meeting the lawful demands of authorized public institutions and organizations.

• Carrying out commercial electronic messaging and marketing activities when the necessary legal conditions are met.

If personal data will be processed for a new purpose other than the purpose for which they were collected, necessary information will be provided within the scope of the relevant legislation and explicit consent will be obtained when necessary.

5. METHODS OF COLLECTION OF PERSONAL DATA

Personal data; It can be obtained through the Balvista website, contact and membership forms, real estate application forms, portfolio recommendation system, telephone calls, e-mail correspondence, face-to-face meetings, contracts and other communication channels.

Data can be collected electronically by fully or partially automated methods or by non-automatic methods as part of a data recording system.

6. LEGAL REASONS FOR PROCESSING PERSONAL DATA

Personal data is processed based on the legal grounds specified in Article 5 of the KVKK and in accordance with the relevant data processing activity.

These legal reasons are:

• It is necessary to process personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract.

• Data processing is mandatory for the data controller to fulfill its legal obligation.

• Data processing is mandatory for the establishment, exercise or protection of a right.

• Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned.

• It is clearly prescribed by law.

• In cases where it is necessary for the relevant data processing activity, the relevant person must have explicit consent.

In each data processing activity, the legal reason valid for the concrete activity is taken as basis, not all of these reasons.

7. DATA ON REAL ESTATE PORTFOLIO

Balvista may process personal data of real estate owners, buyer candidates, tenant candidates and authorized representatives within the scope of real estate purchase, sale and rental services.

Ownership, address, location, visual, contact and contract information regarding real estate is used only for the purpose of providing the relevant service and fulfilling legal obligations.

In publishing real estate advertisements, current regulations regarding real estate trade, announcement and authorization obligations are complied with.

Personal contact information of property owners is not shared in public areas unless there is a legal basis.

8. PORTFOLIO RECOMMENDATION AND REWARD PROGRAM

In programs such as "Bring a Portfolio, Earn a Gift Certificate" that can be offered on the Balvista website, users can recommend real estate that may be subject to sale or rental to the business.

In this context, the identity and contact information of the person making the suggestion, the information of the proposed real estate, the contact information of the real estate owner and the transaction status of the suggestion can be processed.

The data in question; It can be used to evaluate the proposal, communicate with the real estate owner, carry out the necessary authorization procedures, inform the user about the process and evaluate the reward right, if any.

Entering personal data of third parties into the system does not alone mean that these persons have given explicit consent or that there is a sufficient legal reason for the data to be processed.

Balvista evaluates the valid legal reason for processing third party data and provides the necessary clarification within the scope of Article 10 of the KVKK and the relevant legislation.

The user making the suggestion is not deemed to have acquired the right to sign a contract on behalf of the real estate owner, authorize a portfolio, or represent him/her legally by simply registering a suggestion.

Reward, gift voucher and entitlement conditions for the portfolio recommendation system are also regulated in the program participation conditions to be published.

9. TRANSFER OF PERSONAL DATA

Personal data may be transferred to third parties in accordance with Articles 8 and 9 of the KVKK and to the extent necessary for the relevant transaction.

Depending on the nature of the service, the recipient groups to which transfers can be made are as follows:

• Legally authorized public institutions and organizations.

• Notaries and other competent authorities involved in relevant transactions.

• People who provide legal and financial consultancy services.

• Organizations from which services are received in contract and payment processes.

• Website hosting, software, information security and technical support service providers.

• Transaction parties that are necessary for the execution of the real estate transaction and have legal transfer conditions.

Transfers are limited to specific and legitimate purposes.

When it comes to transferring personal data abroad, the current conditions and assurances set out in Article 9 of the KVKK apply.

10. STORAGE AND DESTRUCTION OF PERSONAL DATA

Balvista retains personal data for the periods stipulated in the relevant legislation or for the period necessary for the purpose for which they are processed.

When determining the storage period, contractual obligations, tax and accounting legislation, regulations regarding real estate trade, legal dispute periods and other relevant legal obligations are taken into account.

If the reasons requiring the processing of personal data disappear, the data is deleted, destroyed or anonymized in accordance with the legislation.

11. SECURITY OF PERSONAL DATA

Balvista aims to take appropriate technical and administrative measures to prevent unlawful processing and access of personal data and to ensure the security of the data.

In this context, access authorizations, secure connection methods, system updates, backup, security controls, access records and confidentiality obligations with authorized personnel or service providers are applied depending on the nature of the service.

Although the absolute security of any data transmission over the Internet cannot be guaranteed, Balvista implements the necessary security measures to protect personal data.

12. COOKIES AND WEBSITE TECHNOLOGIES

Balvista website may use cookies to ensure the operation of the site, manage user sessions, support security and provide services according to the user's preferences.

If cookies are used for analytical, performance, advertising or marketing purposes, information in accordance with the relevant legislation and, where necessary, explicit consent mechanisms are applied.

Cookies are not placed on the user device without meeting the necessary legal conditions for non-essential cookies.

Types of cookies, their providers, purposes of use and storage periods are also explained in the Cookie Policy to be published.

13. COMMERCIAL ELECTRONIC MESSAGES

Balvista evaluates mandatory information about service processes and commercial electronic messages for advertising and marketing purposes separately.

Commercial electronic messages for campaign, promotion and marketing purposes are sent after obtaining the necessary approvals in accordance with the Law No. 6563 on the Regulation of Electronic Commerce and relevant legislation.

Users may change their commercial electronic message preferences or exercise their right to refuse within the scope of the legislation.

14. THIRD PARTY WEBSITES

The Balvista website may contain links to third party websites or external services.

Personal data processing practices of the platforms accessed through these links are subject to the relevant platforms' own privacy policies.

Balvista is not directly responsible for the data processing activities of third party platforms that are beyond its control; However, its legal responsibilities arising from its own data transfers are reserved.

15. RIGHTS OF THE RELATED PERSON UNDER KVKK

In accordance with Article 11 of Law No. 6698, anyone whose personal data is processed can exercise the following rights by applying to the data controller:

1. Learning whether personal data is being processed or not.

2. Requesting information if personal data has been processed.

3. Learning the purpose of processing personal data and whether it is used in accordance with its purpose.

4. Knowing the third parties to whom personal data is transferred domestically or abroad.

5. Request correction of personal data if it is incomplete or incorrectly processed.

6. Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK.

7. To request correction, deletion or destruction to be notified to third parties to whom personal data has been transferred.

8. Object to the emergence of a result that is unfavorable to the person by analyzing the processed data exclusively through automatic systems.

9. Request compensation for damages in case of damage due to unlawful processing of personal data.

16. KVKK APPLICATIONS

Relevant persons may submit their requests regarding the processing of their personal data to Balvista within the scope of Article 13 of the KVKK and the Communiqué on the Procedures and Principles of Application to the Data Controller.

Applications can be made in writing within the framework of the procedures stipulated in the legislation or by other legally accepted methods.

Application Address: Kasaplar Mahallesi, Bigadiç Caddesi, No:14/A, Altıeylül / Balıkesir

Contact Email: info@balvista.com.tr

Telephone: 0535 391 64 96

For official KVKK applications to be made via e-mail, the application must be submitted by one of the methods accepted in the legislation. Therefore, stating the e-mail address above does not mean that every e-mail application automatically meets the formal requirements.

Applications are finalized as soon as possible and within 30 days at the latest, depending on the nature of the request.

If the transaction requires an additional cost, a fee in accordance with the tariff determined in the relevant legislation may be requested.

If the application is rejected, the response is found insufficient or the response is not given in time, the relevant person may file a complaint with the Personal Data Protection Board within the framework of legal conditions and deadlines.

17. CHANGES TO BE MADE IN THE POLICY

Balvista Real Estate and Investment Consultancy may update this policy in line with legislative changes, innovations in the services offered and changes in personal data processing activities.

Updated text, https://balvista.com.tr/ It is valid from the date of publication on .

If there is a change in the purposes of data processing or the information that must be provided to the relevant persons, the necessary additional information will be provided within the scope of the applicable legislation.

18. COMMUNICATION

You can contact Balvista Real Estate and Investment Consultancy for your questions regarding the Privacy Policy, protection of personal data and your rights under KVKK.

Company Title: Balvista Real Estate and Investment Consultancy

Address: Kasaplar Mahallesi, Bigadiç Caddesi, No:14/A, Altıeylül / Balıkesir

Telephone: 0535 391 64 96

Email: info@balvista.com.tr

Website: https://balvista.com.tr/

Balvista Real Estate and Investment Consultancy accepts the protection of personal data as an important part of its corporate responsibility and is committed to carrying out data processing activities in accordance with the relevant legislation.