Privacy Policy

1. Identity of the Data Controller

Pursuant to Law No. 6698 on the Protection of Personal Data (the “Law”), your personal data obtained through this website is processed by Ömer Hekim Yapı Endüstrisi San. ve Tic. A.Ş. (the “Company”) in its capacity as data controller, within the scope and for the purposes explained below.

Address: Teyyaredüzü Mah. Atatürk Bulvarı No:355, Merkez/Giresun
Phone: 0454 215 55 55
Email: info@hekimtower.com
Website: hekimtower.net
Trade Registry No: [FROM CLIENT: trade registry number]
MERSİS No: [FROM CLIENT: MERSİS number]
Tax Office / Tax No: [FROM CLIENT: tax office name and number]
Registered Electronic Mail (KEP) Address: [FROM CLIENT: registered electronic mail address, if any]

2. Which of Your Personal Data Is Processed

Only the data you submit yourself, voluntarily and through the forms, is collected via our site. The limited data collected for measurement purposes during your visit is additionally explained in section 7 and in our Cookie Policy.

• Contact form (Contact page): Full name, phone, email, the residence/office type you are interested in, your message.
• Pre-registration and reservation form (the modal window that can be opened on all pages of the site): the amenity you request, date, time, duration, full name, phone, email, your message.
• Technical record: your IP address at the moment you submit the form, and the time of submission. This record is kept for two purposes: preventing unwanted/automated submissions, and — if you have consented to commercial electronic messages — being able to prove when and through which connection that consent was given (within the scope of Law No. 6563).

If, due to a technical fault, the form notification cannot be delivered by email, your form data is stored on our server for a maximum of 7 days so that your request is not lost. Within this period, it is forwarded manually by us and is deleted automatically at the end of that period.

These forms do not request special categories of personal data (health, religion, political opinion, association/trade union membership, etc.). Please do not voluntarily enter such information into the free-text fields (message).

3. Purposes of Processing Your Personal Data

• Evaluating your appointment and pre-registration request and contacting you
• Providing pre-sales information and answering your questions
• Only if you have separately and explicitly consented: Sending commercial electronic messages (SMS, email, calls) for campaigns, announcements and promotions
• Measuring and improving the operation of the site (see the Cookie Policy)

4. Legal Basis

The processing of your appointment and pre-registration data is based on the legal grounds of being “directly related to the establishment or performance of a contract” and/or “the legitimate interest of the data controller” under Article 5/2 of the Law. Your explicit consent is not additionally required for these operations; however, under Article 10 of the Law we are obliged to inform you in this regard — this text has been prepared for that purpose.

The sending of commercial electronic messages for campaign/promotional purposes, on the other hand, is based on your separate and explicit consent under Law No. 6563 on the Regulation of Electronic Commerce. You are not obliged to give this consent; withholding it does not in any way affect the evaluation of your pre-registration or contact form.

5. To Whom and for What Purpose Your Data May Be Transferred

Your data may be shared on a limited basis with our sales/appointment team that will evaluate your request, with our technical infrastructure providers that deliver the form to us (hosting, email transmission, internet access/security infrastructure) and, where a legal obligation arises, with the competent public institutions and organisations. Your data is not sold or rented to third parties for marketing purposes.

6. Transfer Abroad

Part of the site's technical infrastructure is located abroad:

• Website hosting services are obtained in Germany (netcup GmbH, Nuremberg).
• The site is published through the infrastructure of Cloudflare Inc. (based in the United States) — the DNS/content delivery/security layer.
• If you accept Google Analytics (GA4) in your cookie preferences, your measurement data is processed by Google LLC (based in the USA).

These transfers constitute transfers of personal data abroad within the scope of Article 9 of the Law. As there is currently no country declared by the Personal Data Protection Board to provide “adequate protection”, the [AWAITING CLIENT/LAWYER APPROVAL: decision on whether a written undertaking plus Board permission, or the data subject's explicit consent specific to this transfer, will be relied upon] mechanism applies to these transfers. This section must not be published before final legal approval has been obtained.

7. Cookies and Measurement Tools

For detailed information about the cookies and measurement tools used on the site, please see our Cookie Policy: hekimtower.net/en/cookie-policy

8. Retention Period

The personal data you submit through the forms is retained for [FROM CLIENT: Retention period decision — recommendation: 2 years] from the conclusion of your request; at the end of this period it is deleted, destroyed or anonymised. Your consent to commercial electronic messages is retained separately until you withdraw it, or for the maximum period provided for by the Law.

9. Data Security

Your personal data is protected by HTTPS (TLS) encryption while being transmitted to our site. [AWAITING CLIENT/PROJECT DECISION: Once the form back end is connected, the security measures of the system/email account receiving the data must be described here.] In the event that your personal data is obtained unlawfully, both you and the Personal Data Protection Board are notified within no more than 72 hours from the moment the situation becomes known, pursuant to Article 12 of the Law.

10. Your Rights (KVKK Art. 11)

Pursuant to Article 11 of the Law, by applying to our Company you have the right to:

• Learn whether your personal data is being processed,
• Request information about it if it has been processed,
• Learn the purpose of processing and whether the data is used in accordance with that purpose,
• Know the third parties to whom the data is transferred in the country or abroad,
• Request correction if the data has been processed incompletely or incorrectly,
• Request deletion or destruction of the data when the conditions in Article 7 of the Law arise,
• Request that correction/deletion operations be notified to the third parties to whom the data has been transferred,
• Object to a result against you arising from the analysis of the processed data exclusively by automated systems,
• Claim compensation if you suffer damage as a result of unlawful processing

— these are the rights granted to you.

11. How to Apply

To exercise the rights above, you may apply:

• In writing, by registered mail with return receipt, to the Company's address stated under the “Address” heading,
• Through our registered electronic mail (KEP) address: [FROM CLIENT: This line must not be published until the KEP address has been added],
• From the email address previously registered with or notified to our system, to info@hekimtower.com

Your application will be concluded free of charge within 30 days at the latest, depending on its nature.

12. Changes

This text may be updated in line with changes in legislation or in our business processes. The current version is always published on this page.