Cookies & Personal Data Protection

Definitions

Under Law No. 6698 on the Protection of Personal Data:

• Personal data: Any information relating to an identified or identifiable natural person,
• Processing of personal data: Any operation performed on personal data, such as collection, recording, storage, preservation, alteration, reorganisation, disclosure, transfer, acquisition, retrieval, classification or prevention of use, by wholly or partly automatic means, or by non-automatic means provided that it is part of a data recording system,
• Data subject: The natural person whose personal data is processed,
• Data controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system,
• Obligation to inform: The obligation of the data controller, or the person authorised by it, at the time personal data is obtained, to inform data subjects of matters including the identity of the data controller, the purposes for which the personal data will be processed, to whom and for what purposes the processed personal data may be transferred, the method and legal basis for collecting personal data, and the other rights listed in Article 11 of the Law,

as defined above.

Information about Cookies

On our website, we process certain personal data through cookies. Cookies refer to technologies such as cookies, advertising identifiers and web identifiers (all of which are referred to as "Cookies").

What is a Cookie?

Cookies are very small text files, generally consisting of letters and numbers, saved to your computer (or other devices such as a smartphone or tablet) by the websites you visit, via your browser. Cookies enable the recognition of the user and their device, and allow certain information related to the user's preferences and past actions to be stored. Cookies are created by the servers running the website you visit, so that the server can recognise a visitor returning to the same site. Cookies can be likened to ID cards that show website owners that the same visitor has revisited the site.

For more detailed information about cookies, you may visit aboutcookies.org and allaboutcookies.org.

Obtaining Personal Data through Cookies

When you first visit our website, you are presented with a cookie preferences screen. In line with the cookies you allow on this screen, the relevant cookies are stored on your browser/device. Each cookie generally contains the following elements:

• The server the cookie was sent from,
• The predetermined lifespan of the cookie,
• A generally randomly generated, unique identifier value/number (the website server that sent the cookie uses this value to recognise you as you navigate between pages).

Data is collected through cookies entirely by automated means. Cookies can be classified according to their owner, lifespan and purpose of use:

• By owner: First-party cookies, placed on your device by the website you visit, and third-party cookies, provided by third parties, are used. First-party cookies are provided by the data controller, while third-party cookies are provided by different companies from whom services are received or with whom there is a business partnership.
• By lifespan: Session cookies and persistent cookies are used. Session cookies are deleted when the visitor leaves the website, while persistent cookies are stored on visitors' devices for a predetermined lifespan and are used to remember the visitor and their preferences on their next visit.
• By purpose of use: Strictly necessary cookies, analytical cookies and targeting/advertising cookies are used on the site.

Data Collected via Cookies, Purposes of Use and Legal Bases

Through cookies, data relating to the browser and operating system you use, your IP address, user ID, the date and time of your visit, access status, your use of website features, the search terms you enter, how often you visit our website, your language preferences, and your on-site actions, including records of your user activity, are collected and processed.

Cookies are used for the purposes of ensuring a stable experience of your visit to our website, remembering your information on your next visit, improving the functioning and content of the site, statistically evaluating site usage, presenting the content on the site in the most effective way for you and your device, and offering users personalised services and advertisements in line with their preferences and usage habits.

Below, the cookies used on our website by category, together with their providers, the foreign countries to which personal data may be transferred via cookies, and the purposes of use and legal bases specific to each cookie are set out:

1. Strictly Necessary Cookies

These are cookies required for the use and functioning of the website. If strictly necessary cookies are disabled, access to part or all of the site may not be possible. Personal data processed via strictly necessary cookies is processed for the purposes of providing products and services and conducting activities in compliance with legislation, on the basis that data processing is mandatory for the establishment, exercise or protection of a right as set out in Article 5/2(e) of the Law.

2. Functional Cookies

Functional cookies help perform certain functions, such as sharing website content on social media platforms, collecting feedback and other third-party features. They are also used to remember user preferences, such as language and currency. Personal data processed via functional cookies is processed for the purposes of remembering preferences and improving customer experience, based on your explicit consent as set out in Article 5/1 of the Law. Cookies originating from abroad are processed within the conditions set out in Article 9 of the Law and shared with foreign cookie providers.

3. Analytical Cookies

Analytical cookies collect information about how users use the website. These cookies collect information such as the pages viewed by users, the number of clicks, scrolling movements on pages, and entry/exit times on these pages. Personal data processed via analytical cookies is processed for the purposes of conducting marketing analysis activities and creating and tracking visitor records, based on your explicit consent as set out in Article 5/1 of the Law. Cookies originating from abroad are processed within the conditions set out in Article 9 of the Law and shared with foreign cookie providers.

4. Marketing Cookies

These are cookies used to present advertisements/campaigns to users based on their interests and to measure the effectiveness of marketing activities. Personal data processed via marketing cookies is processed for the purposes of conducting marketing processes for products/services, conducting marketing analysis activities, and conducting advertising/campaign/promotion processes, based on your explicit consent as set out in Article 5/1 of the Law. Cookies originating from abroad are processed within the conditions set out in Article 9 of the Law and shared with foreign cookie providers.

In addition to cookies, we may process certain personal data through other identifiers. Various personal data may be recorded during your browsing and activities on our site.

If You Are Only Browsing Our Website

• Your Transaction Security data (connection time, connection end time, IP address, IP protocol used, and volume of data transferred) is processed by us for the purposes of conducting activities in compliance with legislation and conducting information security processes, on the basis that it is expressly provided for by law under Article 5/2(a) of the Law (pursuant to Article 5 on Host Provider Liability of Law No. 5651 on Regulating Broadcasts via the Internet and Combating Crimes Committed through Such Broadcasts).

Transfer of Your Personal Data

Your personal data may be transferred to relevant authorities, without an obligation to inform and without seeking your explicit consent, if requested under Article 28/1 of the Law.

Additionally, in unforeseen circumstances, if requested under cases explicitly provided for by law, your personal data may be transferred to public institutions specified in law (such as ministries and other administrative authorities) within the purposes and limitations set out in law.

Other than these legal obligations, which do not require an obligation to inform or your explicit consent, your personal data is not transferred to any institution, person or organisation.

Methods of Collecting Personal Data

Your personal data is obtained through automated means by your visiting our website.

Your Rights Regarding Your Personal Data

Data subjects must first submit their requests regarding their personal data to the data controller. Under the Law, regarding your personal data, you may exercise the right to:

• Learn whether your personal data is being processed,
• Request information if your personal data has been processed,
• Learn the purpose of processing your personal data and whether it is used in accordance with that purpose,
• Know the third parties, domestic or abroad, to whom your personal data is transferred,
• Request the correction of your personal data if it has been processed incompletely or incorrectly,
• Request the deletion or destruction of your personal data if the reasons requiring its processing no longer exist,
• Request that the actions taken under the two items above be notified to third parties to whom your personal data has been transferred,
• Object to a result that is to your detriment arising from the analysis of your processed data exclusively through automated systems,
• Request compensation for damages if you suffer loss due to the unlawful processing of your personal data,

and use these rights.

How to Apply

You may submit your application:

• In writing to Göynük Mahallesi Ahu Ünal Aysal Cad. No:14/1 Kemer / ANTALYA, TÜRKİYE;
• Via secure electronic signature or mobile signature to the registered email address sirturizm@hs01.kep.tr;
• By sending an email to info@karmirhotel.com, if your email address is registered in our system.

you may submit your application through one of the above channels.

Information Required in Your Application

• Your name, surname, and your signature if the application is in writing,
• Your Turkish Republic ID number if you are a Turkish citizen, or your nationality, passport number, or identity number if any, if you are a foreign national,
• Your residential or business address for notification purposes,
• Your email address, telephone and fax number, if any, for notification purposes,
• The subject of your request,

must be included, along with any relevant information and documents related to the subject of your application.