KVKK Privacy Notice

1. Data Controller

Your personal data is processed by the business whose information is provided below, acting as the data controller:

2. Processed Personal Data

Depending on the nature of the services provided, the following personal data may be processed:

Identity Information: Name, surname, Turkish Republic identity number, passport number, nationality, date of birth, identity or passport document information.

Contact Information: Telephone number, e-mail address, address information, and your communication preferences.

Reservation and Accommodation Information: Check-in and check-out dates, room type, number of persons, accommodation preferences, special requests, reservation history, check-in and check-out records.

Financial Information: Payment information, collection records, invoice information, refund information, and payment method information.

Transaction Security Information: IP address, website usage records, device and browser information, system log records, and cookie records.

Visual and Auditory Records: Image recordings belonging to security cameras located in common areas for the purpose of ensuring facility security.

Request and Complaint Information: Request, suggestion, satisfaction, and complaint contents that you convey to us by telephone, e-mail, contact form, reservation channels, or during face-to-face communication.

Special Categories of Personal Data: Information such as disabled access, health sensitivity, allergy information, or special accommodation needs may be processed only to the extent required by the service and in accordance with the legislation.

3. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

• Receiving, creating, confirming, and managing reservation requests.

• Providing accommodation services and carrying out check-in and check-out procedures.

• Fulfilling identity notification, invoice issuance, accounting, and legal record obligations.

• Ensuring guest satisfaction and evaluating requests and complaints.

• Carrying out payment, collection, refund, and financial processes.

• Ensuring facility security and the life and property safety of guests and employees.

• Operating the website, reservation system, payment infrastructure, and digital services securely.

• Improving service quality and planning and reporting operational processes.

• Meeting information and document requests from authorized public institutions and organizations.

• Sending campaigns, announcements, satisfaction surveys, and commercial electronic communications if you have explicit consent.

4. Methods of Collecting Personal Data

Your personal data may be collected through our website, reservation forms, telephone, e-mail, call center, reception procedures, physical forms, online reservation platforms, travel agencies, payment systems, security cameras, cookies, and digital communication channels by automatic or non-automatic methods.

5. Legal Grounds for Processing Personal Data

Your personal data is processed based on the following legal grounds specified in Law No. 6698:

• It is expressly provided for by laws.

• It is directly related to the establishment or performance of a contract.

• It is mandatory for the data controller to fulfill its legal obligation.

• Data processing is mandatory for the establishment, exercise, or protection of a right.

• Data processing is mandatory for the legitimate interest of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

• Your explicit consent is available where necessary.

Your special categories of personal data are processed only in accordance with the conditions stipulated in the legislation and by taking the necessary security measures.

6. Transfer of Personal Data

Your personal data may be shared with the following persons and institutions, limited to the purposes stated above:

• Authorized public institutions and organizations.

• Persons or organizations from which accounting, finance, legal, audit, and consultancy services are received.

• Banks, payment institutions, virtual POS, and payment infrastructure service providers.

• Reservation infrastructure, software, hosting, e-mail, technical support, and information technology service providers.

• Online reservation platforms, travel agencies, and business partners.

• Relevant service providers, only to the extent necessary, within the scope of brand, franchise, central reservation, or loyalty program processes.

In cases where data transfer abroad is required, your personal data may be transferred only if the conditions stipulated under the KVKK are met and the necessary administrative/technical measures are taken.

7. Retention Period of Personal Data

Your personal data is retained for the period required for the purpose for which it is processed and for the legal retention periods stipulated in the relevant legislation.

If the retention period expires or the purpose of processing ceases to exist, your personal data is deleted, destroyed, or anonymized.

8. Data Security

Necessary technical and administrative measures are taken to prevent your personal data from being unlawfully processed, accessed, disclosed, altered, or lost.

Within this scope, authorization restrictions, access controls, security software, recording systems, personnel awareness, and data security processes are implemented.

9. Your Rights as the Data Subject

By applying to the data controller within the scope of the KVKK, you have the right to:

• Learn whether your personal data is processed,

• Request information if it has been processed,

• Learn the purpose of processing and whether it is used in accordance with its purpose,

• Know the third parties to whom it is transferred domestically or abroad,

• Request correction if it has been processed incompletely or incorrectly,

• Request deletion or destruction within the scope of the conditions stipulated in the legislation,

• Request notification of correction, deletion, or destruction operations to third parties to whom it has been transferred,

• Object to the emergence of a result against you as a result of analysis through automated systems,

• Request compensation for damages if you suffer damage due to unlawful processing.

10. Retention Period, Deletion, Destruction, and Anonymization of Personal Data

Your personal data is retained for the periods stipulated in the legislation.

Pursuant to Article 7/1 of Law No. 6698 on the Protection of Personal Data, if the reasons requiring the processing of your personal data cease to exist, personal data shall be deleted, destroyed, or anonymized by the Data Controller ex officio or upon the request of the data subject.

Personal data owners always have the right to withdraw their explicit consent previously given regarding the processing and use of their personal data. To withdraw such consent, you may send an e-mail containing your request in this regard to info@ramadaresidencesharamidere.com.

11. Application Method

You may submit your requests under the KVKK in writing to our facility address or contact us via the e-mail address below by methods that can verify your identity.

Your applications will be evaluated and finalized within the periods stipulated in the legislation.