Personal Data

How we collect and use information

Booking choices and website preferences are collected electronically. Information shared by phone is received verbally; email and WhatsApp messages are received electronically. Booking inquiries are processed to prepare or perform a contract. General inquiries and site security rely on legitimate interests, while analytics requires your consent. Identity and accommodation details required for identity reporting are shared with the competent law enforcement authorities to meet our obligations under Türkiye’s Identity Reporting Law No. 1774. Contacting us does not give permission for marketing.

Accommodation records

For group stays, guest lists are received from travel agencies. For both group and individual stays, guests’ identity or passport details are entered into the hotel’s records system at check-in. This information is processed to arrange the stay and handle check-in, on the legal basis that processing is directly related to entering into or performing the accommodation contract (Article 5/2-c of the KVKK).

Guest lists received from travel agencies are used for room and accommodation planning. Reporting through the Identity Notification System (KBS) takes place after the guest has checked in and their identity has been verified.

Guest profile

Returning guests may be recognized through their guest profile in the hotel records system provider’s system. The guest profile is retained for 10 years from the date it was first created; a new stay does not restart this period. Identity or passport details are requested again for each stay. The guest profile retention period does not change the separate retention periods that apply to identity reporting and financial records.

The guest profile retained for 10 years contains only first name, last name, room number, and booking channel. Identity or passport numbers and contact details are not part of this profile.

Hotel services and retention periods

Identity and stay records kept for identity reporting are retained for 5 years. The required information is sent to the competent law enforcement authorities to meet the reporting obligation under Identity Reporting Law No. 1774. This processing is based on express provision in law and compliance with a legal obligation (Article 5/2-a and ç of the KVKK).

Invoices, accounting documents, and commercial contract records are retained for 10 years when subject to the retention obligation under Article 82 of the Turkish Commercial Code. Financial records are processed to meet obligations under the applicable tax and commercial legislation.

Photocopies, photographs, and scanned images of identity documents or passports are not retained. The details needed for check-in are taken from the document without making its image part of the records. Previously collected identity document images are destroyed without delay.

Guest Wi-Fi access logs are retained for 2 years to meet obligations under Law No. 5651 and the Regulation on Internet Collective Use Providers. This processing is carried out to comply with legal obligations.

Security camera footage is retained for 30–90 days to protect the premises and people. The legal basis is a legitimate interest in security, provided that guests’ fundamental rights and freedoms are not harmed (Article 5/2-f of the KVKK).

Data processed with explicit consent for the hotel’s marketing activities is used for that purpose until consent is withdrawn. Marketing use ends when consent is withdrawn. This does not change the retention periods for financial or identity-reporting records subject to a separate legal obligation.

When the reasons for processing personal data no longer apply, the data is erased, destroyed, or anonymized, taking applicable retention obligations into account.

Email and service providers

The hotel uses Pusula (Uzman Posta) for its email service. When you email us, the sender and recipient addresses, message content, any attachments and technical delivery information are processed by this service provider to receive and deliver the message.

Cloudflare processes technical connection data to deliver and protect the website through its global network. Reseliva handles booking and payment. These providers may process data outside Türkiye; international transfers remain subject to the applicable legal requirements.

Google Analytics 4

Visitor analytics automatically collects data electronically to understand how the website is used. Analytics data is processed on the basis of your explicit consent under Article 5(1) of the Turkish Personal Data Protection Law; Google receives the data for this purpose. You can withdraw analytics permission through “Cookie preferences”. Analytics permission does not replace the international transfer requirements under Article 9 of the Law.

Google’s current retention settings are 2 months for event data and 14 months for user data; new activity resets the user data retention period. These limits do not apply to most standard reports based on aggregated data.

Contact records

Inquiries that do not lead to a booking are used to respond to your request; no separate customer archive is created. Email and message retention depends on the status of the request, legal obligations and the need to protect legal rights. The 180-day preference period does not apply to these records.

Your data protection rights

Under Article 11 of Türkiye’s Personal Data Protection Law No. 6698, you may learn whether your personal data is processed and request information about any processing. You may learn its purpose, whether your data is used in line with that purpose, and which third parties receive it in Türkiye or abroad. You may request correction of incomplete or inaccurate data, deletion or destruction when the legal conditions are met, and notification of these actions to the third parties that received the data. You may object to an adverse outcome resulting solely from automated analysis of your data and seek compensation for damage caused by unlawful processing.

Making a request

Send a signed written request to our business address above. To apply by email, write to [email protected] from an email address you previously provided to us and that is registered in our system. Include your first and last name, the subject of your request, and your residential or business address for correspondence. Turkish citizens must include their Turkish identity number; foreign nationals must include their nationality and passport number or, if available, identification number. Also include any email address, telephone and fax number for notifications, together with information and documents relevant to your request. We may verify your identity securely. Requests are resolved as soon as their nature allows and within 30 days, free of charge; if processing incurs an additional cost, the Board’s tariff may apply. You can use the same email address for questions about the request process.