Protection of Personal Data and Privacy Policy

A Data Controller

We hereby inform you that, as Edmus Turizm Otel İşletmeciliği Ticaret Limited Şirketi, we process your personal data in the capacity of data controller within the scope of Law No. 6698 on the Protection of Personal Data and other relevant legislation.

B Personal Data Processed

In accordance with the Law and other relevant legislation, the categories of personal data to be processed for the purposes and legal grounds set out in this privacy notice are as follows:

C Purposes of Processing Personal Data

Your personal data will be processed by our Hotel in accordance with the fundamental principles set out in the Law and within the scope of the processing conditions and purposes specified in Articles 5 and 6 of the Law, primarily for the following purposes:

• Carrying out processes relating to accommodation services,
• Recording data in the online software systems used by our Company to conduct its sales and marketing policies,
• Carrying out the necessary work by our authorised units to enable you to benefit from the products and services offered by our Company,
• Carrying out the necessary work to measure and improve customer satisfaction,
• Collecting and evaluating any complaints and suggestions relating to our products and services,
• Recommending our products and services to you; planning and executing market research activities for their sale and marketing,
• Ensuring the legal and commercial security of persons with whom we have a business relationship,
• Following up and conducting legal affairs,
• Conducting finance and accounting affairs jointly or separately,
• Implementing measures taken or required to be taken in cases of force majeure such as epidemics, infectious diseases, earthquakes, floods, war or a state of emergency.

D Purposes of Transfer and Recipients of Personal Data

Your personal data will be transferred without seeking the explicit consent of the data subject, pursuant to Article 8 (2) (a) of the Law, in the following circumstances:

• Pursuant to Identity Notification Law No. 1774, the identity information of our guests (domestic and foreign) will be reported to law enforcement authorities via the Identity Notification System.
• Where required or requested, data will be shared with the relevant public institutions and organisations in order to fulfil legal obligations under applicable legislation.
• Where necessary, data will be shared with courts, enforcement offices or notaries for the purpose of conducting financial affairs relating to the collection of fees for products and services.
• Data will be shared with our lawyers, within the scope of their confidentiality obligation, in order to follow up legal proceedings and protect our rights.
• Data will be shared with courier company officials in order to deliver items left or forgotten at the hotel to their owners.

E Method of Collection and Legal Basis

Your personal data is obtained verbally, in writing or electronically, by automated or non-automated means, in accordance with the fundamental principles set out in the Law and based on the legal grounds specified in Articles 5 (2) and 6 (2) of the Law, for the processing conditions and purposes set out in Articles 5 and 6.

Personal data collected in this process is gathered electronically via your internet access, through your identity documents, via social media platforms, through your vehicle registration details, verbally or via the closed-circuit cameras located within our hotel; and additionally through online sales platforms, travel agencies, event organisers, business card exchanges at trade fairs or seminars, and through partner institutions or organisations.

F Your Rights as a Data Subject under Article 11 of the Law

Pursuant to Article 11 of the Law on the Protection of Personal Data, you have the following rights as a data subject in relation to the processing of your personal data:

• To learn whether your personal data is processed,
• To request information as to the purpose of processing and whether the data is used in accordance with that purpose,
• To request information regarding the processing, if your personal data has been processed,
• To know the third parties in Türkiye or abroad to whom your personal data has been transferred,
• To request the erasure or destruction of your personal data within the conditions set out in the relevant article of the Law,
• To request the rectification of your personal data if it has been processed incompletely or inaccurately,
• To object to a result arising against you through the analysis of the processed data exclusively by automated systems,
• To request that the actions taken pursuant to subparagraphs (e) and (f) of the relevant article be notified to the third parties to whom your personal data has been transferred,
• To claim compensation for damages arising from the unlawful processing of your personal data.

G Retention Period of Your Personal Data

Your personal data will be processed until the end of the retention period stipulated in the relevant legislation, if any; where no such period is specified, until the end of the period necessary for the purpose for which it is processed.

Upon expiry of these periods, your personal data will be erased, destroyed or anonymised without delay, either ex officio or upon your request, in accordance with the applicable legislation.

H Possible Amendments and Updates

This privacy notice may be amended as necessary in line with changes in the relevant legislation or in the personal data processing purposes and methods of Edmus Turizm Otel İşletmeciliği Ticaret Limited Şirketi.

Last updated: 25 July 2026