PRIVACY POLICY

1. DATA CONTROLLER

Your personal data is processed by:

For the purposes of this Privacy Policy, Firuze Songül Gürleyen is the data controller within the meaning of the Turkish Personal Data Protection Law No. 6698 (“KVKK”).

2. PERSONAL DATA WE COLLECT

When you contact us, request information, or make a reservation, we may collect the following personal data:

• Full name
• Phone number
• Email address
• Stay dates
• Number of guests
• Reservation details
• Message, request, or communication content
• Passport, ID, or identity information required for legal guest registration in Türkiye

We do not collect or store credit card details through our website.

3. HOW WE COLLECT YOUR DATA

Your personal data may be collected through the following channels:

• Website contact or reservation forms
• WhatsApp communication
• Phone calls
• Email correspondence
• Direct reservation requests
• Booking platforms such as Booking.com and Airbnb, where applicable

4. PURPOSES OF PROCESSING PERSONAL DATA

Your personal data may be processed for the following purposes:

• Receiving, confirming, and managing reservation requests
• Communicating with guests before, during, and after their stay
• Planning check-in, check-out, and accommodation services
• Responding to guest questions and requests
• Fulfilling legal guest registration obligations in Türkiye
• Keeping reservation and accounting records
• Protecting our legal rights and resolving possible disputes
• Improving the quality of our accommodation services

We do not use your personal data for unsolicited marketing messages.

5. LEGAL BASIS FOR PROCESSING

Your personal data is processed where necessary for:

• Taking steps before entering into a reservation agreement
• Performing accommodation and reservation services
• Fulfilling legal obligations, including guest registration and accounting obligations
• Establishing, exercising, or protecting legal rights
• Our legitimate interests, provided that your fundamental rights and freedoms are not harmed
• Your explicit consent, where consent is legally required

6. PAYMENTS

We do not currently process online payments through our website.

Payments are arranged directly, such as by cash or bank transfer. If you make a reservation through third-party platforms such as Booking.com or Airbnb, payment processing may be handled by those platforms according to their own privacy policies and terms.

We do not store your credit card information.

7. SHARING OF PERSONAL DATA

Your personal data is not sold, rented, or shared with third parties for commercial purposes.

Your personal data may be shared only where necessary with:

• Authorized public institutions and authorities, where required by law
• Booking platforms such as Booking.com or Airbnb, if your reservation is made through those platforms
• Service providers used for communication, website operation, reservation management, technical support, or accounting, where necessary
• Legal or financial advisors, where required for the protection of our rights

8. THIRD-PARTY SERVICES

Our website may include or use third-party services such as:

• Google Maps, to show the location of the property
• WhatsApp buttons or links, to allow direct communication

When you use or interact with these third-party services, the relevant third-party providers may process certain data according to their own privacy policies and terms.

If you contact us through WhatsApp, your communication may also be subject to WhatsApp’s own privacy policy and terms.

If you make a reservation through Booking.com or Airbnb, your data may also be processed by those platforms according to their own privacy policies and terms.

9. COOKIES AND ANALYTICS

Our website may use cookies and similar technologies to ensure the proper functioning of the website, improve user experience, and understand how visitors use our website.

Cookies are small text files stored on your device by your browser. Similar technologies may also be used for website functionality, analytics, or security.

We may use the following types of cookies or similar technologies:

10. MANAGING COOKIES

You can manage, block, or delete cookies through your browser settings.

Please note that disabling strictly necessary cookies may affect the proper functioning of the website. Disabling analytics cookies will not prevent you from using the main features of the website.

If we use optional analytics cookies that require consent, you may be asked to accept or reject them through a cookie banner or cookie preference tool.

11. INTERNATIONAL TRANSFERS

Some third-party services we use, such as Google, WhatsApp, Booking.com, or Airbnb, may process data through systems or servers located outside Türkiye.

Where applicable, such transfers are carried out in accordance with relevant legal requirements and the privacy policies of those third-party service providers.

12. DATA RETENTION

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.

Reservation, guest registration, and related communication records may be retained for up to 5 years, in line with legal, accounting, and administrative obligations.

After the applicable retention period ends, personal data is deleted, destroyed, or anonymized securely, unless a longer retention period is required by law.

13. DATA SECURITY

We take reasonable technical and administrative measures to protect your personal data against unauthorized access, loss, misuse, disclosure, alteration, or destruction.

Access to personal data is limited to persons who need it for reservation, guest communication, legal, accounting, or operational purposes.

14. YOUR RIGHTS UNDER KVKK

Under Article 11 of the KVKK, you may contact us to exercise your rights regarding your personal data, including the right to:

• Learn whether your personal data is being processed
• Request information if your personal data has been processed
• Learn the purpose of processing and whether your data is used in accordance with that purpose
• Know the third parties to whom your personal data has been transferred, if any
• Request correction of incomplete or inaccurate personal data
• Request deletion or destruction of your personal data, where legally applicable
• Object to certain processing activities, where legally applicable
• Request compensation if you suffer damage due to unlawful processing of your personal data

15. CONTACT

For any privacy-related questions or requests, you can contact us at:

16. UPDATES TO THIS PRIVACY POLICY

This Privacy Policy may be updated when necessary due to legal, technical, or operational changes.

The latest version will be published on our website.

Firuze Songül Gürleyen

Operating as Castello Marmaris Holiday Home