GDPR

GDPR (Personal Data Protection Law)
Clarification Text on the Protection of Personal Data

This clarification text has been prepared by Urla Köstem Müze Otel in accordance with the Law on the Protection of Personal Data No. 6698 (GDPR) to inform you about the processing method, purpose, legal basis, and your rights regarding your personal data.

Data Controller

Urla Köstem Müze Otel
Uzunkuyu, 7516. Sk. No:37, 35430 Urla/İzmir
info@urlamuzeotel.com

Personal Data Processed

Our hotel may process the following personal data:
Full name
Phone number
Email address
IP address
Website usage information
Reservation and accommodation details

Purposes of Processing Personal Data

Your personal data is processed in accordance with Articles 5 and 6 of the GDPR for the following purposes:
To carry out reservation procedures
To provide and track service delivery
Customer relationship management
Fulfillment of legal obligations
Marketing and informational activities (with explicit consent)
Security and system improvement purposes

Methods of Collecting Personal Data and Legal Grounds

Your personal data is collected through our website, email, phone, contact forms, reservation systems, and hotel check-in processes, by automated or non-automated means. The legal grounds for processing include the establishment and execution of contracts, compliance with legal obligations, and legitimate interests.

Transfer of Personal Data

Your personal data may be transferred, in accordance with GDPR, to the following parties:
Relevant public institutions and authorities when legally required
Authorized audit and inspection units
Relevant service providers (e.g., software systems, reservation infrastructures)
Transfers are made only to the extent necessary and with a purpose limitation.

Retention Period of Personal Data

Your personal data is stored for the duration required by the relevant legislation or the purpose of processing. After this period, your data is deleted, anonymized, or destroyed in accordance with legal procedures.

Your Rights Under GDPR

According to Article 11 of the GDPR, you have the right to:
Learn whether your personal data is being processed
Request information if it has been processed
Learn the purpose of processing and whether it is used accordingly
Know the third parties to whom data is transferred domestically or abroad
Request correction if the data is incomplete or incorrect
Request deletion or destruction in accordance with legislation
Request that correction or deletion be notified to third parties
Object to a result arising against you through automatic analysis
Request compensation if you suffer damage due to unlawful processing

You can exercise these rights by submitting a written request to info@urlamuzeotel.com.