Personal Data Notice (KVKK)

At L'Saranda House Çeşme we take care of the personal data of our guests, visitors and everyone who contacts us. This notice is provided in our capacity as data controller under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK").

1. Data Controller

2. Personal Data We Process

• Identity data. Name, surname, Turkish ID or passport number, nationality, date of birth, gender, ID document details.
• Contact data. Phone number, e-mail address, postal address.
• Stay and booking data. Arrival and departure dates, room type, number of guests, companion details, special requests, booking channel.
• Financial data. Payment and invoice details, payment method. Card details are not stored by us and are processed by payment providers.
• Customer transaction data. Requests and complaints, reviews, spending records.
• Website usage data. IP address, browser and device details, cookie data, pages visited.
• Marketing data. Your communication preferences, only with your explicit consent.

3. Why We Process Your Data

• Receiving and confirming your booking and providing accommodation services
• Reporting guests to law enforcement as required by the Identity Notification Law No. 1774
• Issuing invoices, handling payments and meeting tax obligations
• Responding to your requests, questions and complaints
• Measuring guest satisfaction and improving our services
• Keeping our website secure and analysing its use
• Protecting our rights in legal disputes
• Sending offers and news, only with your explicit consent

4. Legal Grounds and Collection Methods

We collect personal data through our website, our online booking system, travel agencies and online booking platforms, phone, WhatsApp, e-mail and at reception, verbally, in writing or electronically.

Data is processed on the legal grounds set out in Article 5 of the KVKK. These are explicit provision by law, the conclusion or performance of a contract, compliance with our legal obligations, the establishment, exercise or protection of a right, and our legitimate interests provided your fundamental rights are not harmed. Marketing messages and non-essential cookies rely solely on your explicit consent.

5. Who We Share Your Data With

• The General Directorate of Security and the Gendarmerie under the Identity Notification System
• The Ministry of Culture and Tourism, tax offices and, upon request, other authorised public bodies and courts
• Our booking system provider, travel agencies and online booking platforms
• Banks and payment institutions
• Our accounting, financial and legal advisers
• IT, hosting and analytics service providers

Some providers used on our website, such as Google and Meta, may host data outside Türkiye. Such transfers are made in line with the safeguards in Article 9 of the KVKK and, where required, with your explicit consent.

6. Retention

We keep personal data for the periods required by law or, where no period is set, for as long as the purpose of processing requires. Stay and invoice records are kept for ten years under tax and commercial law. After that, data is deleted, destroyed or anonymised.

7. Your Rights

Under Article 11 of the KVKK you may apply to us to

• learn whether your personal data is processed and request information about it
• learn the purpose of processing and whether data is used accordingly
• know the third parties in Türkiye or abroad to whom data is transferred
• request correction of incomplete or inaccurate data
• request deletion or destruction under the conditions of Article 7
• request that corrections and deletions be notified to third parties
• object to an adverse result arising solely from automated analysis
• claim compensation for damage caused by unlawful processing

8. How to Apply

You may send your request in writing to our address above with information identifying you, to our registered e-mail (KEP) address, or from the e-mail address registered with us to kvkk@lsarandahousecesme.com. Requests are answered free of charge within thirty days at the latest. If the action involves an additional cost, the fee set by the Personal Data Protection Board may apply.