Mistral GYO Privacy Policy

 

This Privacy Policy sets out the principles followed by Mistral Gayrimenkul Yatırım Ortaklığı Anonim Şirketi (the “Company“) when collecting and using personal data obtained through its website at the users’ own discretion.

  1. Which Personal Data Do We Collect Through Our Website?

Depending on the users’ access to the website and the transactions they carry out, our Company may collect, through the website, the user’s identity information, transaction security information, IP information, contact information, request/complaint management information, user information, incident management information, user transaction information, and any other information deemed personal data under the Personal Data Protection Law and all related legislation that may be necessary for the performance of the services offered on the website. The user expressly consents to the processing of the data they may share with our Company of their own accord, within the scope and for the purposes set out in this Privacy Policy.

  1. Information on Cookies Used on Our Website

Data such as the sections visited and the areas clicked during users’ navigation of the website are collected automatically by our Company; you can access our Company’s policy on such cookies via our website.

  1. Purpose of Use of the Personal Data Obtained Through Our Website

Personal data collected by our Company are processed, in accordance with the fundamental principles set out both in the legislation and by the Personal Data Protection Authority, in order to enable the user to benefit from the website, to complete membership registration where website membership is concerned, to improve the services offered, to develop the service, to introduce and provide information about new services, to make the necessary notifications to the user in this context, to contact the user, and to fulfil the obligations arising from the nature of the services we provide.

Pursuant to Articles 5 and 8 of the Personal Data Protection Law and/or where exceptions exist under the relevant legislation, our Company may process personal data and share them with third parties without obtaining the user’s separate consent.

  1. Sharing of the Personal Data Obtained Through Our Website

Our Company may transfer the personal data obtained through the website, and the new data obtained by using such personal data, to third parties whose services it uses for the purpose of performing the services offered to the user through the website, limited to the provision of such services.

Our Company may also share user data with third parties it deems necessary in order to ensure the security of the user, to detect fraudulent or unauthorized use, to remedy errors relating to our services, and to fulfil any of the purposes set out in this Privacy Policy or in other privacy notices provided to the user. The user accepts and consents in advance that, limited to the purposes stated above, the said third parties may store the user’s personal data on their servers located anywhere in the world.

  1. Right of Access to and Correction Requests Regarding the Personal Data Obtained Through Our Website

By applying to our Company, the user has the right to:

  • Learn whether their personal data are being processed,
  • Request information if their personal data have been processed,
  • Learn the purpose of processing of their personal data and whether they are used in accordance with that purpose,
  • Know the third parties to whom their personal data are transferred, whether domestically or abroad,
  • Request correction of their personal data if they are incomplete or inaccurately processed,
  • Request deletion or destruction of their personal data under the conditions stipulated in the relevant legislation,
  • Request that correction, deletion and destruction operations carried out in accordance with the relevant legislation be notified to the third parties to whom the personal data have been transferred,
  • Object to a result arising against the person themselves through the analysis of the processed data exclusively by automated systems,
  • Request compensation for damages in the event that they suffer damage due to unlawful processing of their personal data.

The user may submit applications regarding the rights listed above by using the Data Subject Application Form available at www.mistralgyo.com. Our Company’s reasoned response to such requests will be communicated to the user in writing or digitally. It is essential that no fee is charged for the necessary procedures regarding such requests; however, if the procedures entail a cost, a fee may be requested based on the tariff determined by the Personal Data Protection Board pursuant to Article 13 of the Personal Data Protection Law.

The user undertakes that the information subject to this Privacy Policy provided by them to our Company is complete, accurate and up to date, and that they will immediately update such information in the event of any change. Our Company shall bear no liability if the user has not provided up-to-date information.

  1. Retention Period of the Personal Data Obtained Through Our Website

Personal data provided to our Company by the user will be retained for the limitation periods determined in accordance with the relevant legislation.

  1. Measures Taken by Our Company Regarding Data Security

Our Company undertakes to take the necessary technical and administrative measures and to have the necessary audits performed in order to ensure the appropriate level of security so that personal data are not processed unlawfully, are not accessed unlawfully, and are duly preserved, under the conditions determined in the relevant legislation or expressed in this Privacy Policy.

Where links to other applications are provided on the website, our Company bears no responsibility for the privacy policies and contents of such applications, and accepts no liability for damages that may arise as a result of the use of personal data within the framework of the conditions above.

  1. Changes to the Privacy Policy

Those who benefit from the services offered on the website are deemed to have read and accepted all these terms. Our Company reserves the right to change the provisions of the Privacy Policy without prior notice. The current Privacy Policy enters into force on the date it is presented to the user by any method.

IDENTITY OF THE DATA CONTROLLER

MERSIS No                 :  0622060027500011

Trade Registry No       :  Merkez – 158601
Website      :  www.mistralgyo.com

Telephone Number :  0232 421 50 80

E-Mail Address        :  yatirimci@mistralgyo.com

Address                          :  Çınarlı Mahallesi Ankara Asfaltı Caddesi Mistral Office Tower No:15 Floor:20 D:202

Konak / İzmir