1. Data Controller
Under Turkish Personal Data Protection Law no. 6698 ("KVKK"), your personal data is processed by Misya Cave Hotel as the data controller, within the scope described below.
This English text is provided for information only. In case of any discrepancy, the Turkish version of this notice prevails.
Data controller: Misya Cave Hotel — [the legal trade name, tax office and number, and VERBİS registration details are to be entered here]
Address: Tekelli Mah., Uçhisar 50240, Nevşehir / Cappadocia – Türkiye
E-mail: info@misyacavehotel.com
2. Personal Data We Process
Identity data: your first name and surname.
Contact data: your e-mail address and telephone number.
Customer transaction data: your check-in and check-out dates, number of guests, the room type you selected and any note you added to the form; if you used the contact form, the subject and content of your message.
Transaction security data: the IP address, browser and device information generated while you visit our site, together with cookie records.
If you stay at our hotel, information from your identity document is also processed to the extent required by law.
3. Purposes of Processing
Receiving your reservation request, calculating room availability and concluding the request.
Establishing and performing the accommodation contract and providing services during your stay.
Answering the questions, requests and complaints you send through the contact form.
Fulfilling our obligations arising from legislation and informing the competent authorities.
Ensuring the security of our website and preventing misuse.
4. Legal Grounds for Processing
Data processed during the reservation and accommodation process relies on Article 5/2-(c) of the KVKK, namely that processing "is directly related to the conclusion or performance of a contract". No separate explicit consent is required for this data; what is mandatory is the duty to inform, which we fulfil with this notice.
Operations arising from legislation, above all the reporting of identity data to law enforcement, rely on Article 5/2-(ç), namely that processing "is mandatory for the data controller to fulfil its legal obligation". For accommodation businesses this obligation arises from Identity Notification Law no. 1774.
Data concerning site security and request management relies on Article 5/2-(f), namely the legitimate interests of the data controller, provided that this does not harm your fundamental rights and freedoms.
Non-essential cookies and any commercial electronic messages are handled only with your explicit consent under Article 5/1. You may withdraw your consent at any time.
5. Method of Collection
Your personal data is collected electronically and by partly automated means: when you fill in the reservation and contact forms on our website, when you reach us by e-mail or telephone, and through cookies while you visit the site.
6. Transfer of Your Personal Data
In accordance with Articles 8 and 9 of the KVKK, your personal data may be transferred to competent public institutions, law enforcement and judicial authorities upon request and to the extent required by law, as well as to our hosting provider and to the accountant who provides our bookkeeping services.
Transfers abroad: the typefaces on our site are loaded through Google Fonts, and the map on our contact page comes from Google Maps. Because this content is served from servers abroad, your IP address is transmitted to the relevant provider at the moment it loads. The map loads only when you give your approval; until then no connection related to the map is made.
7. Retention Periods
Data relating to reservations and accommodation is retained for the applicable limitation periods (as a rule ten years) following the end of the legal relationship between us.
Messages sent through the contact form are retained for two years after your request has been concluded.
Cookie records are retained for the period stated for each cookie in our Cookie Policy.
Once these periods expire, your personal data is deleted, destroyed or anonymised.
8. Your Rights under Article 11 of the KVKK
To learn whether your personal data is processed.
To request information if it has been processed.
To learn the purpose of processing and whether the data is used in accordance with that purpose.
To know the third parties to whom your data is transferred, at home or abroad.
To request correction if the data is incomplete or inaccurate.
To request deletion or destruction under the conditions set out in Article 7.
To request that correction, deletion and destruction be notified to the third parties to whom the data was transferred.
To object to a result against you arising from analysis carried out solely by automated systems.
To claim compensation if you suffer damage because your data was processed unlawfully.
9. How to Apply
You may submit requests concerning the rights above in writing to our address, together with documents establishing your identity, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. You may also send them to info@misyacavehotel.com from the e-mail address you have previously notified to us and which is registered in our system.
Your application is concluded free of charge as soon as possible and in any case within thirty days, depending on the nature of the request. If the process entails an additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged.
If your application is rejected, if you find the response insufficient or if no response is given in time, you have the right to lodge a complaint with the Personal Data Protection Board within thirty days of learning the response and in any case within sixty days of the date of application.