Data Retention and Destruction Policy

Advice and application records: 2 years after the process closes.

Application and housing documents: while the process is open and for no more than 12 months afterwards; rejected applications are deleted as soon as possible.

Accounting and invoice records: 10 years (Turkish Commercial Code and Tax Procedure Law).

Data-subject requests and replies: 2 years.

Server and access logs: 12 months.

Site analytics: aggregated and anonymised, without a time limit.

At the end of the period data is deleted, destroyed or anonymised; records under a statutory duty are kept for that period.

Electronic data is deleted or irreversibly destroyed; magnetic and optical media are securely destroyed. Paper records are destroyed irrecoverably. Every destruction is recorded and applied to backups as well.

The data controller's representative is responsible for retention and destruction. Periods are reviewed at least once a year, destruction records are kept, and access rights are audited regularly.

On request, data without a statutory retention duty is deleted within 30 days. Where a statutory period still runs, the request is declined with the reason and the date the data will be deleted.