Stera Danışmanlık Gayrimenkul Yazılım İhracat ve İthalat Ltd. Şti. · identical to the text inside the app
Stera Danışmanlık Gayrimenkul Yazılım İhracat ve İthalat Limited Şirketi ('YonexiA'), as the data controller within the scope of the Personal Data Protection Law No. 6698 ('KVKK'), processes, records, stores, updates, and may share the personal data of its users in accordance with the law and the rules of honesty, for the principles, purposes, and legal reasons explained below.
2.1. Identity Information: Full name, national ID number (only when legally required), date of birth. 2.2. Contact Information: Email address, phone number, address information. 2.3. Financial Information: Payment history, bank account information (IBAN), billing amounts. Credit card information is not stored in YonexiA systems; it is processed through PCI-DSS certified payment infrastructure providers. 2.4. Digital Identity Information: IP address, browser type and version, operating system, device information, session durations, platform usage statistics. 2.5. Location Information: Approximate location information only with user consent and for security purposes.
Collected personal data is processed for the following purposes: • Operation of the platform, creation and management of user accounts • Secure execution and reporting of payment transactions • Delivery and coordination of site/building management services • Fulfillment of legal obligations (tax legislation, regulatory authorities, etc.) • Improvement of user experience, enhancement of service quality, and analytical studies • Provision of notification, reminder, and communication services • Fraud prevention, information security, and protection of platform integrity
Personal data is processed based on the legal grounds specified in Article 5 of the KVKK: explicit consent, performance of contract, legal obligation, legitimate interest, and establishment/exercise/protection of a right.
YonexiA implements the following technical and administrative measures to ensure the security of personal data: • Data transmission security with 256-bit TLS/SSL encryption • Web Application Firewall (WAF) and DDoS protection systems • Role-based access control and two-factor authentication (2FA) • Regular security audits, penetration tests, and vulnerability scans • Data backup and disaster recovery procedures • Staff confidentiality commitments and information security training
6.1. Personal data may be shared with the following parties within the framework of legal obligations and service requirements: Contracted payment institutions (BRSA licensed), cloud infrastructure providers, legal regulatory and supervisory authorities. 6.2. Transfer of data abroad may be made to countries with adequate protection under Article 9 of the KVKK or to countries where the data controller provides adequate assurance.
Personal data is retained for the duration required by the processing purposes and for the periods prescribed by legal retention obligations (Turkish Commercial Code: 10 years, Tax Procedure Law: 5 years, Law No. 6563: 3 years). Upon expiration of the periods, data is deleted, destroyed, or anonymized.
You have the following rights under Article 11 of the KVKK: a) To learn whether your personal data is processed b) To request information about it if processed c) To learn the purpose of processing and whether it is used appropriately d) To know the third parties to whom your data is transferred domestically or abroad e) To request correction of inaccurately or incompletely processed data f) To request deletion/destruction under the conditions prescribed in Article 7 of the KVKK g) To request notification of correction and deletion operations to third parties to whom data has been transferred h) To object to the emergence of a result against you through the exclusive analysis of processed data by automated systems i) To request compensation for damages incurred due to unlawful processing of personal data
To exercise the rights mentioned above, you may submit a written application to support@yonexia.com together with documents verifying your identity. Applications will be responded to within 30 days at the latest pursuant to Article 13 of the KVKK.