Privacy Notice
Last updated:
This notice is given under Article 13 of the EU General Data Protection Regulation (GDPR) and Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK).
1. Data controller
Rivieravize is a brand of Aquarium Real Estate Service L.P., Stratarchou Alexandrou Papagou 31, Voula 16673, Greece (tax number 802954954). Contact: info@rivieravize.com, +30 698 599 6003. We have not appointed a data protection officer. We have no branch or staff in Türkiye. We collect your data directly from you.
2. What data we process
- Data you enter in the enquiry form: name, phone number, email address (optional), message, preferred language.
- Data you send us on WhatsApp or by email: your phone number, your WhatsApp profile name and the content of your messages.
- Technical data when you visit the site: IP address, browser and device information, pages viewed, date and time (server logs and aggregate visit statistics).
Please do not send us sensitive data (health, religion, criminal records and similar) or copies of identity documents through the form.
3. Why we use your data and on what legal basis
| Purpose | GDPR basis | KVKK basis |
|---|---|---|
| Answering your enquiry and taking the steps you ask for before any contract (property information, Golden Visa process, viewings) | Art. 6(1)(b) | Art. 5(2)(c) |
| Managing and recording enquiries in our customer system, keeping the business running safely | Art. 6(1)(f) legitimate interest | Art. 5(2)(f) |
| Keeping records required by law (tax, accounting) | Art. 6(1)(c) | Art. 5(2)(ç) |
| Establishing, exercising or defending legal claims | Art. 6(1)(f) | Art. 5(2)(e) |
| Marketing messages (phone, SMS, WhatsApp, email), only if you separately agree to them | Art. 6(1)(a) consent | Explicit consent and prior approval under Law No. 6563 |
| Transfer of your enquiry data to our service providers outside Türkiye | See section 5 | Explicit consent, Art. 9 |
| Aggregate visit statistics without cookies | Art. 6(1)(f) | Art. 5(2)(f) |
| Advertising and tracking pixels: not used at present; if added, only after you accept them in a cookie banner | Art. 6(1)(a) | Explicit consent |
Providing the form data is voluntary, but without your name and phone number we cannot reply to you. Collection is by automated means (website form, WhatsApp, server logs). We do not make decisions about you by automated means and we do not profile you.
4. Who receives your data
- Service providers acting on our instructions: our database provider (hosted in the EU, Frankfurt), our website hosting and statistics provider, and our email service provider. Purpose: managing and answering your enquiry.
- WhatsApp (Meta): if you use the WhatsApp button, Meta handles your number and messages under its own terms.
- Our staff and professional advisers (lawyers, accountants) where necessary.
- Authorities where the law requires.
We do not sell your data.
5. Transfers outside Türkiye and outside the EEA
You send your data directly to us in Greece, an EU member state. This is direct collection by us. Afterwards your enquiry data is stored in the EU (Frankfurt) and may be handled by our hosting and email providers, some of which are based in the United States. For KVKK purposes, the onward transfer of your data to service providers outside Türkiye is based on the explicit consent you give by ticking the box next to the form. For GDPR purposes, our providers are bound by data processing agreements and, where required, EU standard contractual clauses.
6. How long we keep your data
- Enquiries that do not lead to a contract: 24 months after our last contact, then deleted or anonymised.
- If a contract follows: for the period the law requires for tax and accounting records and for the limitation period for legal claims.
- Marketing consent: until you withdraw it.
7. Your rights
Under GDPR and KVKK Art. 11 you may: learn whether we process your data and obtain information about it; ask for access and a copy; ask for correction; ask for erasure or destruction; ask for restriction; object to processing based on legitimate interest and to direct marketing; ask for data portability (GDPR); learn the recipients your data was transferred to and ask that corrections and deletions be notified to them; object to results based exclusively on automated processing; claim compensation for damage from unlawful processing; and withdraw consent at any time, without affecting earlier processing.
To exercise your rights, write to info@rivieravize.com and state your name and the phone number or email you used. We reply within one month under GDPR and within 30 days under KVKK, free of charge unless a cost applies.
8. Complaints
- Greece: Hellenic Data Protection Authority, www.dpa.gr.
- Türkiye: after applying to us first, you may complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu), www.kvkk.gov.tr.
9. Cookies and statistics
We do not set advertising or tracking cookies. Visit statistics are aggregate and collected without cookies. If advertising or tracking tools are added later, they will load only after you accept them in a cookie banner, and you will be able to change your choice at any time.
10. Marketing messages
We send marketing messages only if you have separately agreed to receive them, and you can opt out at any time through the message itself or at info@rivieravize.com. Replying to your enquiry is not marketing.
11. Changes
We will update this notice if our processing changes and show the date at the top of this page.