Personal data processing and protection policy
Kişisel Verilerin Korunması ve İşlenmesi Politikası
Last updated: April 29, 2026.
Website: income-mersin.com
This Personal Data Processing and Protection Policy describes how Income Mersin Gayrimenkul processes, stores, protects and uses the personal data of website visitors, clients and persons seeking advice on real estate matters in Turkey.
The policy has been prepared taking into account the Law of the Republic of Turkey No. 6698 “On the Protection of Personal Data” — Kişisel Verilerin Korunması Kanunu / KVKK.
1. Personal data operator
The personal data operator / Veri Sorumlusu is:
Ticaret Unvanı: INCOME MERSİN GAYRİMENKUL İTHALAT İHRACAT SANAYİ VE TİCARET LİMİTED ŞİRKETİ
MERSİS No: 0478117469700001
Ticaret Sicil No: 66629
Address: Deniz Mah. Deniz Cad. No: 5G Mezitli / Mersin, Türkiye
Email:
Phone / WhatsApp: +90 (531) 746 01 97
Website: income-mersin.com
2. What data may we process
Depending on the method of contact and the nature of the service, we may process the following categories of personal data:
2.1. Contact details
- Name;
- surname;
- phone number;
- email;
- an account or contact on WhatsApp, Telegram, social networks, or instant messengers.
2.2. Application and consultation data
- type of real estate of interest;
- budget;
- purpose of purchase: residence, investment, rent, residence permit, citizenship or other purpose;
- desired area, property parameters and purchase terms;
- history of requests, correspondence and consultations.
2.3. Data required for the transaction
If a client proceeds to property selection, booking, purchasing, renting, registering a Tapu account, obtaining a power of attorney, translating documents, or supporting a transaction, the following may be additionally processed:
- passport details;
- copies of documents provided by the client;
- residential address;
- Tax number in Turkey;
- power of attorney data;
- contract details;
- documents related to payment, transaction, registration of real estate, cadastral and notarial procedures;
- other data necessary for the provision of the service and compliance with Turkish legislation.
2.4. Technical data of the website
When visiting the site, the following data may be processed:
- IP address;
- browser and device data;
- date and time of visit;
- pages the user viewed;
- cookies and similar technologies;
- source of referral to the site.
Detailed information about cookies can be found in a separate Cookie Policy.
2.5. Data from social networks and instant messengers
If a user contacts us via WhatsApp, Telegram, Instagram, Facebook, TikTok, YouTube or other platforms, we may process the data that the user transmits through the relevant platform.
3. For what purposes do we process data?
Personal data may be processed for the following purposes:
- response to a user request;
- communication with the user via telephone, email, WhatsApp, Telegram or other selected channels;
- real estate consultations in Turkey;
- selection of real estate;
- organizing viewing of objects;
- preparation of individual proposals;
- support in the purchase, sale, rental or management of real estate;
- preparation of documents for the transaction;
- interactions with sellers, developers, notaries, translators, lawyers, banks, cadastral and government agencies;
- fulfillment of contractual obligations;
- compliance with the requirements of Turkish legislation;
- accounting, tax and legal records management;
- protection of the rights and legitimate interests of the company;
- ensuring website security;
- improving the quality of service and website operation;
- sending informational, advertising and marketing messages - only with the separate consent of the user, if such consent is required by law.
4. Legal basis for data processing
We process personal data on the basis of one or more legal grounds provided by the KVKK:
- processing is necessary for the conclusion or performance of a contract;
- processing is necessary for compliance with a legal obligation;
- processing is necessary for the establishment, exercise or defence of a right;
- processing is necessary for the legitimate interests of the data controller, provided that it does not violate the fundamental rights and freedoms of the user;
- the data was provided by the user independently;
- the user has given explicit consent where such consent is required by law.
Marketing communications, advertising newsletters, optional cookies, and certain types of data transfer to third parties or abroad may require separate, explicit consent from the user.
5. How we collect data
Personal data may be obtained in the following ways:
- via the application form on the website;
- by phone;
- via WhatsApp;
- via Telegram;
- by email;
- during a personal visit to the office;
- via social networks;
- through documents that the user provides for the transaction;
- through cookies and technical tools of the website;
- through correspondence, consultations and other communication channels.
6. To whom may data be transferred?
Personal data may be transferred only within the purposes specified in this Policy and in accordance with Turkish legislation.
Data may be transferred to the following categories of recipients:
- employees and authorized representatives of Income Mersin Gayrimenkul;
- to property owners, sellers, landlords or developers - if this is necessary for the selection or transaction;
- notaries;
- sworn translators;
- lawyers and consultants;
- accountants and tax consultants;
- banks and payment organizations - if necessary for the transaction;
- cadastral, migration, tax and other government agencies of Turkey;
- IT contractors, hosting providers, CRM services, email services and technical suppliers;
- communication services and messengers, including WhatsApp, Telegram and other platforms, if the user uses these communication channels;
- social media platforms and external services if the user interacts with them through the site.
7. Transfer of data abroad
Some services that may be used for communication, analytics, maps, video, social media, messaging, hosting, or technical support may be located outside of Turkey or store data on servers outside of Turkey.
Such services may include, for example:
- WhatsApp;
- Telegram;
- Google / Google Maps / YouTube;
- Meta / Facebook / Instagram;
- TikTok;
- other technical, analytical or communication services.
In the event of transfer of personal data abroad, such transfer shall be carried out in accordance with the requirements of the KVKK, including the use of the mechanisms for transferring data abroad provided by the KVKK, obtaining the explicit consent of the user where required, or the application of other legal grounds and guarantees provided for by Turkish law.
8. Cookies
The site may use cookies and similar technologies.
Cookies can be:
- strictly necessary for the operation of the site;
- functional;
- analytical;
- advertising and marketing.
Strictly necessary cookies are used for the proper functioning of the website and can be used without separate user consent.
Analytical, advertising, marketing and other optional cookies are used only with the user's consent, if such consent is required by law.
The user can manage cookie settings through the cookie banner on the website or through their browser settings.
9. Personal data storage period
We store personal data only for the period necessary for the purposes for which it was collected, as well as for the periods required by Turkish law.
Approximate shelf life:
- applications and consultative correspondence - up to 3 years after the last contact;
- customer data on transactions - for the period necessary to fulfill the contract, tax, accounting and legal obligations;
- marketing consents - until consent is withdrawn;
- technical data and cookies - in accordance with the terms specified in the Cookie Policy;
- documents necessary to protect the rights of the company or client - within the applicable limitation period.
After the expiration of the storage periods, personal data is deleted, destroyed or anonymized in accordance with the law.
10. Security of personal data
We take the necessary technical and organizational measures to protect personal data from:
- unauthorized access;
- losses;
- changes;
- illegal disclosure;
- unlawful processing;
- destruction or damage.
Access to personal data is granted only to those persons who need it to perform their official, contractual or legal duties.
11. User rights
In accordance with the KVKK, the user has the right to:
- find out whether his personal data is being processed;
- request information about the processing of personal data;
- learn the purposes of processing and whether the data are used in accordance with these purposes;
- find out to whom the data was transferred within Turkey or abroad;
- request correction of incomplete or inaccurate data;
- request the deletion or destruction of personal data in cases provided by law;
- request notification of third parties to whom the data has been transferred about the correction, deletion or destruction of the data;
- object to a result that arose solely as a result of automated data processing;
- demand compensation for damages in case of illegal processing of personal data.
12. How to submit a request for personal data
The user can send a request regarding the processing of personal data to the following address:
Email:
Subject of the letter: KVKK / Personal Data Request
The request must include:
- first and last name;
- contact email or phone number;
- the essence of the request;
- information to confirm the identity of the applicant, if necessary.
We will review your request within the timeframes stipulated by Turkish legislation.
13. Marketing messages
We may send informational and marketing messages to the user about real estate, services, offers, objects, market news and events only with the user's consent, if such consent is required by law.
The user may opt out of receiving such messages at any time by contacting us via email or through the channel through which they receive messages.
14. Data of minors
Our services are intended for adults. We do not knowingly request personal information from minors without the consent of their legal guardians.
If we become aware that a minor's data has been transferred without the required consent, such data will be deleted unless processing is required by law.
15. Changes to the Policy
We may update this Policy periodically. The new version will take effect upon publication on the website, unless otherwise stated in the update.
We recommend that users periodically check the current version of the Policy on the website.
16. Contacts
For any questions regarding the processing of personal data, you can contact us:
Income Mersin Gayrimenkul
Address: Deniz Mah., Deniz Cad. No. 5G, 33180 Mezitli / Mersin, Türkiye
Email:
Phone / WhatsApp: +90 (531) 746 01 97
Website: income-mersin.com
