Privacy Policy

At CasaX, we consider protecting the privacy of our users as one of our top priorities. This Privacy Policy describes how personal data collected, processed, and stored through our platform is used. By using our services, you agree to the practices described in this policy.

1. Information Collected

The following information may be collected when using the CasaX platform:

1.1. Identity Information

• Name and surname
• National ID number (as required by legal obligations)
• Email address
• Phone number

1.2. Residence and Site Information

• Block and apartment number
• Address information
• Vehicle license plate information
• Property ownership status

1.3. Financial Information

• Dues payment information
• Bank account information (IBAN)
• Payment history and debt status
• Credit card information (encrypted through secure payment providers)

1.4. Usage Information

• IP address
• Browser type and version
• Pages visited and usage duration
• Device information

2. Purposes of Information Use

The collected personal data is used for the following purposes:

• Tracking dues and processing payments
• Facilitating communication between residents and managers
• Making announcements and notifications
• Managing common area reservations
• Tracking requests and complaints
• Ensuring platform security and fraud prevention
• Improving service quality and user experience
• Fulfilling legal obligations
• Statistical analysis and reporting

3. Information Sharing and Transfer

Your personal data is not shared with third parties except in the following cases:

• Site Management: Site managers and board members can access necessary information to perform their duties.
• Payment Service Providers: Information is shared with licensed payment institutions for secure payment processing.
• Legal Requirements: Information may be shared upon request from legal authorities, court orders, or legal obligations.
• Service Providers: Third-party companies providing technical services such as infrastructure, hosting, and email delivery can only access information necessary for service provision.

Your data may be stored on servers located abroad. In such cases, necessary security measures are taken in accordance with KVKK and relevant legislation.

4. Data Security

The following technical and administrative measures have been taken to ensure the security of your personal data:

• Encrypted data transmission with SSL certificate
• Secure database systems and regular backups
• Limited access authorization and permission management
• Regular security tests and updates
• Employee training and confidentiality agreements
• Strong encryption algorithms

However, please note that no data transmission over the internet is 100% secure. For your account security, we recommend not sharing your password with anyone and using strong passwords.

5. Cookies

The CasaX platform uses cookies to improve user experience and ensure proper platform operation. For detailed information about cookies, please review our Cookie Policy.

Types of Cookies Used:

• Essential Cookies: Required for the platform's basic functions (session management, security).
• Functional Cookies: Provide a better user experience by remembering your preferences.
• Analytics Cookies: Help improve service quality by analyzing platform usage.

6. User Rights (Under KVKK)

Under the Personal Data Protection Law No. 6698, you have the following rights as data subjects:

• Learn whether your personal data is being processed
• Request information if your personal data has been processed
• Learn the purpose of processing personal data and whether it is used in accordance with its purpose
• Know the third parties to whom personal data is transferred domestically or abroad
• Request correction if personal data has been processed incompletely or incorrectly
• Request deletion or destruction of personal data under the conditions set forth in Article 7 of the KVKK
• Request notification of correction, deletion, or destruction operations to third parties to whom the data was transferred
• Object to the emergence of a result against the person due to the analysis of processed data exclusively through automated systems
• Request compensation for damages suffered due to unlawful processing of personal data

You can contact us through the following contact information to exercise these rights.

7. Data Retention Period

Your personal data is retained for the period required by processing purposes and in accordance with legal retention obligations:

• Account Information: While your account is active and for the period required for legal obligations after account deletion (maximum 10 years).
• Financial Records: At least 10 years as required by tax legislation.
• Communication Records: For the period required for resolution of support requests (typically 2 years).
• Log Records: For security purposes, 6 months to 1 year.

Data whose retention period has expired is securely deleted or anonymized.

8. Children's Privacy

The CasaX platform is not suitable for use by individuals under 18 years of age without parental or guardian consent. We do not knowingly collect personal information from users under 18. If we discover that we have collected personal information from a user under 18, we will delete that information immediately. Parents should supervise and monitor their children's internet usage.

9. Policy Changes

CasaX may update this Privacy Policy from time to time. When significant changes are made, users will be notified via email or through the platform. You can find the publication date of the updated policy at the top of this page. By continuing to use our services, you are deemed to have accepted the updated policy.

10. Contact

For questions, requests, or complaints about the Privacy Policy, you can contact us through the following channels: