Privacy Policy and Personal Data Notice

Last updated: 22 October 2026

1. Data controller

This notice is provided by Assetto Gayrimenkul Yatırım A.Ş. ("Hancı Global", "we") as data controller, in accordance with Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK"). Hancı Global operates the brands Hancı Stay (short-term rentals), Hancı Travel (transfers and tours), Hancı Property (real estate), Hancı Renovation and Hancı Visa (visa consultancy).

Registered address: Ergazi Mah. 1803 Cad. 16 No: 13 A İç Kapı No: 12, Yenimahalle / Ankara. Istanbul office: Müeyyetzade Mah. Necatibey Cad. Sait Demirbağ İşhanı No:5/45, Beyoğlu / İstanbul. Email: [email protected]. Phone: +90 506 333 51 54.

2. What personal data we process

Identity: full name, Turkish ID or passport number, nationality, date of birth (required by law for guests who stay with us).
Contact: phone / WhatsApp number, email address.
Booking and transaction data: dates, number of guests, chosen apartment or service, price, payment records, our correspondence and your special requests. We do not store card details.
Service-specific data: flight details and address for transfers; application documents for visa consultancy (passport, photo, bank statements, employer letter, etc.); property and address details for real estate and renovation services.
Technical and usage data: IP address, browser and device information, pages visited and clicks on our website (through cookies and similar technologies; see our Cookie Policy).
Marketing data: whether you arrived on our website from a Google ad.
Reviews: reviews you leave on Airbnb, Booking.com or Google may be shown on our website together with your first name and country.

3. Why we process it

to answer your booking requests and provide accommodation, transfer, tour, real estate, renovation and visa services;
to contact you before and during your stay and send you check-in instructions;
to report the identity of guests to the police as required by Turkish law;
to handle payments, invoicing, accounting and tax obligations;
to manage requests, complaints and legal disputes and to keep our properties secure;
to run our website, measure visits, evaluate the performance of our ads and improve our services.

4. Legal grounds

We process your data on the following grounds under Article 5 of the KVKK: performance of a contract (bookings and services); compliance with legal obligations (Identity Notification Law No. 1774, the rules on renting residences for tourism, tax and commercial law); establishing, exercising or defending legal claims; and our legitimate interests, provided they do not override your fundamental rights (service quality, security, running our website). For non-essential analytics and advertising cookies, and for transfers abroad that require it, we rely on your explicit consent, which you can withdraw at any time.

5. Who we share it with

Public authorities: the police (guest identity notification), tax offices and, on request, courts.
Booking platforms: if you booked through Airbnb, Booking.com or Vrbo, your data is also shared with that platform under its own privacy policy.
Our service providers: website hosting and security (Vercel, Cloudflare), Google (Analytics, Ads, Maps, email and spreadsheets), WhatsApp (Meta), pricing software, our accountants and legal advisers.
Our partners: as far as needed to deliver the service you asked for — transfer drivers, boat and tour operators, cleaning and maintenance teams; for visa services, consulates and authorised application centres.

6. Transfers abroad

Some of our service providers (Google, Meta/WhatsApp, Vercel, Cloudflare) store data on servers outside Türkiye, mainly in the United States and the European Union. These transfers are made in line with Article 9 of the KVKK, on the basis of standard contracts with the providers or, where required, your explicit consent. For visa services, your documents are sent at your request to the consulate or authorised application centre of the country you are applying to.

7. How we collect data

We collect data from WhatsApp, phone and email conversations, from the contact form on our website (the form opens WhatsApp with your message; it is not stored on our servers), from booking platforms, and through cookies on our website, by fully or partly automated means.

8. How long we keep it

We keep your data for as long as the purpose requires and for the retention periods set by law (for example, 10 years for commercial and tax records). After that, it is deleted, destroyed or anonymised. Cookie retention periods are listed in our Cookie Policy.

9. Your rights

to learn whether your personal data is processed and, if so, to request information about it;
to learn the purpose of processing and whether it is used accordingly;
to know the third parties in Türkiye or abroad to whom it is transferred;
to request correction of incomplete or inaccurate data;
to request deletion or destruction under the conditions of Article 7 of the KVKK;
to request that corrections and deletions be notified to third parties who received the data;
to object to a result against you that arises solely from automated analysis;
to claim compensation for damage caused by unlawful processing.

10. How to contact us

To exercise your rights, email [email protected] or write to Ergazi Mah. 1803 Cad. 16 No: 13 A İç Kapı No: 12, Yenimahalle / Ankara, including information that lets us verify your identity. We will reply free of charge within 30 days at the latest; if the request involves an additional cost, the fee set by the Personal Data Protection Board may apply. If you are not satisfied with our reply, you can complain to the Turkish Personal Data Protection Authority (KVKK).

This English text is a translation; in case of any difference, the Turkish version prevails.