1. Data Controller
This notice has been prepared in accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”) by ZALEL HOTEL OLD CITY & SPA / ZALEL TEKSTİL TURİZM İNŞAAT SANAYİ VE TİCARET LİMİTED ŞİRKETİ – ZALEL HOTELS OLD CITY BRANCH (“Company”) as the data controller.
Contact Information:

• Address: Kemalpaşa Mah. Fethibey Cad. No:57 34134 Fatih / Istanbul, Turkey

• E-mail: info@zalelhotelsoldcity.com

• Phone: +90 554 014 55 16

2. Processed Personal Data
When you visit our website or use our services, the following personal data may be processed:

• Identity information (first name, last name)

• Contact information (phone number, e-mail)

• Reservation and accommodation information

• IP address and device information

• Content of requests and complaints

3. Purposes of Processing Personal Data
Collected personal data are processed for the following purposes:

• Providing reservation and accommodation services

• Managing customer relationships

• Fulfilling legal obligations

• Ensuring service security

• Improving service quality

• Conducting marketing and information activities (if explicit consent is given)

• Handling requests submitted through forms or other communication channels

4. Transfer of Personal Data
Your personal data may be transferred, in accordance with Articles 8 and 9 of KVKK, to:

• Authorized public institutions and organizations

• Business partners and service providers (e.g., reservation systems)

• Authorized third parties under legal obligations

Where necessary, your data may also be transferred abroad to service providers in relation to the communication tools used (e.g., WhatsApp).
5. Data Collection Methods and Legal Basis
Your personal data are collected via:

• Website forms

• Online reservation systems

• Cookies

• Electronic communication channels such as phone, e-mail, and WhatsApp

These data are processed based on the legal grounds provided in Articles 5 and 6 of KVKK, including:

• Conclusion and performance of a contract

• Fulfillment of legal obligations

• Legitimate interests of the Company

• Explicit consent

6. Rights of the Data Subject
Pursuant to Article 11 of KVKK, you have the following rights:

• To learn whether your personal data are being processed

• To request information if your data are processed

• To learn the purpose of the data processing

• To request correction of incomplete or inaccurate data

• To request deletion or destruction of data

• To object to data processing

• To claim compensation in case of damage

You can submit your requests in writing or via e-mail to the Company.
7. Data Retention Period
Personal data are retained for the period required by the relevant legislation or for the duration necessary for the purpose of processing. After this period, data are deleted, destroyed, or anonymized.
8. Data Security
The Company takes all necessary technical and administrative measures to protect personal data.
9. Effective Date
This notice comes into effect as of the date it is published on the website.