GDPR / Personal Data Protection

Data Controller: Sende Gitmelisin ("Company") acts as a data controller under the Law on Protection of Personal Data (KVKK).

Legal Grounds for Processing Personal Data

Your personal data is processed based on the following legal grounds specified in Articles 5 and 6 of the KVKK Law No. 6698:

• Being directly related to the establishment or performance of a contract,
• Fulfilling the legal obligations of our Company,
• Data processing being mandatory for the establishment, exercise or protection of a right,
• Data processing being mandatory for the legitimate interests of the data controller,
• Being clearly envisaged in the laws,
• Availability of your explicit consent in necessary cases.

Purpose of Processing Personal Data

Our Company processes your personal data for the following purposes:

• Creating and managing accommodation reservations
• Carrying out the reservation process
• Executing payment transactions
• Providing the accommodation service
• Providing customer support, managing request and complaint processes, performing accounting/invoicing operations and fulfilling legal obligations

Processed Personal Data

The personal data processed within the scope of this policy are as follows:

• Identity data (first name, surname, Turkish ID number or passport information where required under accommodation legislation)
• Contact data (e-mail address, telephone number, address)
• Reservation and invoice data
• Transaction security data (IP address, log records)

Transfer of Personal Data

Your personal data may be transferred to the following third parties in line with the realization of the purposes specified above:

• Authorised payment institutions and banks
• Accounting service providers
• Cloud infrastructure and e-mail/SMS service providers
• Competent public institutions and authorities within the scope of legal obligations

Rights of the Personal Data Subject

As a personal data subject, you have the following rights in accordance with Article 11 of the KVKK Law No. 6698:

• Learning whether your personal data is processed,
• Requesting information if your personal data is processed,
• Learning the purpose of processing and whether it is used in accordance with its purpose,
• Knowing the third parties to whom your personal data is transferred domestically or abroad,
• Requesting correction if it is incompletely or incorrectly processed,
• Requesting deletion or destruction of your personal data within the scope of Article 7 of KVKK,
• Requesting notification of correction or deletion operations to third parties to whom your personal data is transferred,
• Objecting to the occurrence of a result against you by analyzing it exclusively through automated systems,
• Requesting compensation for the damage in case of damage due to unlawful processing.

Retention Period of Personal Data

Personal data is kept for the period stipulated in the relevant legislation or for the period required by the processing purpose.

Right of Application and Obtaining Information

Applications must be made in accordance with the provisions of the Communiqué on the Procedures and Principles of Application to the Data Controller.

• Submitting the application in writing with a wet signature, delivered by hand or through a notary to our Company address
• Applying from the e-mail address you have previously notified to our Company and which is registered in our systems
• The application petition must contain the identity and contact details that are mandatory under the relevant communiqué
• Depending on the nature of the request, our Company will conclude the application within thirty days at the latest
• In the event that an application is rejected, your legal rights are reserved

Data Controller Contact Information

You can submit your applications and requests under KVKK to our Company as the data controller.

Credit Card Payments: Your credit card information is processed securely by the payment institution and is not viewed or stored by our company.