PERSONAL DATA PROTECTION LAW (KVKK) INFORMATION NOTICE AND PRIVACY POLICY

1. Data Controller

This Information Notice has been prepared by Let’s Stay (“Hotel”), acting as the data controller, within the scope of the Personal Data Protection Law No. 6698 (“GDPR”).

2. Purpose

This notice is prepared to inform our guests and website users about the purposes for which their personal data are processed, how they are protected, and under what conditions they are shared.

3. Purposes of Processing Personal Data

Your personal data are processed in accordance with Articles 5 and 6 of GDPR for the following purposes:

Planning and execution of accommodation reservation processes,

Providing and improving accommodation services,

Managing customer relationship processes,

Carrying out payment, invoicing, and accounting operations,

Fulfilling legal obligations,

Evaluating requests, suggestions, and complaints,

Improving service quality and ensuring guest satisfaction.

4. Categories of Processed Personal Data

The Hotel may process identity information, contact information, reservation and accommodation details, payment and billing information, and customer transaction records.

5. Transfer of Personal Data

Your personal data may be transferred, in compliance with GDPR, only to legally authorized public institutions and organizations, and to third-party service providers (such as payment institutions, reservation systems, software and IT infrastructure providers) as required for fulfilling legal obligations and service delivery.

6. Method and Legal Basis for Data Collection

Your personal data are collected electronically or physically through channels such as the website, telephone, email, and reservation forms. These data are processed based on the legal grounds of contract establishment and performance, fulfillment of legal obligations, and the legitimate interests of the Hotel.

7. Data Security

The Hotel takes all necessary technical and administrative measures to prevent unlawful processing, access, and disclosure of personal data. Data are protected in accordance with confidentiality principles.

8. Rights of the Data Subject

Under Article 11 of GDPR, data subjects have the right to:

Learn whether their personal data are processed,

Request information if processed,

Learn the purpose of processing and whether they are used in accordance with that purpose,

Know the third parties to whom data are transferred domestically or abroad,

Request correction of incomplete or inaccurate data,

Request deletion or destruction of personal data within the scope of KVKK.

9. Privacy Principle

Let’s Stay undertakes to show utmost care in protecting the confidentiality of all personal data belonging to its guests. Personal data will not be used outside the purposes specified in this policy and will not be shared with unauthorized third parties.

10. Contact

You may contact our Hotel to exercise your rights under GDPR or to obtain detailed information.