Personal Data Protection Notice

Aytaç İnşaat Ticaret Bilişim Teknolojileri Limited Şirketi (the "Company", data controller), operating the Aim Bozcaada hotel, processes your personal data in accordance with Turkish Personal Data Protection Law No. 6698 ("KVKK"). This notice is provided under Article 10 of the KVKK.

1. Data Controller

• Company: Aytaç İnşaat Ticaret Bilişim Teknolojileri Limited Şirketi
• Address: Alaybey Mahallesi, Boruzan Sokak No: 25-25A, 17680 Bozcaada / Çanakkale
• Phone: +90 543 246 68 35
• E-mail: [email protected]
• Tourism operation licence no: 24278

2. Categories of Personal Data

• Identity data: Name, surname, national ID or passport number, date of birth, nationality, gender
• Contact data: Phone number, e-mail address, postal address
• Transaction data: Reservation records, check-in/check-out dates, number of guests, room preference, requests and complaints
• Financial data: Invoice details, payment amount and method, bank/payment provider references (we do not store your card number)
• Technical data: IP address, website browsing records, cookie records

3. Purposes of Processing

• Providing accommodation services and performing the reservation contract
• Reporting guest identity data to law enforcement as required by Turkish Identity Notification Law No. 1774
• Issuing invoices, collecting payments and keeping accounting records
• Handling requests, suggestions and complaints; measuring guest satisfaction
• Ensuring the safety of the premises and our guests
• Fulfilling obligations towards competent public authorities
• Sending promotional messages, where you have given explicit consent

4. Legal Grounds

Your personal data is processed on the legal grounds set out in Article 5 of the KVKK: explicit provision in law, direct relation to the performance of a contract, compliance with a legal obligation, establishment or protection of a right, the legitimate interests of the data controller, and — for marketing activities — your explicit consent.

5. Transfer of Personal Data

In accordance with Articles 8 and 9 of the KVKK, your data may be shared with competent public authorities (police and gendarmerie for identity notification, the Ministry of Culture and Tourism, tax offices, courts), online travel agencies and channel management systems, payment institutions and banks, our accountant and legal advisers, and IT service providers. Where reservations are made through internationally based platforms, your data may be transferred abroad under the conditions set out in Article 9.

6. Method of Collection

Your data is collected through reservation and contact forms on our website, telephone, e-mail and WhatsApp correspondence, online travel agencies, registration forms completed at check-in and the presentation of identity documents, by partly automated and non-automated means.

7. Retention Period

Your data is retained for as long as required by the purpose of processing and by statutory retention periods (5 years under tax legislation, 10 years under the Turkish Commercial Code). Once these periods expire, your data is erased, destroyed or anonymised.

8. Your Rights

Under Article 11 of the KVKK you have the right to learn whether your data is processed, to request information, to learn the purpose of processing, to know the third parties to whom your data is transferred, to request rectification, erasure or destruction, to object to results arising from automated analysis, and to claim compensation for damages arising from unlawful processing.

9. How to Apply

You may submit your requests in writing to our address or by e-mail to [email protected]. Your application will be concluded free of charge as soon as possible and within thirty days at the latest.