This English text is provided for information only. If it differs from the Turkish text, the Turkish text prevails.
Explains what Liyova processes in different service contexts and on which purposes and legal grounds.
1. Controller
Under Turkish Law No. 6698, Hasan Eksi (Lone), registered with Setbaşı Tax Office under tax number 3300731863, at Dikkaldırım Mah. 2. Halis Sok. No:15 Kat:3 D:4 Osmangazi/Bursa, Türkiye, info@liyova.com, +90 507 858 50 83 acts as controller for purposes it determines, including accounts, contracts, support, the website, security and legal compliance.
For resident, unit, employee, finance, visitor and operational records uploaded for a property management’s own purposes, that management is generally the controller and Liyova its instructed processor. Requests about management-created records should first go to that management.
2. Data categories
| Category | Examples | Source |
|---|---|---|
| Identity and contact | Name, phone, email, user identifier | You, management, identity provider |
| Customer and account | Organisation, role, permission, subscription, contract | Customer, account and order records |
| Finance and operations | Dues, debt, payment, unit, request, work order | Management and authorised users |
| Visitor and premises | Visitor name, invite, QR pass and access event | Resident, security and management |
| User content | Messages, notices, photos, documents and support requests | Users |
| Technical and security | Hashed IP, user agent, device, session, authentication and audit logs | Device and systems |
| Sales enquiry | Company, portfolio range, interest, source page and message | Form submitter |
3. Purposes and legal grounds
| Purpose | Main data | Legal ground |
|---|---|---|
| Verify and answer an enquiry | Identity, contact and message | Pre-contract request and legitimate interest |
| Create and secure accounts | Identity, role, device and session | Contract and legitimate interest |
| Operate subscriptions, invoices and support | Customer, transaction and contact | Contract and legal obligation |
| Security, audit and disputes | Technical, audit and communication records | Legitimate interest, legal claims and obligation |
This notice is not consent or permission for commercial electronic messages. Demo and contact-form data is used only to verify and answer the request.
4. Collection methods
Data is collected through website forms, mobile and web apps, management records and invitations, support channels, contracts, bank integrations, devices and security logs by automated or partly automated means.
5. Recipients and international transfers
Necessary data may be shared with management and authorised users, hosting and storage services, identity and notification providers, SMS/email services, banks and integration providers, professional advisers and authorised public bodies.
| Service | Provider examples | Purpose |
|---|---|---|
| Hosting | Vercel, Railway | Web, API and database |
| Identity/security | Google/Firebase, reCAPTCHA, Apple/Google sign-in where enabled | Authentication, push and abuse prevention |
| Storage/distribution | Amazon Web Services/CloudFront | Files, backups and releases |
| Communication | Netgsm and configured email provider | OTP and operational messages |
| Bank integration | Finekra, Obifin and enabled banks | Transaction import and matching |
An international transfer is made only when a valid safeguard under Article 9 is in place. This notice is not itself a standard transfer contract or authorisation.
6. Retention
| Record | General period |
|---|---|
| Unconverted enquiries | Up to two years after the last interaction |
| Contracts, invoices and commercial records | Generally ten years after the relationship, subject to law |
| Support and disputes | Three years after closure or for the dispute |
| Security and audit logs | Generally up to two years according to risk and law |
| Customer-controlled platform data | Contract term, 30-day export and deletion/anonymisation from active systems within 90 days |
| Data-subject requests | Three years after completion |
7. Rights and applications
You may ask whether data is processed, obtain information, learn purposes and recipients, request correction or deletion where conditions apply, object to adverse solely automated results and claim compensation for unlawful processing.
Send a verifiable request from your registered email to info@liyova.com or in writing to the Bursa address above. Requests are answered as soon as possible and within 30 days. Additional identity verification may be required; do not send an unnecessary identity-document copy.