DATA CONTROLLER
In accordance with the Personal Data Protection Law No. 6698 (KVKK), some of your personal data are processed by “Selçuk Kauçuk Ve Plastik Sanayi Ticaret Anonim Şirketi” as the data controller.

PURPOSES OF PROCESSING PERSONAL DATA
The personal identity information (name, surname, nationality, TR identity/passport number, place of birth, date of birth, registered residence, parents' names, marital status, gender, and other details on the identity document) and contact information (address, phone number, email address) of our hotel guests are processed for the purposes of:
a) Ensuring information security processes,
b) Conducting activities in compliance with legislation,
c) Executing/monitoring business activities,
d) Managing administrative processes,
e) Providing information to authorized individuals, institutions, and organizations.
These are processed strictly for the stated purposes.

The financial information of our hotel guests (such as card details in case of payment via bank card) is processed solely for the purpose of conducting financial and accounting operations.

Information related to physical space security (hotel check-in/check-out date and time, license plate numbers of guests, and personal data captured in public areas, excluding private spaces, via CCTV) is processed for:
a) Ensuring physical space security,
b) Securing the operations of the data controller,
c) Providing information to authorities when required.
These purposes are strictly adhered to during processing.

Data related to transaction security (IP address information, website login/logout details of guests connecting to the internet via WiFi) is processed for:
a) Ensuring information security processes,
b) Securing the operations of the data controller.
These purposes are strictly adhered to during processing.

Information obtained through the website of the data controller (www.otelselcuk.com.tr), including cookie data showing user preferences and habits for marketing purposes, and the name and email address information of those filling out the contact form, is processed for:
a) Managing customer relations processes,
b) Conducting advertising, campaign, and promotion processes,
c) Conducting marketing analysis activities,
d) Tracking requests and complaints.
These are processed strictly for the stated purposes.

Health Information (Temperature Measurement Due to COVID-19):
a) Conducting activities in compliance with legislation,
b) Ensuring physical space security,
c) Providing information to authorized individuals, institutions, and organizations.
These are recorded for the stated purposes.

LEGAL BASIS FOR PROCESSING PERSONAL DATA
These personal data are processed based on the following legal grounds specified in Article 5, Paragraph 2 of the Personal Data Protection Law No. 6698:
- Subparagraph (a) (explicitly stipulated by laws),
- Subparagraph (c) (necessary for the fulfillment of the legal obligations of the data controller),
- Subparagraph (f) (necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject).
Health information, classified as sensitive personal data, will be processed in accordance with Article 6, Paragraph 2 of the same law, provided that explicit consent is given.

METHOD OF COLLECTING PERSONAL DATA
These personal data are processed partially or fully automatically through forms, the website, security cameras, or computer programs, based on the legal grounds specified above.

TRANSFER OF PERSONAL DATA
All personal data processed within the scope of hotel activities by the data controller are not shared with third parties except for public institutions and judicial authorities when requested. These personal data are not transferred abroad in any case.
All processed personal data are stored in compliance with the provisions of KVKK, with appropriate administrative and technical measures in place.

RIGHTS OF THE DATA SUBJECT
Within the scope of Article 11 of the Law, which regulates the "rights of the data subject," individuals have the right to request from the data controller information regarding:
a) Whether personal data is processed,
b) If personal data has been processed, to request information regarding this,
c) The purpose of processing personal data and whether it is used in accordance with its purpose,
d) The third parties to whom personal data is transferred domestically or abroad,
e) The correction of incomplete or inaccurate data,
f) The deletion or destruction of personal data under the conditions specified in Article 7 of the Law,
g) Notification of the transactions made as per (e) and (f) to the third parties to whom the data is transferred,
h) Objection to any unfavorable outcome resulting from the analysis of processed personal data exclusively through automated systems,
i) Compensation for damages incurred due to the unlawful processing of personal data.

Under the "Communiqué on the Principles and Procedures for Application to the Data Controller":
- Data subjects must submit their requests in Turkish.
- Applications must be made in writing, through a registered email (KEP) address, or by using the electronic mail address previously provided to the data controller and recorded in its system.
- Applications must include the mandatory elements specified in Article 5, Paragraph 2 of the Communiqué. Otherwise, the applications will not be evaluated.

DATA CONTROLLER CONTACT INFORMATION
Address for Written Applications: Şems-i Tebrizi Mah. Kazanlı Sok. No:4 Karatay/KONYA
Email: rezervasyon@otelselcuk.com.tr
Phone: 0332 353 25 25