Privacy Notice
This privacy notice explains how your personal data is processed, in line with Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK").
Data controller
Yes Apart Hotel Fethiye — Tuzla Mah. 521. Sk. No: 25/A, 48300 Fethiye / Muğla, Türkiye
E-mail: [email protected] · Phone / WhatsApp: +90 538 598 50 83
Personal data we process
- Identity and contact: name, phone number, e-mail address
- Booking: arrival and departure dates, number of adults and children, apartment preference, your notes, deposit/payment and receipt details
- During your stay: ID or passport details (required by Turkish Law No. 1774 on Identity Notification for reporting to the police/gendarmerie system — KBS)
- Security: IP address, time of the transaction, browser information
- Only with your consent: statistics on how the site is used (Google Analytics, with shortened IP address)
We do not ask for special categories of data (health, religion, biometrics etc.); please do not enter such information in the note fields.
How we collect data
Through the booking and contact forms on our website, WhatsApp, phone and e-mail correspondence, and registration at check-in — partly automatically and partly by non-automated means.
Purposes and legal grounds
- Handling your booking request, sending a price offer, concluding and performing the accommodation contract, tracking deposits and payments — performance of a contract (KVKK Art. 5/2-c)
- Guest identity reporting (KBS), invoicing and tax records — explicitly required by law / legal obligation (Art. 5/2-a, 5/2-ç)
- Website and information security, preventing misuse, establishing and defending legal claims — legitimate interest (Art. 5/2-f, 5/2-e)
- Visitor statistics (analytics cookies) — your explicit consent (Art. 5/1), which you can withdraw at any time
Transfers
Your data is shared only for the purposes above and only as far as necessary with:
- Authorised public authorities (police/gendarmerie — KBS, tax authority, courts),
- Payment and banking service providers,
- Our infrastructure providers: the website is hosted in a data centre in Türkiye (Keyubu, Istanbul); site traffic passes through the Cloudflare network for security and speed. E-mail is handled via Google (Gmail); if you choose to contact us on WhatsApp, your messages are carried by WhatsApp (Meta). These providers may have servers outside Türkiye; transfers abroad are made in line with Article 9 of the KVKK.
We never sell or rent your data to third parties for marketing.
Retention
We keep your data for as long as the purpose requires and for the periods set by law (e.g. 5 years for tax documents and 10 years for commercial books and records under Turkish law). After that it is deleted, destroyed or anonymised.
Your rights (KVKK Art. 11)
You have the right to learn whether your data is processed and to request information about it; to learn the purpose of processing and whether it is used accordingly; to know the third parties in Türkiye or abroad to whom it is transferred; to request correction of incomplete or inaccurate data; to request deletion or destruction under Art. 7; to request that these actions be notified to the third parties concerned; to object to a result against you arising solely from automated analysis; and to claim compensation for damage caused by unlawful processing.
How to apply
Send your request in writing to the address above or from your registered e-mail address to [email protected]. We will respond free of charge within 30 days at the latest. If your request is rejected, the answer is insufficient or not given in time, you may lodge a complaint with the Turkish Personal Data Protection Board (KVKK Kurulu).
Last updated: 06.11.2026