Personal Data Protection (KVKK) Notice

1. Data Controller

Under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data may be processed by Assos Karadut Taş Otel (the "Hotel") acting as data controller, within the scope described below.

Address: Büyükhusun Köyü Namazgah Mevkii No:26, Ayvacık, Çanakkale 17860
Email: karaduttas@gmail.com
Phone: +90 501 091 34 17
Legal entity: YNDK Turizm Sağlık A.Ş. · Tax No: 9811574018

2. Personal Data Processed

In connection with your reservation, contact form and accommodation processes, personal data such as your full name, phone number, email address, stay dates, number of guests and the content of your requests/complaints is processed.

3. Purposes of Processing

• Creating and managing reservation requests
• Tracking deposit/payment processes
• Responding to enquiries submitted via the contact form and other requests
• Fulfilling legal obligations (accommodation tax, official notifications, etc.)
• Measuring and improving service quality

4. Transfer of Personal Data

Your personal data may be transferred to authorised public institutions where required by our legal obligations, and to the service providers operating our reservation and email infrastructure (hosting/email/payment infrastructure providers), strictly limited to the performance of the service. Your data is not transferred abroad; should an infrastructure requiring such a transfer be used, this notice will be updated.

5. Retention Period

Your personal data is retained for the periods prescribed by applicable legislation (e.g. accommodation records under tax and accounting law) or for as long as the processing purpose requires. Exact retention periods: general personal data is retained for 2 years; reservation records are retained for 10 years pursuant to applicable tax legislation.

6. Your Rights under KVKK

Under Article 11 of the KVKK, everyone has the right, by applying to the data controller, to:

• Learn whether their personal data is being processed,
• Request information about such processing,
• Learn the purpose of the processing and whether the data is used in line with that purpose,
• Know the third parties to whom the data is transferred, in Turkey or abroad,
• Request correction of incomplete or inaccurate data,
• Request erasure or destruction of the data under the conditions set out in Article 7 of the KVKK,
• Request that corrections/erasures be notified to third parties to whom the data was transferred,
• Object to a result arising against them from analysis of the processed data exclusively by automated systems,
• Claim compensation for damages arising from unlawful processing.

To exercise these rights, you may send your requests to karaduttas@gmail.com or to the postal address above.