Privacy Policy

Effective Date: 23.08.2026

This Privacy Policy describes how your personal data is collected, used for what purposes, shared with whom, and protected on ERSA İNŞAAT PROJE TURİZM SANAYİ VE TİCARET ANONİM ŞİRKETİ operated by https://sarayli.milenyums.com .

The scope of the policy is what the site actually uses is limited to features: the following sections are automatically generated based on the modules, widgets, and integrations active on this site. Sections belonging to an unused service are not included in this text.

1. Data Controller

Title	ERSA İNŞAAT PROJE TURİZM SANAYİ VE TİCARET ANONİM ŞİRKETİ
Company Type	Joint Stock Company
Address	Yenibosna Merkez Mah. 1. Asena Sok. No: 15, Bahçelievler / İstanbul
Tax Office / No	Yenibosna Vergi Dairesi / 3680247978
MERSİS Number	0368024797800015
Email	iletisim@sarayli.com.tr
Phone	(0212) 411 10 00

2. Personal Data We Process

The following data is always processed for the core operation of the site:

• Identity and contact information: name, surname, email address and phone number information you have provided to us
• Transaction security: IP address, session logs, browser and device information, mandatory cookie data
• Request records: the content and history of communications you have had with us

Any other data processed is only included below if the relevant service is active on this site.

3. Our Processing Purposes

• Fulfillment of your requests and applications
• Ensuring account and session security
• Compliance with legal obligations (tax, trade, consumer legislation)
• Prevention of fraud and misuse
• Measurement and improvement of site performance

4. Legal Bases (KVKK Article 5)

• It is mandatory for the formation or performance of a contract
• It is explicitly provided for by law and is necessary for the fulfillment of a legal obligation
• Data processing is mandatory for the establishment, exercise, or protection of a right
• Our legitimate interests, provided that they do not harm your fundamental rights and freedoms
• Your explicit consent (for commercial communications, cookie-based marketing, etc.)

5. Who do we share with?

Your data is limited solely to the relevant purpose, and is shared with IT infrastructure and hosting providers, financial and legal advisors, and authorized public institutions and organizations upon request. The scope of data sharing for each additional service active on the site (such as payment, shipping, marketplace, messaging, measurement, etc.) is also specified in the relevant section below. In cases where data transfer abroad is required, the conditions stipulated by KVKK are complied with.

6. Retention Periods

• Commercial ledgers and documents: 10 years (Turkish Commercial Code)
• Tax and invoice records: 5 years (Tax Procedure Law)
• Membership and communication records: a reasonable period after the relationship ends
• Commercial communication consent records: 3 years from the withdrawal of consent
• Traffic and transaction security records: as per the legislation's requirements

Your data will be deleted, destroyed, or anonymized at the end of these periods.

7. Data Security

Your data is protected by administrative and technical measures such as authorized access, encryption, secure connection (SSL/TLS), logging, and regular backups. Our staff is bound by confidentiality obligations.

8. Cookies

The full list of cookies used on the site, the service they belong to, and their retention periods are published on the Cookie Policy page; that list is also generated from the services that are actually active on this site. Non-essential cookies only operate with your consent, and you can change your preferences at any time.

9. Membership and Account Data

When you create an account on the site, your full name, email, phone number, and an irreversible hash of your password are processed. Login logs, IP address, and device information are retained for account security and to prevent abuse. You can view and edit your account and the information in it from the dashboard, as well as request the deletion of your account; upon a deletion request, records subject to legal retention obligations are stored in a limited manner until their retention period expires.

10. Two-Factor Authentication

When you protect your account with two-step verification, the secret key that matches your verification app and — if used — the phone number to which the verification code is sent are processed. Recovery codes are stored irretrievably. This data is used only to verify your identity and prevent unauthorized access to your account; it is not used for marketing purposes.

11. Form and Request Data

When you fill out the contact, offer, and application forms on the website, the name, contact information, and message content you share are processed for the purpose of evaluating your request, responding to you, and tracking the history of your request. We recommend that you do not write any sensitive information (ID number, health information, card details) that is not required in the form's message field. Unless you have specifically indicated your consent to receive commercial communications, your form data will not be used for marketing purposes.

12. Customer Relationships and Segmentation

Your communication history, requests, purchase, and interaction records are consolidated into a single customer record to manage the relationship established with you. These records are used to improve service quality, expedite your requests, and identify suitable campaigns for you and can be automatically segmented (e.g., new customer, regular shopper, long-term inactive).

Segmentation does not produce an automated decision with legal consequences for you; it merely determines the relevance of communication and offers. You have the right to object to this assessment and request a review of the decision.

13. Notifications and Device Data

When you accept to receive notifications, your browser/device notification address (token), device type, and language information are processed. This data is solely used for sending notifications and measuring the success of the delivery. You can revoke the notification permission at any time through your browser or device settings; when you do so, your record is deleted.

14. Map and Location

A map service is used to display address and route information. When the map loads, it processes your IP address and device details provided by your browser. If your browser requests location permission, this is optional and you can decline; your location is not stored by us.

15. Support and Messaging

When you create a support request or reach out to us via WhatsApp or live chat, your contact information, message content, and any attachments are processed to resolve and record your request. For correspondence conducted via WhatsApp, that platform's own privacy policy also applies.

16. Messaging and Inbox

When you reach out to us via our website or through our messaging channels (email, WhatsApp, social media inboxes), the message content, sender's name and contact information, along with the time of the message, are collected in a single inbox. These records are stored for the resolution of your request, for tracking purposes, and as proof in case of any disputes. Message contents are not used for marketing purposes and are not accessible to irrelevant staff members.

17. Your Rights (KVKK Art. 11)

1. Learning whether your personal data is processed
2. Requesting information regarding this if it has been processed
3. Learning the purpose of processing and whether it is used in accordance with its purpose
4. Knowing the third parties to whom it is transferred domestically or abroad
5. Requesting correction if it has been processed incompletely or inaccurately
6. Requesting its deletion or destruction
7. Requesting notification of correction/deletion processes to the third parties to whom data has been transferred
8. Objecting to an outcome against you resulting from analysis exclusively by automated systems
9. Requesting compensation if you suffer damage due to unlawful processing

18. Application Methods

To exercise your rights, you can send an email to iletisim@sarayli.com.tr, write to the registered electronic mail (KEP) address , or submit a wet-signed petition to Yenibosna Merkez Mah. 1. Asena Sok. No: 15, Bahçelievler / İstanbul. Your application will be processed within 30 days at the latest.

19. Changes

This policy may be updated in accordance with regulations and service changes. When a new module, widget, or integration is enabled on the site, the corresponding section is automatically added to this text; when removed, it is removed from the text. The current version is always published on this page.