ZOİ URLA

KVKK Clarification Text

CLARIFICATION TEXT ON THE PROTECTION OF PERSONAL DATA (KVKK)

As ZOİ URLA, we attach the utmost importance to the security and privacy of the personal data of our guests, visitors, and business partners in accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”) and applicable data protection regulations. Acting as the Data Controller, we hereby inform you about the purposes for which your personal data is processed, to whom and for what purposes it may be transferred, the method and legal basis of collection, and your rights under Article 11 of the KVKK.

1. Identity of the Data Controller

2. Processed Personal Data

Within the scope of our website, reservation and contact forms, and accommodation/restaurant services, the following categories of personal data may be processed:

  • Identity Information: Name, surname (and ID/passport details, date of birth as required by law upon check-in).
  • Contact Information: Phone number, e-mail address, residential/billing address.
  • Customer Transaction & Reservation Information: Check-in and check-out dates, room preferences, number of guests, corporate meeting dates and requests, reservation notes, and contact form messages.
  • Transaction Security Information: IP address, website access logs, cookie preference records, and anti-spam verification (reCAPTCHA) data.
  • Physical Space Security Information: CCTV security camera footage recorded in common areas during your visit to our premises.

3. Purposes of Processing Personal Data

Your personal data is processed in accordance with Articles 5 and 6 of the KVKK for the following purposes:

  • Receiving, evaluating, and managing accommodation, restaurant, private dinner, and corporate meeting room reservation requests,
  • Responding to inquiries, requests, suggestions, and complaints submitted via our contact form, e-mail, phone, or WhatsApp,
  • Establishing and performing accommodation and service agreements,
  • Fulfilling legal obligations under applicable Turkish legislation, including Identity Notification Law No. 1774, Tax Procedure Law, and Law No. 5651,
  • Ensuring information security, website security, and preventing abuse or fraudulent transactions,
  • Ensuring the physical security of our premises and guests.

4. Transfer of Personal Data

Your personal data may be transferred in accordance with Articles 8 and 9 of the KVKK to authorized public institutions and law enforcement agencies as required by law, financial and legal advisors for statutory compliance, and IT/hosting service providers for the technical operation of our website and communication systems, with all necessary technical and administrative security measures in place.

5. Method and Legal Basis of Collection

Your personal data is collected verbally, in writing, or electronically via the Contact Form, Reservation Form, and Corporate Meeting Reservation Form on our website, cookies, phone, e-mail, and in-person check-in procedures, based on the legal grounds set forth in Article 5/2 of the KVKK (explicitly stipulated by law, establishment/performance of a contract, compliance with legal obligations, and legitimate interest of the data controller) and, where required, your explicit consent under Article 5/1.

6. Your Rights Under Article 11 of the KVKK

Under Article 11 of the KVKK, you have the right to learn whether your personal data is processed, request information regarding processing, learn the purpose of processing and whether it is used accordingly, know the third parties to whom data is transferred, request correction of incomplete or inaccurate data, request deletion or destruction of data under Article 7, object to automated analysis resulting in an adverse outcome, and claim compensation for damages arising from unlawful processing.

7. How to Apply

You may submit your requests regarding your rights in writing to Yelaltı Mah. Bellek Sok. No:6 Urla / İzmir, Turkey or via e-mail to [email protected]. Your application will be concluded free of charge as soon as possible and within 30 (thirty) days at the latest.