(In accordance with the Personal Data Protection Law No. 6698 – “KVKK”)

1. Identity and Contact Information of the Data Controller

• Data Controller: Relax Beach Hotel
• Phone: 0 (242) 514 48 38 – 0 (242) 514 38 38
• WhatsApp: 0 (538) 021 65 75
• Email (for KVKK applications): info@relaxbeachhotel.com

This clarification text has been prepared by Relax Beach Hotel to inform data subjects in accordance with Article 10 of the KVKK No. 6698.

2. Which of Your Personal Data is Processed? (Categories)

The categories of data processed as an example within the scope of hotel services are as follows:

• Identity information: name, surname, T.C./passport no (if necessary), date of birth, gender.
• Contact information: phone, e-mail, residential address.
• Reservation/accommodation information: accommodation date, room type, special requests, check-in/check-out information.
• Payment and invoice information: invoice information, payment records (credit card information is generally processed through payment providers).
• Health-related data (special diet, disability status, emergency contact information) — may be considered within the scope of special categories of personal data, so a special legal basis or explicit consent may be required.
• Security data: CCTV footage, entry/exit records.
• Technical data: IP address, cookie data, website usage data.
• Marketing preferences and communication consents.

3. Purposes of Processing Personal Data

Your personal data may be processed for the following purposes:

• Receiving reservations, providing accommodation services, and managing guest satisfaction, billing, and accounting.
• Carrying out payment transactions and financial compliance.
• Fulfilling guest requests (transfer, VIP service, special event organization, etc.).
• CCTV recording for security purposes and/or ensuring facility security.
• Fulfilling legal obligations (tax, administrative requests, judicial processes).
• Marketing, campaign, and informational messages (based on explicit consent).
• Management of website services, statistics, and analysis (cookies/analytics).
• Evaluation of complaints and requests.(These purposes can be expanded according to practice; each purpose is also specified separately in the relevant forms or during reservation processes.)

4. Legal Grounds for the Processing of Personal Data

The processing of your data may be based on the following legal grounds:

• The establishment and performance of a contract (fulfillment of the reservation contract).
• Fulfillment of legal obligations stipulated in the KVKK (tax, accounting, official notifications, etc.).
• Explicit consent of the data subject (especially for marketing communication, processing of special categories of personal data, non-cookie tracking, etc.). Explicit consent is “consent based on information and declared with free will”; KVKK guides on how to obtain consent are followed.
• Legitimate interests of the data controller (such as ensuring facility security, preventing fraud, and ensuring service quality) — this is evaluated in our practice in a way that does not harm the fundamental rights and freedoms of the data subject.

5. Methods of Collecting Personal Data

Your data may be collected through a reservation form, website, telephone, e-mail, check-in forms, payment providers, mobile/online reservation platforms (OTAs), face-to-face communication, CCTV cameras, and information provided by third parties (travel agencies, payment institutions, etc.).

6. Transfer of Personal Data / Domestic and International Sharing

If it is necessary for service provision, your collected data may be transferred to payment infrastructure providers, group companies, outsourced service providers (IT, call center, cleaning, maintenance, transfer companies), reservation channels (OTAs), legal authorities, and audit/compliance organizations.

The transfer of personal data abroad is carried out within the framework of the KVKK and relevant guides; in the event of a transfer, data subjects are also informed separately about the legal basis of the transfer and the safeguards provided.

7. Personal Data Retention Periods

Your personal data is stored for the period required by the processing purposes and/or the periods stipulated in the relevant legislation (e.g., legal obligations such as commercial ledger/invoice retention periods); when the purpose ends, it is deleted, destroyed, or anonymized in accordance with the KVKK. (Retention periods may differ within the framework of commercial/financial legislation.)

8. Rights of the Data Subject

In accordance with Article 11 of the KVKK, data subjects have the following rights:

a) To learn whether their personal data is processed;

b) To request information if their personal data has been processed;

c) To learn the purpose of the processing and whether it is used in accordance with its purpose;

ç) To know the third parties to whom their data is transferred, domestically or abroad;

d) To request correction if their data has been processed incompletely/inaccurately;

e) To request the deletion or destruction of their data (if processing is ceased) under the conditions stipulated in the KVKK;

f) To request that the data be stored in an up-to-date and accurate manner in accordance with the purpose of processing;

g) To object to the processing;

ğ) Other rights stipulated in the Law (such as requesting data portability).

9. Procedure and Period for Making Applications for Rights

Data subjects are required to submit their requests to the data controller first, in accordance with Article 13 of the KVKK. Your applications can be made in writing (with a signed petition) or through secure electronic methods (e-mail, etc.; through application channels announced by our institution). The data controller will finalize the application within the shortest possible time and no later than 30 days, depending on the nature of the request, and will notify the result in writing or electronically. For details regarding the application process, our application channels, and the necessary identity verification documents, please apply to our contact address.

10. Security Measures

Relax Beach Hotel implements administrative and technical measures to ensure the security of personal data; measures such as access controls, authorization, encryption/protection, secure backup, network security, firewalls, physical security, personnel training, and contractual arrangements (confidentiality agreements) are applied.

11. Cookies and Tracking Technologies

Our website may use cookies. Some cookies are mandatory technical cookies; some are for analytical/performance or marketing purposes and may require explicit consent. Our cookie policy and the possibility to manage your cookie preferences are presented in detail on our website.

12. Contact / Application Addresses (Example for KVKK Applications)

• E-mail (for KVKK applications): info@relaxbeachhotel.com
• Phone (for informational purposes): 0 (242) 514 48 38

13. Other Matters

This text has been prepared in line with the law and the guides published by the Personal Data Protection Authority; it will be updated as applicable regulations change.

When the processing of special categories of personal data is required, an additional legal basis (explicit consent, etc.) is obtained.