Privacy Policy

Website Privacy Agreement

During your visit to this website and while using the services offered through this site, the use and protection of the information obtained from you and related to the services you request are subject to the terms specified in this “Privacy Policy.” By visiting this website and requesting to benefit from the services offered through this site, you accept the terms specified in this “Privacy Policy.”

I. Purpose of the Personal Data Protection and Processing Policy

Due to the sensitivity of the services we have carried out as Stern Hotel until today, the data received from our customers or potential customers has always been kept confidential and has never been shared with third parties. The protection of personal data is a fundamental policy of our company. Even before any legal regulation, our company and its affiliates attached great importance to the confidentiality of personal data, adopted it as a working principle, and instructed its employees accordingly. We also undertake to comply with all responsibilities brought by the Personal Data Protection Law as “Stern Hotel.” The principles of our companies regarding personal data protection also cover our affiliates.

II. Scope and Amendment of the Personal Data Protection and Processing Policy

This Policy prepared by our company has been drafted in accordance with the Personal Data Protection Law No. 6698 (“KVKK”). The Law is currently in force with all its provisions. Data obtained from you with your consent or on other lawful grounds specified in the Law will be used to improve the quality of the services we provide and to enhance both the services offered to you and our quality policies. Some data in our possession is also anonymized and transformed into non-personal data. These data are used for statistical purposes and are not subject to the Law or this Policy. “Stern Hotel” reserves the right to amend its “Personal Data Protection and Processing Policy” and regulations, provided that they comply with the Law and improve personal data protection. This Policy covers the protection of automatically collected data belonging to our customers, potential customers, employees, and companies working in partnership with us, as well as their customers, employees, or other individuals, and includes related regulations.

III. Basic Principles Regarding Personal Data Processing

a) Lawfulness and fairness: “Stern Hotel” checks the source of data it collects or receives from other companies and ensures that it is obtained in accordance with the law and principles of fairness. b) Accuracy and currency: “Stern Hotel” ensures that all data within the organization is accurate and does not contain incorrect information, and updates personal data when notified of changes. c) Specific, explicit, and legitimate purposes: “Stern Hotel” processes data only for purposes for which consent has been obtained during service provision. d) Relevance, limitation, and proportionality: “Stern Hotel” uses data only to the extent necessary for the purpose of processing. e) Retention for the period required by law or purpose: “Stern Hotel” retains contractual data for the required legal retention periods and deletes or anonymizes it when no longer needed.

Principle of Data Minimization

According to this principle, data received by “Stern Hotel” is processed only as much as necessary. Unnecessary data is not collected. Excess data is deleted or anonymized. Special category data such as health data is collected only to provide better services and is carefully stored.

Deletion of Personal Data

When legal retention periods expire, judicial processes are completed, or other requirements cease to exist, personal data is deleted, destroyed, or anonymized either automatically or upon request.

Accuracy and Data Currency

Data is processed based on declarations made by individuals. “Stern Hotel” is not obliged to verify the accuracy of such data but updates it when official documents or requests are provided.

Confidentiality and Data Security

Personal data is confidential. Only authorized personnel can access it. All necessary technical and administrative measures are taken to prevent unauthorized access.

IV. Data Processing Purposes

Data is processed for purposes stated in the disclosure text, primarily for contract execution and service improvement.

V. Customer, Potential Customer, and Business Partner Data

Stern Hotel processes personal data as a data controller under KVKK. Categories include identity, contact, financial, feedback, reservation, and travel data.

Contractual Data Processing

When a contractual relationship exists, personal data may be processed without additional consent for contract execution purposes.

Business Partners

Data is shared only as necessary and under confidentiality obligations.

Service Improvement and Marketing Activities

Data may be used for surveys, service analysis, segmentation, complaint management, and personalized service development.

E-Invoice & E-Archive Invoice

Customers are automatically registered for electronic invoicing systems, and invoices are sent via email.

Advertising and Marketing Consent

Commercial electronic messages are sent only with prior explicit consent.

Legal Obligations

Data may be processed without consent when required by law.

Special Category Personal Data

Sensitive personal data is processed only with explicit consent and necessary safeguards.

Automated Processing

Data processed via automated systems may be used for internal decision-making.

Internet and User Information

Users are informed about cookies and data collection practices.

VI. Employee Data

Employee data may be processed for employment and legal obligations.

Telecommunications and Internet Use

Company devices are for business use only and may be monitored.

VII. Transfer of Personal Data

Data may be transferred to business partners, suppliers, affiliates, or legally authorized institutions domestically or internationally with appropriate safeguards.

VIII. Rights of the Data Subject

Individuals have rights to access, correct, delete, object, and request compensation for unlawful processing of their personal data.

IX. Confidentiality Principle

All data is confidential and cannot be used without legal or contractual basis.

X. Data Security

All necessary security measures are implemented and continuously improved.

XI. Audit

Internal and external audits are conducted regarding data protection.

XII. Breach Notification

In case of data breaches, necessary actions are taken immediately and authorities are notified. The company reserves the right to amend this policy. Continued use of services implies acceptance of changes.