Privacy Notice

This notice explains how Alwin Property (Alwin Group) processes your personal data when you visit our website or contact us through it, as required by the Turkish Personal Data Protection Law No. 6698.

1. Who We Are

This Privacy Notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform. It explains how we handle your data when you visit this website or contact us through it.

The data controller is Alwin Property, part of Alwin Group (the "Company"), based in Alanya, Antalya, Türkiye. The Company works as an agent for properties for sale and for rent, sells new-build developments and provides real-estate investment consultancy.

2. What Personal Data We Process

When you use the contact form or the enquiry form on a property or development

  • Identity: your name
  • Contact details: your e-mail address and, if you choose to give it, your phone number
  • Your request: the subject (optional), your message, the property or development you ask about, the language and page you sent the form from and, if present, campaign parameters (utm) in the page address
  • Security data: the IP address the form was sent from and the date and time of submission

Please do not include sensitive information such as health details, religious beliefs or ethnic origin in your message; we do not need it to answer you.

When you tap a WhatsApp button

We record which property or development you tapped it for, the page and time, any campaign parameters and your IP address. Conversations on WhatsApp are also subject to WhatsApp's (Meta) own privacy policy.

When you browse the website

  • Server logs: your IP address, browser and device information (user agent), the page requested and the time of access
  • Strictly necessary cookies: a session cookie that keeps your visit's session, and a security cookie that protects our forms (see our Cookie Policy)

We use no analytics, advertising, tracking or social-media cookies and do not profile our visitors.

3. Why We Process Your Data and on What Legal Basis

In line with the general principles in Article 4 KVKK, we process personal data only for these purposes and on these legal bases:

  • Answering questions about our services: when you ask about a property, a development or our consultancy, we pass your request to the consultant in charge and need your data to respond before any contract is made (Article 5(2)(c) KVKK – entering into a contract).
  • Answering general questions and keeping a record of our correspondence (Article 5(2)(f) – our legitimate interests, provided they do not override your fundamental rights and freedoms).
  • Protecting our rights: keeping correspondence as evidence in case of a dispute (Article 5(2)(e) – establishing, exercising or protecting a right).
  • Website security: using server logs and strictly necessary cookies to keep the site secure, block spam and unauthorised access, and fix technical faults (Article 5(2)(f) – legitimate interests).
  • Legal obligations: retaining records where the law requires it and responding to lawful requests from authorised authorities and courts (Article 5(2)(ç) – compliance with a legal obligation).

None of this processing relies on your explicit consent, and we never use your data for marketing, profiling or automated decision-making.

4. How We Collect Your Data

All data is collected electronically: directly from you when you fill in a form or tap a WhatsApp button, and automatically through server logs and strictly necessary cookies while you browse the site.

5. Who Receives Your Data

Form messages are stored in the website's database and forwarded by e-mail to the Company's corporate mailbox and to the consultant in charge of the property. The website and the mailbox are both hosted by a hosting provider located in Türkiye.

In line with Article 8 KVKK, your data may only be disclosed to:

  • Our hosting provider, acting as our data processor, which provides the technical infrastructure for the website and our corporate e-mail;
  • Authorised public authorities and courts, only where we are legally required to disclose it.

The Company does not transfer your personal data outside Türkiye and never shares it with third parties for marketing.

The maps on the home page and on property, development and search pages load from servers of the OpenStreetMap Foundation (United Kingdom) when you reach the part of the page that holds them. Those servers receive your IP address and browser details. This happens only to show the map; OpenStreetMap's own privacy policy applies.

Our links to Instagram, WhatsApp and the villa websites are plain links. Once you follow one, that platform's own privacy policy applies; the Company is not the data controller for processing carried out by those platforms.

6. How Long We Keep Your Data

  • Form messages and WhatsApp enquiries, with the related IP address and timestamp, are kept for up to 2 years from submission and then deleted or anonymised, unless a legal obligation or an ongoing dispute requires longer retention.
  • Server logs are kept by the hosting provider for the period required by Law No. 5651 and its secondary legislation where applicable (between one and two years), and otherwise only as long as needed for security and fault diagnosis.
  • Strictly necessary cookies expire automatically 120 minutes after your last activity on the site.

When a retention period ends, the data is deleted, destroyed or anonymised in accordance with the Regulation on the Deletion, Destruction or Anonymisation of Personal Data.

7. Your Rights

Under Article 11 KVKK, you have the right to:

  • find out whether we process your personal data;
  • request information about that processing;
  • learn why your data is processed and whether it is used for that purpose;
  • know the third parties in Türkiye or abroad who received your data;
  • have incomplete or inaccurate data corrected;
  • have your data deleted or destroyed under the conditions in Article 7 KVKK;
  • ask us to notify any third parties who received your data of such correction, deletion or destruction;
  • object to an outcome that is to your detriment and results solely from automated analysis of your data;
  • claim compensation for any damage you suffer because your data was processed unlawfully.

8. How to Exercise Your Rights

Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you can send your request in writing or by e-mail, using the contact details on our Contact page. E-mail requests must be sent via registered electronic mail (KEP), with a secure electronic or mobile signature, or from an e-mail address you have previously given us and that is recorded in our systems.

Your request must include:

  • your name and surname, and your signature for written requests;
  • your Turkish ID number (Turkish citizens) or your nationality and passport or ID number (foreign nationals);
  • your residential or business address for notifications;
  • your e-mail address, phone or fax number for correspondence, if any;
  • what you are requesting.

We may ask for additional information to confirm your identity. We will reply as soon as possible and within 30 days at the latest, free of charge; a fee under the tariff set by the Personal Data Protection Board applies only if the request involves an additional cost. If your request is rejected, our answer is insufficient or we do not reply in time, you may complain to the Personal Data Protection Board under Article 14 KVKK.

9. Changes to This Notice

We may update this notice to reflect changes in the law or in how we process personal data. The current version is always published on this page.

Last updated: 15 October 2026