Privacy and personal data
Data controller: Faruk Ordu (ORFO Gayrimenkul)
Ferahevler Mah. Adnan Kahveci Cad. Aydın Sok. No: 4/2, 34457 Sarıyer / İstanbul
+90 532 695 62 66.
Information and purposes
Your name, phone, question, budget and property preferences are used to respond and follow up your enquiry. Do not enter identification documents, health information or another person's private data in open fields.
The main request form prepares a WhatsApp message on your device; you send it in WhatsApp yourself. The web assistant and question form send information through Cloudflare for an enquiry record and a Telegram notification to ORFO. Saving and notification are separate operations, reflected in the result.
Legal grounds
Information necessary for a property service enquiry and contract preparation is assessed under KVKK article 5/2-c. Necessary response and follow-up records for other questions are assessed under article 5/2-f, with the conditions protecting the individual's rights. Legal obligations and the establishment or protection of a right require their applicable statutory ground. Reading this notice is not marketing consent and the enquiry form does not create an advertising subscription.
Notice, service request and explicit consent
The form checkbox records your declaration that you received the stated information. Submission requests a response and follow-up to this enquiry only; it is not marketing consent or a waiver of ORFO's legal duties. The notice version, scope and server receipt time are stored with the enquiry.
Explicit consent is not imposed for the same operation when another statutory processing condition applies, such as necessary contract preparation or performance. A separate optional operation relying on consent requires a specific explanation, an unselected choice and a way to withdraw consent. This website does not collect general advertising or blanket consent. Consent does not replace the safeguards required for regular international transfers.
Providers and transfers
Cloudflare provides hosting and record infrastructure; Telegram provides ORFO notifications; WhatsApp provides messaging when you choose it. These providers may process data outside Türkiye. Regular international transfers require a mechanism under KVKK article 9; an acknowledgement box alone does not establish this safeguard.
Retention
Ordinary enquiries have a one-year cleanup process in the current system. Records linked to rental follow-up are excluded. Deletion is also assessed when the purpose or legal retention reason ends. Telegram and WhatsApp copies are separate and are not automatically deleted when a site record is cleaned up.
Operation and security records
Separate audit events record request processing, storage and notification results, authorised request views, status/note actions and retention cleanup. They do not copy names, phones, message content, IP addresses or secret keys. Limited record references, action types, timestamps and notice versions are retained. Linked references can identify a person, so these logs are not fully anonymous. Ordinary audit events expire automatically after 90 days for security and incident review. This is an operational retention choice, not a universal statutory period. Access is restricted and overseas processing obligations still apply.
Photo Studio and device data
The public Photo Studio processes photos, logos, portraits and videos on your device and does not upload them to ORFO's server. Projects and photos may remain in IndexedDB; settings, logo and contact preferences may remain in localStorage. Clearing your browser's site data removes these local records. The Telegram Listing Studio is different: saving a listing sends records and media to the bot flow; public fields are separated from owner details and private notes.
Analytics
Cloudflare Web Analytics measures usage and performance. The provider states that this product does not use analytics cookies or individual fingerprinting. Names, phone numbers and form content are not sent as custom analytics events. Fonts are served from our own site. See device storage details.
Your rights and requests
You may ask whether data is processed; request information about its use and recipients, correction, deletion or destruction when the conditions apply and notification to recipients; object to adverse results based solely on automated analysis; and seek compensation for unlawful processing.
Address a written KVKK request to Faruk Ordu at the office above, or use another method allowed by the applicable rules. The phone is for general contact and assistance with the proper request method. Requests are answered as soon as possible and within 30 days; identity and authority may be verified appropriately.
KVKK notice requirements · International transfers · Cloudflare analytics.