TREN
WhatsApp SupportBooking
PERSONAL DATA

KVKK Notice

An English information page about personal data processing under Turkish privacy law.

This English page is provided for guest convenience. The official Turkish text remains the controlling document for legal interpretation. Open the official Turkish text.

1. Data Controller

Under the Turkish Personal Data Protection Law No. 6698, personal data may be processed by Kozbeyli Konağı Boutique Hotel and Restaurant as data controller within the scope described in the official Turkish notice.

2. Processing Purposes

Personal data may be processed for the following purposes:

  • Providing accommodation and reservation services.
  • Meeting legal identity-notification obligations.
  • Measuring guest satisfaction and improving service quality.
  • Maintaining property security through security cameras.
  • Managing finance, accounting and operational records.

3. Processed Data Categories

Processed data may include identity, contact, reservation, invoicing, vehicle plate and on-property camera records. The website does not collect payment card numbers or CVV values.

4. Collection Methods and Legal Grounds

Personal data is collected through website forms and cookies, telephone, e-mail and WhatsApp correspondence, reception and check-in records, security cameras and reservation/channel-management systems, by fully or partly automated means or by non-automated means forming part of a data-recording system.

It is processed on the legal grounds in KVKK Article 5: processing directly related to the conclusion or performance of a contract (Art. 5/2-c), compliance with the controller's legal obligation (Art. 5/2-ç), establishment, exercise or protection of a right (Art. 5/2-e), the controller's legitimate interests where your fundamental rights are not harmed (Art. 5/2-f) and cases expressly provided by law (Art. 5/2-a); where none apply, processing relies on your explicit consent (Art. 5/1). Special categories of data (e.g. health or accessibility needs) are processed only with your explicit consent or under the exceptions in KVKK Article 6. Marketing electronic messages are not a condition of service and rely on separate consent.

5. Transfers

Personal data may be transferred to authorized public institutions where legally required and to service providers such as payment, booking or channel-management partners where needed for service delivery.

International transfers: optional measurement and marketing tools load only after you give explicit consent for the relevant category. Google Analytics and PostHog require analytics consent; Google Ads, Meta Pixel and the capture, storage or booking-link transfer of advertising click identifiers require marketing consent. Contact and quote forms do not send a server-side Meta CAPI Lead event; form email, phone, IP address, browser user-agent and _fbp/_fbc identifiers are not transferred to Meta through this channel. If marketing consent is granted, the browser Meta Pixel may create a Lead event behind its consent gate. Separately, if configured, a Meta CAPI Purchase measurement without personal form fields may be sent for a verified HMS reservation. Online identifiers and on-site interaction data related to optional browser tools may be processed on providers' servers abroad; the configured PostHog endpoint is in the European Union. Without the relevant consent, optional browser tools do not load and advertising click identifiers are not processed. When consent is withdrawn, new optional browser events stop and the related first-party storage technically reachable from this domain is deleted. Necessary security and preference functions may continue before consent. See the Cookie Policy for the inventory and retention periods.

6. Retention Periods

Personal data is retained for the maximum periods required by applicable law (identity-notification, tax and commercial-record obligations) or, where no statutory period applies, only for as long as the processing purpose requires, after which it is deleted, destroyed or anonymized. Proposal and contact form records are kept for a reasonable evaluation period after the request is concluded; security camera footage is kept for a limited, rotating period.

7. Your Rights

Under KVKK Article 11 you have the right to:

  • learn whether your personal data is processed;
  • request information if it has been processed;
  • learn the purpose of processing and whether data is used accordingly;
  • know the third parties to whom data is transferred at home or abroad;
  • request correction of incomplete or inaccurate data;
  • request deletion or destruction under KVKK Article 7;
  • request that such correction, deletion or destruction be notified to third parties;
  • object to an adverse outcome resulting solely from automated analysis;
  • claim compensation for damage arising from unlawful processing.

8. Applications

You may submit requests under the Communiqué on Application Procedures to the Data Controller — in writing with a wet signature, via registered electronic mail (KEP), secure electronic signature, or from an e-mail address registered in our system — to info@kozbeylikonagi.com. Your application should include your name, a signature for written applications, your Turkish ID (or passport) number, a notification address, any e-mail or telephone, and the subject of your request. We may request further information to verify your identity. Applications are concluded free of charge within 30 days at the latest; where the process entails an additional cost, the fee in the Board's tariff may apply.