Privacy Policy

1. Data Controller

Your personal data is processed by Zaren Invest as the data controller.

• Address: Ataköy 7-8-9-10. Kısım Mh. E-5, Ataköy 7-8-9-10. Kısım, Yan Yol Caddesi Selenium Retro-9 No:16/1/A A Blok 18/130, 34158 Bakırköy/İstanbul
• Email: [email protected]
• Phone: +90 548 879 35 00

2. Personal Data We Process

• Identity and contact details: the full name, phone number and email address you share in our contact and consultation forms.
• Request details: your message and any options you select in the form, such as budget range and investment purpose.
• Security and technical data: IP address, browser/device information (user agent), country, the address of the page the form was sent from, and language preference.
• Marketing data: UTM parameters showing which advertisement or campaign brought you to the site.
• Cookie data: usage data collected through analytics and advertising cookies, to the extent you allow them. See our Cookie Policy for details.

3. Purposes and Legal Bases

• Responding to your request, contacting you and providing real estate investment consultancy — steps prior to entering into a contract and your explicit consent (KVKK Art. 5/2-c, 5/1; GDPR Art. 6(1)(b), (a)).
• Recording and following up requests in our customer relationship management (CRM) system — legitimate interest (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)).
• Keeping the website secure and preventing abuse and spam submissions — legitimate interest.
• Measuring the effectiveness of our advertising campaigns and analysing site usage — your consent (your cookie preferences).
• Complying with legal obligations and establishing, exercising or defending legal claims — legal obligation and legitimate interest.

4. Who We Share Data With

We do not sell your personal data. It may be shared with the following parties only as far as necessary for the purposes above:

• Bitrix24 — the CRM service where requests and customer records are kept.
• Our email service provider — to deliver form notifications to our team.
• Google (Google Analytics, Google Ads, Google Tag Manager) — only for the analytics and marketing cookies you accept.
• ipapi.co — approximate country detection based on your IP address, used to preselect the country code in the phone field.
• Group companies and business partners — project developers and authorised consultants in Cyprus, so we can give you information about the project you asked about.
• Competent public authorities — where required by law.

5. International Transfers

Some of our service providers (e.g. Google, Bitrix24) may store data on servers outside Türkiye, in the European Union or the United States. Requests concerning projects in Cyprus may also be shared with our partners there. These transfers are carried out with the safeguards required by KVKK Art. 9 and the GDPR (explicit consent, standard contractual clauses, etc.).

6. Retention

Information you send through our forms is kept for as long as needed to handle your request and maintain our relationship, and then for the limitation periods set by applicable law, after which it is deleted, destroyed or anonymised. Cookie retention periods are listed in our Cookie Policy.

7. Security

We apply reasonable technical and organisational measures — such as encrypted HTTPS connections, access controls and careful selection of service providers — to protect your personal data against unauthorised access, loss and misuse.

8. Your Rights

Under KVKK Art. 11 and the GDPR you have the right to find out whether your personal data is processed and request information about it, learn the purpose of processing, know the third parties it is shared with, ask for incomplete or inaccurate data to be corrected, ask for your data to be erased or destroyed, object to processing, withdraw your consent at any time, and claim compensation for damage caused by unlawful processing. Under the GDPR you may also request restriction of processing and data portability.

You can send your requests by email to [email protected]. We will respond free of charge within 30 days at the latest. You also have the right to lodge a complaint with the Turkish Personal Data Protection Authority or, if you live in the EU, with the data protection authority in your country.

9. Changes

We may update this policy from time to time. The current version is always published on this page, and the date at the top shows when it was last updated.