1. Data controller and scope
YAŞMAK TURİZM VE TİCARET A.Ş. (MERSİS No. 0940 0013 2950 0014) is the data controller for personal data processed through the Yaşmak Hotel Collection website (yasmakhotelcollection.com). The company address is Hocapaşa Mahallesi, Ebusuud Caddesi No:12, Fatih/İstanbul, Türkiye. You can contact us at info@yasmakhotelcollection.com or +90 212 528 13 43. Our registered electronic mail (KEP) address is yasmakturizm@hs03.kep.tr.
This policy explains how we handle personal data when you visit the website, reach us through the contact form, or contact us by telephone, email or WhatsApp. Our hotels’ and Olive Anatolian Restaurant’s own websites and reservation systems, as well as processes such as accommodation, in-person service, camera systems and payment processing, are covered by separate privacy notices on the relevant websites and in the relevant processes.
2. Personal data we process
- Request data: the name and surname, email address, subject and message you enter in the contact form.
- Communication data: correspondence and information you provide by telephone, email or WhatsApp when you contact us about your request.
- Technical data: IP address, access and security logs, browser and device information, and your language, cookie and consent preferences where applicable.
Please do not include health information, allergies or other sensitive personal data in the message field unless it is necessary for your request. If such information is needed to provide a service safely, we will handle it under the applicable conditions of Turkish data protection law.
3. Purposes and legal grounds
We process request and communication data to receive, assess and answer your requests, forward them to the relevant hotel or restaurant where necessary, communicate with you and start the process for the service you request. Depending on the activity, the legal grounds under Article 5(2) of Law No. 6698 (KVKK) are the necessity of processing for establishing or performing a contract (5/2-c), complying with a legal obligation (5/2-ç), establishing, exercising or protecting a right (5/2-e), or our legitimate interests where your fundamental rights and freedoms are not harmed (5/2-f).
We process technical and security data to operate and protect the website, investigate errors and meet applicable legal obligations, relying on the relevant grounds in Articles 5(2)(a), 5(2)(ç) and 5(2)(f), as appropriate. We send promotional or commercial electronic messages only where the separate approval and legal conditions required for that activity have been met. Sending the contact form does not by itself constitute marketing consent.
4. Collection, recipients and international transfers
We collect data directly from the form you submit and your communications with us, and automatically through website and security systems. Authorized staff of the Yaşmak Hotel Collection hotels and Olive Anatolian Restaurant may access it to the extent required for their duties. Where necessary, it may be shared with providers of website hosting, email, communications, security, accounting and legal services, and with legally authorized public authorities, for the purposes described above.
Because of services such as our email infrastructure (Google Workspace) and Google reCAPTCHA, which we use to secure the form, your data may be processed outside Türkiye. Any international transfer is assessed under Article 9 of the KVKK and carried out only when an applicable transfer condition and safeguard is in place.
5. Cookies and external websites
Necessary cookies or similar technologies are used for website operation and security. The cookies we use and how you can manage your choices are explained in our Cookie Policy; you can change your choices at any time through the cookie panel on the website. The website contains links to our hotels’ websites, reservation systems, map and social media services; those services are governed by their own privacy notices.
6. Retention and security
We keep personal data only for the period needed for the relevant request and service, applicable statutory obligations, and the establishment or defence of legal claims. At the end of the applicable period, data is deleted, destroyed or anonymized in accordance with our retention and disposal rules. We apply appropriate administrative and technical safeguards and limit access to authorized persons.
7. Your rights and applications
Under Article 11 of the KVKK, you may ask whether your data is processed; request information about processing, purposes, recipients and use; request correction or deletion/destruction where the legal conditions are met; ask that relevant changes be communicated to recipients; object to a result against you arising solely from automated analysis; and request compensation for damage caused by unlawful processing.
You may apply in writing to YAŞMAK TURİZM VE TİCARET A.Ş., Hocapaşa Mahallesi, Ebusuud Caddesi No:12, Fatih/İstanbul, Türkiye, via KEP to yasmakturizm@hs03.kep.tr, or from an email address previously registered with us to info@yasmakhotelcollection.com, in accordance with the applicable application rules. We respond within the statutory period, which is no later than 30 days.
We may update this policy when our processing activities or applicable rules change. The current version will be published on this page.