KVKK Guest Information Text

Dear Guest,

In accordance with the Law on the Protection of Personal Data No. 6698 ("KVKK"), Urla Key Hotel ("Hotel"), as the data controller, processes certain personal data within the scope of accommodation and ancillary services provided to you. This text explains the purposes for which such data is processed, with whom it is shared, the legal basis, and your rights.

Basic Principles of Personal Data Processing

Compliance with Law and Rules of Honesty: Personal data is processed in accordance with the Constitution, KVKK, and related legal regulations, within the framework of the rule of honesty.
Accuracy and Up-to-Dateness: Personal data is kept complete and accurate; outdated data is updated through periodic checks and notifications from data subjects.
Specific, Explicit, and Legitimate Purposes: Data is processed only for legitimate and clearly defined purposes; processing for other purposes is strictly prohibited.
Relevance, Limitation, and Proportionality: Collected data is limited to what is necessary for the stated purposes. Unnecessary data is not processed.
Retention Period: Personal data is stored for periods required by legislation or processing purposes. When this period expires, data is deleted, destroyed, or anonymized according to internal procedures.
Data Security: Technical and administrative measures are implemented to protect personal data from unauthorized access, disclosure, loss, or destruction, including access controls, encryption, firewalls, KVKK compliance training, confidentiality agreements, and audit mechanisms.

Processed Personal Data

We process the following personal data when providing our services:

Identity Information: Name, surname, ID number, date of birth, passport details (for foreign guests)
Contact Information: Phone number, email address, address
Financial Information: Credit card, bank details, billing information
Accommodation Details: Reservation details, check-in/out dates, accommodation preferences, special requests
Visual and Audio Records: Images from security cameras in common areas. Access is limited to authorized personnel only. Cameras do not cover private areas (restrooms, changing rooms, etc.).
Health Information (optional): Food allergies, special needs, health declarations for spa/massage services
Internet Logs: Internet access logs are kept as per Law No. 5651, only accessed by authorized personnel, and shared with authorities upon request.
Special Categories of Personal Data: Data classified as "special categories" by Article 6 of KVKK, such as health data, are processed with utmost care and additional security measures.

What Are Special Categories of Personal Data?

According to KVKK, the following are special category personal data:

Race and ethnic origin
Political opinion
Philosophical belief, religion, sect, or other beliefs
Appearance and dress
Membership of associations, foundations, or unions
Health data
Sexual life data
Criminal convictions and security measures
Biometric data (fingerprint, retina, facial recognition, etc.)
Genetic data

Our company regularly audits and updates its practices for protecting special category personal data. A dedicated KVKK Officer is assigned for this area.

Purposes of Data Processing

To provide accommodation services and complete reservations
To fulfill legal obligations (e.g., Identity Notification Law)
To process payments and issue invoices
To carry out communication activities (notifications, surveys, feedback)
To ensure security (camera recordings)
To meet your special requests and offer better service
To analyze and improve customer satisfaction and experience, follow up on requests/complaints
To fulfill legal and commercial responsibilities and ensure the security of the company and business partners

Sharing of Personal Data

Your data may be shared with the following, only as required by law:

Law enforcement agencies, courts, and authorized public institutions
Payment service providers (banks, virtual POS providers)
Financial advisors, legal consultants
Business partners (e.g., travel agencies, digital system providers), as necessary

Data Collection Methods and Legal Grounds

Reservations via website, platforms, email, or phone
Forms filled out during check-in
Camera systems
Declarations submitted during guest relations

Legal grounds for data processing include:

Legal obligations (e.g., Law No. 1774)
Contract establishment and performance (accommodation agreement)
Explicit consent where required
Legitimate interests of the Hotel

Your Rights Under KVKK

Under Article 11 of KVKK, you have the right to:

Learn whether your personal data is processed
Request information if processed
Learn the purpose of processing and whether it is used accordingly
Know third parties to whom your data is transferred domestically or abroad
Request correction if your data is incomplete or inaccurate
Request deletion or destruction in accordance with KVKK
Request notification of the above actions to third parties
Object to any adverse outcome resulting from automated processing
Request compensation if you suffer damages due to unlawful processing

How to Apply

You can submit requests regarding your rights by filling out the "Data Subject Application Form" and sending it to us in writing or via registered electronic mail (KEP). Your applications will be processed free of charge within 30 days at the latest.