Personal Data Protection
Privacy Notice and Cookie Policy
This notice explains how we collect, use, share and protect the personal data of people who contact us through torusyapi.com, our advertising forms and our sales channels. It is issued under the Turkish Personal Data Protection Law No. 6698 ("KVKK"). If you are located in the European Economic Area or the United Kingdom, the rights described in section 8 also reflect those available to you under the GDPR / UK GDPR.
1. Who we are
TORUS GRUP YAPI VE İNŞAAT A.Ş. (a real estate developer and contractor based in Alanya, Türkiye)
Registered address: Şenlikköy Mah. Yeşilköy Cad. Morkent İş Merkezi No:27 İç Kapı:1, Bakırköy / İstanbul, Türkiye
Sales office: Oba Mah. Uğur Sok. No:8A/10, Mahal Oba İş Merkezi Floor 2, Alanya / Antalya, Türkiye
Tax office / no: Küçükçekmece V.D. 857 068 8769
E-mail: info@torusyapi.com · Phone / WhatsApp: +90 533 160 44 52
2. What personal data we process
| Category | Examples |
|---|---|
| Identity | First name, last name |
| Contact | Phone / WhatsApp number, e-mail address, country and city |
| Customer interaction | Project you are interested in, content of your request, preferred language, notes from calls and meetings, offer details |
| Marketing | The channel and campaign your request came from (ad source, UTM parameters, ad click identifier), qualification status of your request |
| Technical / security | IP address, browser and device information, time of form submission, referring page |
| Messaging | Messages you send us on WhatsApp, Instagram or Messenger |
We do not ask for special categories of data (health, religion, biometrics, etc.). Please do not share such data through our forms or messages.
3. How we collect it
- The information request form on torusyapi.com
- Instant forms in our Facebook and Instagram ads (Meta Platforms)
- Your messages or calls via WhatsApp, Instagram, Messenger, phone and e-mail
- Visits to our sales office and promotional events
- Cookies and measurement tools on our website (see section 9)
4. Why we process it
- To answer your request and contact you in your preferred language
- To present our projects and run appointment, presentation, offer and sales processes
- To manage customer relationships and keep track of requests (CRM)
- To measure and improve the performance of our advertising, including understanding which campaigns generate qualified enquiries
- With your consent, to send you commercial communications about our projects and campaigns
- To keep our systems secure and prevent misuse and fraudulent requests
- To comply with legal obligations and requests from competent authorities
5. Legal bases
- Steps prior to, or performance of, a contract (KVKK art. 5/2-c; GDPR art. 6/1-b): answering your request, offers and sales
- Our legitimate interests (KVKK art. 5/2-f; GDPR art. 6/1-f): customer relationship management, advertising measurement, security and fraud prevention
- Legal obligation (KVKK art. 5/2-ç; GDPR art. 6/1-c): commercial and tax record-keeping
- Your consent (KVKK art. 5/1; GDPR art. 6/1-a): commercial communications and the international transfers described in section 6
6. Who we share it with
- Our sales and marketing team and authorised staff
- Service providers: website hosting and e-mail infrastructure, customer records and reporting tools (Google LLC — Google Workspace / Drive / Analytics), instant notification infrastructure (Telegram), technical support providers
- Meta Platforms (Facebook / Instagram): data you submit through our ad forms is created on Meta's servers and transferred to us. For advertising measurement, we also inform Meta when a request has become qualified; in doing so your personal data is irreversibly hashed before it is sent, and Meta uses it for ad matching and optimisation, not to identify you directly.
- Public authorities and courts where legally required
Meta, Google and Telegram servers are located outside Türkiye. These transfers are made under KVKK art. 9 on the basis of your consent and/or safeguards recognised by the Turkish Data Protection Authority. By ticking the consent box on our form you consent to these transfers; you may withdraw your consent at any time.
7. How long we keep it
We keep your personal data for as long as needed for the purposes above and, in any case, for the retention and limitation periods required by law (10 years for commercial books and records). Data processed for marketing purposes is no longer processed once you withdraw your consent. Afterwards, data is deleted, destroyed or anonymised.
8. Your rights
You have the right to:
- Learn whether your personal data is processed and request information about it
- Learn the purpose of processing and whether data is used accordingly
- Know the third parties, in Türkiye or abroad, to whom your data is transferred
- Request correction of incomplete or inaccurate data
- Request erasure or destruction of your data under the conditions of KVKK art. 7
- Request that corrections and erasures be notified to third parties who received your data
- Object to a result against you produced solely by automated analysis
- Claim compensation for damage caused by unlawful processing
Where the GDPR applies, you additionally have the rights to restriction of processing, to data portability, to withdraw consent at any time, and to lodge a complaint with your local supervisory authority.
How to exercise your rights
Send your request, together with information that allows us to verify your identity, to info@torusyapi.com or in writing to our registered address above. We respond free of charge within 30 days at the latest.
9. Cookies and measurement tools
Besides cookies strictly necessary for the site to work, we use the following measurement and advertising tools:
- Google Analytics 4 / Google Tag Manager: visit statistics and site performance
- Meta Pixel: measuring the effectiveness of our ad campaigns and showing ads to relevant audiences
- Google Ads tag: ad conversion measurement
These tools may process your IP address, device and browser information and page interactions. You can delete or block cookies in your browser settings at any time; some site functions may then be limited.
10. Security
Your data is transmitted over an encrypted connection (HTTPS) and access is limited to authorised staff. We apply the technical and organisational measures required by KVKK art. 12.
11. Consent statement (form checkbox)
By ticking the box "I have read and accept the privacy notice on the processing of my personal data", you confirm that you have read this notice and you consent to the processing of the data you submit for the purposes in section 4, to its transfer to the service providers abroad listed in section 6, and to being contacted through the channel you prefer (phone, WhatsApp, e-mail). You may withdraw your consent at any time by writing to info@torusyapi.com.
12. Changes
We may update this notice when the law or our processes change. The current version is always published on this page.