This privacy notice has been prepared by Akıl Yapay Zeka ve Yazılım Teknolojileri Anonim Şirketi (“the Company”), in its capacity as data controller, in accordance with Personal Data Protection Law No. 6698 (“the Law”) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform, with respect to the processing of your personal data within the scope of the Çözüm Hanem platform (“the Platform”).
1. Data Controller
- Trade name
- Akıl Yapay Zeka ve Yazılım Teknolojileri Anonim Şirketi
- Brand
- Çözüm Hanem
- MERSİS number
- 0025117079500001
- Tax office / number
- Şehitkamil / 0251170795
- Trade registry
- Gaziantep Trade Registry Office – 80814
- Head office address
- OSB 2. Bölge 83235 Nolu Cd. No:8, Başpınar (Organize) OSB, 27620 Şehitkamil/Gaziantep
- Phone
- +90 551 678 89 15
- [email protected]
- Website
- https://www.cozumhanem.com
Important: For data relating to compound and apartment building management such as unit, resident, monthly maintenance fee, debt, collection, meter, request and announcement records, the data controller is the relevant management (the owners' association, the property manager or the property-management company) that records this data on the Platform. The Company processes this data as a data processor on the management's behalf. For information notices and applications concerning this data, you must first contact your management; the sections below explain the processing for which the Company is the data controller.
2. Personal Data Processed, Purposes and Legal Grounds
| Data subject and process | Data processed | Objectives | Legal ground (Law Art. 5/2) |
|---|---|---|---|
| Website visitors | IP address, browser and device information, time of visit, strictly necessary cookies | Secure delivery of the website, prevention of attacks and misuse, and maintenance of access logs | (ç) compliance with a legal obligation; (f) legitimate interest |
| Those who contact us, request a demo, sign up (request a quote) or apply for a dealership | Name, surname, phone, email, company/compound and region details, request content, IP address and browser information at the time of application | Receiving and responding to the application, preparing an offer, conducting pre-contract negotiations, proving the application | (c) being directly related to the conclusion or performance of the contract; (e) establishment, exercise or protection of a right; (f) legitimate interest |
| Platform users (residents, unit owners, tenants, management officers) | Name, surname, phone, email, user account and role details, session and transaction logs, your preferred language | Account creation and security, identity verification, password reset, sending transaction notifications, responding to support requests, preventing unauthorized access | (c) performance of the contract; (ç) legal obligation; (f) legitimate interest |
| Those making online maintenance fee and debt payments | Name, surname, phone, email, T.C. identity number (if registered) and address, IP address, billed debt items and amounts, payment result, masked card number and card brand, approved contract versions | Processing the payment through the payment institution, posting it to debt records, issuing receipts, carrying out refund processes, preventing fraud, and proving and retaining distance contracts and consent records | (c) performance of the contract; (ç) legal obligation; (e) establishment, exercise or protection of a right |
| Registered card users | Masked card number, card brand, issuing bank, card token issued by the payment institution | Payment with a saved card and execution of recurring payment instructions | (c) performance of the contract |
| Authorized representatives of managements defined as sub-merchants | Name, surname, T.C. identity number, contact details, title, tax information, IBAN | Registering the management as a sub-merchant with the payment institution, transferring collected amounts, and identity verification obligations arising from legislation | (c) performance of the contract; (ç) legal obligation |
| AI-powered assistant for users of WhatsApp and Telegram channels | Phone number or channel user ID, message contents, transaction records | Answering your questions and carrying out the transactions you request, and transferring you to live support when needed | (c) performance of the contract; (f) legitimate interest |
| Authorised contacts of property-management companies, reseller partners and compound managements | Name, surname, title, contact details, authorization details, quote and contract details, invoice details | Formation and performance of the service agreement, invoicing, managing customer relationships | (c) performance of the contract; (ç) legal obligation; (f) legitimate interest |
The Company does not process special categories of personal data as a data controller. Where managements process special category data about their own employees or residents through the Platform (for example, a disability status in payroll records), the relevant management is the data controller. Where processing is based on your explicit consent (for example, sending commercial electronic messages), your consent is obtained separately and of your own free will; withholding consent does not prevent you from using the services.
3. How Personal Data Is Collected
Your personal data is collected, partly or wholly by automated means, through website forms, the Platform's web and mobile interfaces, records entered into the Platform by your management, transaction results returned by the payment institution, e-mail, telephone, WhatsApp and Telegram channels, and strictly necessary cookies.
4. Transfer of Personal Data
Your personal data may be transferred to the following recipient groups in accordance with Articles 8 and 9 of the Law and limited to the purposes set out above:
- The management you are connected to: for the purpose of managing your payment, debt, request and unit records.
- iyzico Ödeme Hizmetleri A.Ş. and banks: for the purpose of processing and refunding payments, preventing fraud and meeting statutory obligations.
- Service providers: suppliers providing data center, content delivery and security, SMS, email, push notification, map and AI-powered assistant services; solely for the purpose of delivering the service.
- Businesses: if you place a grocery, food or tradesperson order, for the purpose of delivering the order.
- Authorised public institutions and bodies and judicial authorities: for the purpose of fulfilling legal obligations.
The Platform's servers and database are located in Türkiye. Personal data is transferred abroad due to the use of services such as content delivery and security (Cloudflare), push notifications (Google Firebase), website font and interface libraries (e.g. Google Fonts, cdnjs, jsDelivr), bot protection if enabled (Google reCAPTCHA), and AI-powered assistant and messaging channels (WhatsApp, Telegram). As these transfers are continuous, they are not based on explicit consent; they are carried out in accordance with Article 9 of the Law, relying either on an adequacy decision issued by the Board for the relevant country, sector or international organisation, or, where no such decision exists, on one of the appropriate safeguards set out in the Law, such as signing the standard contract published by the Board and notifying the Board.
5. Retention period
Your personal data is stored for as long as the processing purpose requires and for the retention and limitation periods stipulated in the relevant legislation; at the end of that period it is deleted, destroyed or anonymised.
6. Your rights under Article 11 of the Law
As a data subject, by applying to the Company;
- to learn whether your personal data is being processed,
- to request information about it if it has been processed,
- to learn the purpose of processing and whether they are used in accordance with that purpose,
- to know the third parties to whom it is transferred, within the country or abroad,
- to request rectification in the event that it has been processed incompletely or incorrectly,
- To request the erasure or destruction of data under the conditions set out in Article 7 of the Law,
- to request that rectification, erasure and destruction operations be notified to third parties to whom the personal data has been transferred,
- to object to a result arising against you by means of analyzing the processed data exclusively through automated systems,
- to request compensation for damages suffered due to the unlawful processing of your personal data
you have these rights.
7. Application method
You can submit your requests regarding your rights, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, by a written petition containing your identifying information and your request, in person or through a notary to OSB 2. Bölge 83235 Nolu Cd. No:8, Başpınar (Organize) OSB, 27620 Şehitkamil/Gaziantep, to our registered electronic mail (KEP) address, by secure electronic signature or mobile signature, or from your electronic mail address registered on the Platform to [email protected].
Your application is concluded free of charge within thirty days at the latest, depending on the nature of the request; if the process also involves a cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged. If your application is rejected, you find the response insufficient or no response is given within the time limit, you may lodge a complaint with the Personal Data Protection Board within thirty days of learning of the response and, in any case, within sixty days of the application date.