KVKK Privacy Notice
Effective date: 2026-06-20·Version 2.2
KVKK Privacy Notice
Effective date: 4 June 2026 · Version: 2.0
This Privacy Notice has been prepared by the tamkonum platform (hereinafter the "Platform") in its capacity as data controller, in accordance with Article 10 of Law No. 6698 on the Protection of Personal Data ("KVKK") and the "Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform," in order to inform data subjects regarding the processing of their personal data. This notice is valid only in Türkiye.
1. Identity of the Data Controller
Your personal data is processed by the company identified below in its capacity as data controller:
| Trade Name | BM İNTERNET MAĞAZACILIK VE ELEKTRONİK TİCARET HİZMETLERİ LİMİTED ŞİRKETİ |
| Brand | tamkonum |
| Website | https://tamkonum.com |
| Address | Merkez Mah. Abide-i Hürriyet Cad. No: 211 İç Kapı No: 64 Şişli/İstanbul, Türkiye |
| Phone | +90 850 123 45 67 |
| KVKK Application E-mail | kvkk@tamkonum.com |
| Support E-mail | destek@tamkonum.com |
| MERSİS No. | 0178077397900019 |
| Trade Registry No. | 11416-5 |
| Tax No. | 1780773979 |
tamkonum is a vertical-video-based, multi-category real estate and listings platform. Through the Platform, it is possible to: create membership via phone number; publish video and photo listings, perform AI-assisted feature extraction and location verification; use search, feed, and map tools; broadcast and watch live streams; engage in messaging, in-app voice calls, and appointment scheduling between buyers and businesses; manage business profiles and portfolio (CRM); and obtain paid digital services such as subscriptions, listing boosts, live stream packages, and project advertising.
2. Categories of Personal Data Processed
Depending on your use of the Platform and the services you receive, the following categories of personal data are processed:
| Data Category | Example Data |
|---|---|
| Identity Data | First name, surname, username, profile information; verified identity data where identity verification is performed |
| Contact Data | Phone number, e-mail address, address information |
| Location Data | Listing location, verified location, device location (with your permission), location data derived from map/search interactions |
| Customer Transaction Data | Listing, search, favorite, messaging, appointment, and call record information (metadata excluding content), request and complaint records |
| Listing and Media Content | Videos, photos, and listing descriptions you upload, and features extracted from such content via AI |
| AI Interaction Data | For monitoring service quality and improving AI models: your text/voice inputs, the AI's outputs, and your corrections to those outputs — stored with your identity pseudonymized (irreversible hash) and personal data (phone, email, IBAN, etc.) masked |
| Audio Recording | Voice recordings that may be captured during in-app voice calls, provided that the parties are informed |
| Transaction Security / Log Data | IP address, device information, session records, access and transaction logs, cookie data |
| Marketing Data | Commercial electronic message preferences, campaign/interaction data, interest and behavior analyses |
| Financial and Payment Data | Payment transaction information, transaction amount and status (your card information is not stored by the Platform; payment is processed by the authorized payment institution via 3D Secure infrastructure) |
3. Purposes of Processing Personal Data
Your personal data is processed for the following purposes:
- Creating membership records, performing identity verification, and conducting account management
- Publishing listings, performing AI-assisted feature extraction from content, and verifying location
- Providing and personalizing search, feed, and map services
- Providing and managing the live streaming service
- Providing messaging, voice call, and appointment services between buyers and businesses
- Recording in-app voice calls and retaining them as evidence in the event of a dispute
- Conducting business profile and portfolio (CRM) services
- Performing paid services such as subscriptions, boosts, live stream packages, and project advertising, and conducting financial/accounting processes
- Carrying out payment transactions through the authorized payment institution
- Where your explicit consent exists, sharing your contact request (lead) with contractors/developers for projects that may interest you
- Where your explicit consent exists, sending commercial electronic messages (campaigns, announcements, notifications)
- Ensuring information security and preventing fraud and misuse
- Managing request, complaint, and support processes
- Fulfilling legal obligations and responding to requests from authorized institutions/organizations
- Measuring and improving service quality and conducting statistical/analytical activities
- Monitoring the quality of AI-assisted features (feature extraction, content generation, search, content moderation, video analysis) and improving the models, by retaining interaction records with the user identity pseudonymized and personal data masked
About AI Interaction Data: In these records your identity is irreversibly pseudonymized (hash) and personal data in text/voice content (phone, email, IBAN, etc.) is automatically masked. The records are processed solely for service-quality and model-improvement purposes, relying on the legitimate interest legal basis under KVKK Art. 5/2-f; they are not used for marketing.
4. Legal Bases for Processing Personal Data
Your personal data is processed on the basis of the following legal grounds set out in Articles 5 and 6 of the KVKK:
4.1. Data Processed Without Seeking Explicit Consent (KVKK Art. 5/2)
| Processing Activity | Legal Basis |
|---|---|
| Establishment of the membership agreement, account and service performance, payment processes | Being directly related to the establishment or performance of a contract (Art. 5/2-c) |
| Keeping financial records, statutory retention, responding to authorized institution requests | Fulfillment of the data controller's legal obligation (Art. 5/2-ç) |
| Information security, fraud/misuse prevention, service improvement, log keeping | Being mandatory for the legitimate interests of the data controller (Art. 5/2-f) |
| Listing content made public by you | Having been made public by the data subject themselves (Art. 5/2-d) |
| Establishment, exercise, or protection of rights in the event of a dispute (including call recordings) | Being mandatory for the establishment, exercise, or protection of a right (Art. 5/2-e) |
4.2. Data Processed Based on Explicit Consent (KVKK Art. 5/1 and Art. 6)
The following activities are carried out based on your explicit consent; you have the right to withhold your consent or to withdraw it at any time:
- Sharing your contact request (lead) with contractors/developers
- Sending commercial electronic messages
- Use of non-essential cookies (for analytics, marketing, personalization purposes)
- Processing of special categories of personal data, if any are processed (KVKK Art. 6)
5. Method of Collecting Personal Data
Your personal data is collected through automated or partially automated means via the mobile application, website, in-app voice call and recording infrastructure, cookies, and similar tracking technologies. Collection is based on the legal grounds specified in Section 4 above.
6. Transfer of Personal Data
Your personal data may be transferred to the following parties within the scope of Articles 8 and 9 of the KVKK and limited to the purposes stated above:
6.1. Domestic Transfer (KVKK Art. 8)
| Recipient Party | Purpose of Transfer |
|---|---|
| Business partners (e.g., contractors/developers) | Sharing your contact request where you have given explicit consent |
| Tosla / authorized payment institution (established in Türkiye) | Carrying out payment transactions via 3D Secure |
| Service providers (technology, call/notification, audit, consultancy) | Provision and maintenance of Platform services |
| Authorized public institutions and organizations | Fulfilling legal obligations and responding to requests |
6.2. International Transfer (KVKK Art. 9)
Due to the Platform's technical infrastructure, your personal data may be transferred to the following service providers established abroad, provided that the conditions set out in Article 9 of the KVKK are met (your explicit consent or appropriate safeguards, as required):
| Recipient Party | Purpose of Transfer |
|---|---|
| Google Cloud, Cloudflare (hosting/infrastructure) | Hosting of data, content delivery, and infrastructure services |
| Notification/communication service providers | Provision of push notification and messaging services |
7. Rights of the Data Subject (KVKK Art. 11)
As a personal data subject, pursuant to Article 11 of the KVKK, you have the right to apply to the data controller and to:
- Learn whether your personal data is being processed
- Request information if your personal data has been processed
- Learn the purpose of processing and whether it is used in accordance with its purpose
- Know the third parties to whom your data is transferred domestically or abroad
- Request the correction of your data if it has been processed incompletely or incorrectly
- Request the erasure or destruction of your data within the framework of the conditions set out in the KVKK and relevant legislation
- Request that correction, erasure, and destruction operations be notified to third parties to whom the data has been transferred
- Object to a result arising against you as a consequence of the analysis of your processed data exclusively through automated systems
- Request compensation for damages in the event that you suffer damage due to unlawful processing
8. Application Procedure
You may submit your requests regarding your rights under Article 11 of the KVKK to the data controller through the following methods, in accordance with the "Communiqué on the Procedures and Principles of Application to the Data Controller":
- In writing: By submitting your wet-signed petition together with documents verifying your identity to the following address: Merkez Mah. Abide-i Hürriyet Cad. No: 211 İç Kapı No: 64 Şişli/İstanbul, Türkiye
- By e-mail: By sending from the e-mail address registered in our system, or via secure electronic signature/mobile signature, to kvkk@tamkonum.com
Your application will be concluded free of charge as soon as possible and within thirty (30) days at the latest, depending on the nature of the request; if the process requires an additional cost, a fee from the tariff determined by the Board may be charged. In the event that your application is rejected, you find the response insufficient, or no response is provided within the time limit, you have the right to file a complaint with the Personal Data Protection Board within thirty (30) days from the date you learn of the response and, in any case, within sixty (60) days from the date of application.