This notice has been prepared under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") to inform visitors of the Taksim Santa Ottoman Hotel website about how their personal data is processed.
1. Data controller
| Company name | [VERİ SORUMLUSU TİCARİ UNVANI] |
|---|---|
| Address | [VERİ SORUMLUSU ADRESİ] |
| MERSIS no. | [MERSİS NO] |
| Tax office / no. | [VERGİ DAİRESİ VE VERGİ NO] |
| [KVKK BAŞVURU E-POSTA ADRESİ] | |
| Registered e-mail (KEP) | [KEP ADRESİ] |
2. What personal data do we process?
Through our website we only process the information you enter in the forms below and the technical information generated automatically when a form is submitted.
Contact form
- Full name, e-mail address, phone number (optional)
- Subject and content of your message
Booking form
- Full name, e-mail address, phone number
- Country, city and address (optional)
- Check-in and check-out dates, room type and number of rooms, number of adults and children, children's ages
- Special request note (optional)
Newsletter form
- E-mail address, name (optional)
Automatically, for every form
- IP address, browser information (user agent), website language, date and time of submission
- The date you ticked the consent box and the version of the text you accepted
For information about the cookies used on this website, please see our Cookie Policy.
3. Purposes and legal grounds
| Purpose | Legal ground (KVKK Art. 5) |
|---|---|
| Receiving and recording your booking request, sending you confirmations and information, providing your stay | Directly related to the conclusion or performance of a contract (Art. 5/2-c) |
| Answering the request you sent through the contact form | [HUKUKİ SEBEP — açık rıza (m. 5/1) veya meşru menfaat (m. 5/2-f)] |
| Sending offers and announcements by e-mail newsletter | Explicit consent (Art. 5/1) |
| Form security: blocking automated and abusive submissions (IP address and browser information) | Legitimate interest (Art. 5/2-f) |
| Proof of your consent and of the text you accepted | Establishment, exercise or protection of a right (Art. 5/2-e) |
| Fulfilling legal obligations and responding to requests from competent authorities | Expressly provided by law and legal obligation (Art. 5/2-a, ç) |
4. Method of collection
Your personal data is collected electronically and by automated means when you fill in the forms on our website.
5. Transfer of personal data
Limited to the purposes above, your personal data may be transferred to the following recipients:
- The server service hosting this website: [BARINDIRMA SAĞLAYICISI VE ÜLKESİ]
- The e-mail service used to send notifications and confirmations: [E-POSTA HİZMET SAĞLAYICISI VE ÜLKESİ]
- Competent public authorities, upon request and to the extent required by law
- [VARSA DİĞER ALICI GRUPLARI — ör. muhasebe, hukuk danışmanı]
Online booking (HotelRunner)
Online bookings may be taken through the booking engine operated by HotelRunner Bilgi Teknolojileri Ticaret A.Ş. In that case, the check-in and check-out dates, number of rooms and guests, children's ages and the language and currency you choose in the search form on our website are passed to HotelRunner in the booking engine address. Your full name, contact details, booking details and payment details are entered directly on HotelRunner's page (hotelrunner.com or our hotel's booking domain); card details never reach our website and are processed by HotelRunner and payment institutions. HotelRunner's privacy policy also applies to the information you enter on that page.
[HOTELRUNNER İLE VERİ SORUMLULUĞU / VERİ İŞLEME İLİŞKİSİ, VERİLERİN SAKLANDIĞI ÜLKE VE AKTARIMIN HUKUKİ DAYANAĞI — HotelRunner sözleşmesine göre doldurulmalıdır.]
Transfers abroad
To display pages correctly, our website loads some files (style and script libraries) from the jsDelivr, code.jquery.com and cdnjs content delivery networks. Because these services receive requests directly from your browser when you open a page, your IP address and browser information may be transmitted to their servers abroad. Google Maps content is loaded only if you allow third-party content in the cookie settings; in that case the same information is transmitted to Google.
[YURT DIŞINA AKTARIMIN HUKUKİ DAYANAĞI — KVKK m. 9 kapsamında hukuki değerlendirme yapılarak doldurulmalıdır.]
6. Retention periods
| Data | Retention period |
|---|---|
| Booking records | [SAKLAMA SÜRESİ] |
| Contact form messages | [SAKLAMA SÜRESİ] |
| Newsletter subscription | Until you unsubscribe or withdraw your consent; thereafter [SAKLAMA SÜRESİ] |
| IP address and browser information | [SAKLAMA SÜRESİ] |
| Consent records | [SAKLAMA SÜRESİ] |
When the period expires, personal data is deleted, destroyed or anonymised.
7. Your rights under Article 11 of the KVKK
By applying to the data controller, you have the right to:
- learn whether your personal data is processed,
- request information if it has been processed,
- learn the purpose of processing and whether it is used in line with that purpose,
- know the third parties in Turkey or abroad to whom it is transferred,
- request correction if it is incomplete or inaccurate,
- request deletion or destruction under the conditions of Article 7 of the KVKK,
- request that corrections, deletions or destructions be notified to third parties to whom the data was transferred,
- object to a result against you arising from analysis exclusively by automated systems,
- claim compensation for damage arising from unlawful processing.
8. How to apply
In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, you may send your requests in writing to [VERİ SORUMLUSU ADRESİ], by registered electronic mail (KEP) to [KEP ADRESİ], or from the e-mail address registered with us to [KVKK BAŞVURU E-POSTA ADRESİ].
Your application will be concluded free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. If the process requires an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.
9. Changes
When this notice is updated, the "Last updated" date at the top of the page changes. When you give consent on our forms, the version of the text in force at that moment is stored together with your consent record.