Pursuant to the Personal Data Protection Law No. 6698 (“Law”), Adalı Otelcilik Turizm Organizasyon Ticaret A.Ş. (hereinafter referred to as “ATG HOTELS”) is defined as the data controller due to processing personal data relating to you. Under Article 10 of the Law, titled “Obligation to Inform,” data controllers are required to inform natural persons whose personal data they process about certain matters.
This text has been prepared by ATG HOTELS both to ensure compliance with the legislation and to maintain transparency and accountability.
Definitions
According to the Personal Data Protection Law No. 6698:
Personal data means any information relating to an identified or identifiable natural person;
Processing of personal data means any operation performed on personal data, such as obtaining, recording, storing, retaining, altering, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data, whether wholly or partly by automated means or by non-automated means provided that it forms part of a data recording system;
Data subject means the natural person whose personal data is processed;
Data controller means the natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system;
Obligation to inform means the obligation of the data controller or the person authorized by the data controller, at the time personal data is obtained, to inform the data subjects about the identity of the data controller, the purposes for which personal data will be processed, to whom and for what purposes the processed personal data may be transferred, the method and legal basis of collecting personal data, and the other rights listed in Article 11 of the Law.
Data Subject: You, as a person who visits our website and contacts us through our contact form, and whose certain personal data we therefore process, are defined as the data subject under the Law.
Data Controller: [ATG HOTELS], which determines the purposes and means of processing personal data relating to you and is responsible for establishing and managing the data recording system, is the data controller.
| Personal Data Processed | Purposes of Processing | Legal Grounds |
| Identity (Name, Surname) |
Carrying Out Communication Activities | Article 5/1 of the Personal Data Protection Law: Personal data are processed based on your explicit consent, which we have indicated under the contact form.
|
| Contact (E-mail, Telephone Number) |
Carrying Out Storage and Archiving Activities | Article 5/2(f) of the Personal Data Protection Law: Personal data are stored on the basis that data processing is necessary for the legitimate interests of the data controller, provided that such processing does not violate the fundamental rights and freedoms of the data subject. |
| Visitor Transaction (Message Content) |
Your transaction security data (the date and time of the transaction you performed) must be generated and stored for the purpose of carrying out information security processes and protecting our rights in the event of a possible dispute, based on Article 5/2(e) of the Personal Data Protection Law, which provides that data processing is necessary for the establishment, exercise or protection of a right.
To Whom and for What Purposes Personal Data May Be Transferred
Your personal data may be transferred to the relevant authorities, if requested, within the scope of Article 28/1 of the Personal Data Protection Law, without the obligation to inform you and without seeking your explicit consent.
Apart from this, in unforeseen circumstances, where expressly stipulated by law, your personal data may also be transferred, upon request, to the public institutions specified by law (such as administrative authorities including Ministries), within the purposes and limitations prescribed by law.
Except for our legal obligations that do not require the obligation to inform you or your explicit consent, your personal data are not transferred.
Methods of Obtaining Personal Data
The transaction security information specified above is generated automatically by the system, while your other personal data are obtained through automated methods.
Your Rights Regarding Your Personal Data
Data subjects must first submit their requests concerning their personal data to the data controller.
| Pursuant to the Law, with respect to your personal data, you have the right to: | |
| a) Learn whether your personal data are processed, | |
| b) Request information if your personal data have been processed, | |
| c) Learn the purpose of processing your personal data and whether they are used in accordance with their purpose, | |
| ç) Know the third parties to whom your personal data are transferred domestically or abroad, | |
| d) Request correction of your personal data if they have been processed incompletely or incorrectly, | |
| e) Request deletion or destruction of your personal data if the reasons requiring their processing cease to exist, | |
| f) Request that the actions carried out pursuant to subparagraphs (d) and (e) be notified to third parties to whom your personal data have been transferred, | |
| g) Object to the occurrence of a result against you arising from the analysis of your processed data exclusively through automated systems, | |
| ğ) Request compensation for damages if you suffer damage due to the unlawful processing of your personal data. |
Application Method
- In writing to the address Barbaros Mah. Serik (E) Cad. F Blok No: 419 F İç Kapı No: 2 Aksu ANTALYA;
- To the KEP address [email protected] with a secure electronic signature,
- If your e-mail address is registered in our system, by sending an e-mail to [email protected].
Your application must include;
- Your name, surname and, if the application is made in writing, your signature,
- For citizens of the Republic of Türkiye, your Turkish ID number; if you are a foreign national, your nationality, passport number or, if any, identification number,
- Your residential or workplace address for notification purposes,
- If any, your e-mail address, telephone number and fax number for notification purposes,
- The subject of your request, and, if any, information and documents relating to the matter must also be attached to the application.
ATG HOTELS reserves the right to verify your identity.
You may access the procedural rules to be followed during the application and more detailed information in the Personal Data Protection Authority’s “Communiqué on the Procedures and Principles of Application to the Data Controller”.
Pursuant to the Personal Data Protection Law No. 6698 (“Law”), Adalı Otelcilik Turizm Organizasyon Ticaret A.Ş. (hereinafter referred to as “ATG HOTELS”) is defined as the data controller due to processing personal data relating to you. Under Article 10 of the Law, titled “Obligation to Inform,” data controllers are required to inform natural persons whose personal data they process about certain matters.
This text has been prepared by ATG HOTELS both to ensure compliance with the legislation and to maintain transparency and accountability.
Definitions
According to the Personal Data Protection Law No. 6698:
Personal data means any information relating to an identified or identifiable natural person;
Processing of personal data means any operation performed on personal data, such as obtaining, recording, storing, retaining, altering, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data, whether wholly or partly by automated means or by non-automated means provided that it forms part of a data recording system;
Data subject means the natural person whose personal data is processed;
Data controller means the natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system;
Obligation to inform means the obligation of the data controller or the person authorized by the data controller, at the time personal data is obtained, to inform the data subjects about the identity of the data controller, the purposes for which personal data will be processed, to whom and for what purposes the processed personal data may be transferred, the method and legal basis of collecting personal data, and the other rights listed in Article 11 of the Law.
Data Subject: Since you visit our website with the domain name [www.atghotels.com], and we therefore process certain personal data relating to you through cookies and different identifiers, you are defined as the data subject under the Law.
Data Controller: [ATG HOTELS], which determines the purposes and means of processing personal data relating to you and is responsible for establishing and managing the data recording system, is the data controller.
INFORMATION ABOUT COOKIES:
In addition, we process certain personal data relating to you through cookies on our website.
Cookies refer to technologies such as cookies, advertising identifiers and web identifiers (all such technologies will hereinafter be referred to as “Cookies”).
What is a Cookie?
Cookies are very small text files, generally consisting of letters and numbers, that are stored on your computer (or other devices such as smartphones or tablets) through browsers by the websites you visit. Cookies enable the recognition of the user and the user’s device and allow certain information relating to the user’s preferences and previous activities to be stored. Cookies are created by the servers that operate the website you visit. In this way, when the visitor visits the same website again, the server can recognize this. Cookies may be compared to identification cards that show website owners that the same visitor has visited the website again.
For more detailed information about cookies, you may visit https://www.aboutcookies.org/ and https://www.allaboutcookies.org/.
Obtaining Personal Data Through Cookies
When you visit our website for the first time, you are presented with a screen regarding your cookie preferences. In accordance with the cookies you allow to be used on this screen, the relevant cookies are stored in your browser/device. Each cookie generally contains the following elements:
- The server from which the cookie is sent,
- The predetermined lifetime of the cookie,
- A unique identifier value/number, generally generated randomly (the website server sending the cookie uses this value to recognize you as you navigate between pages).
Data are collected through cookies by fully automated means. Cookies may be classified according to their owners, lifetimes and purposes of use:
- According to ownership, first-party cookies placed on your device by the website you visit and third-party cookies provided by third parties are used. While first-party cookies are provided by the data controller, third-party cookies are provided by different companies from which services are received or which are business partners.
- According to lifetime, session cookies and persistent cookies are used. Session cookies are deleted when the visitor leaves the website, while persistent cookies are stored on visitors’ devices for their predetermined lifetimes and are used to remember the visitor and the visitor’s preferences during the next visit.
- According to their purposes of use, strictly necessary cookies, analytical cookies and targeting/advertising cookies are used on the website.
Data Collected Through Cookies, Purposes of Use and Legal Grounds
Through cookies, data relating to user transaction records are collected and processed, including the browser and operating system you use, IP address, user ID, date and time of your visit, access status, use of features on the website, search terms you enter, how frequently you visit our website, language preferences, and actions you perform on the pages.
Cookies are used for the purposes of ensuring that your visit to our website and your experience on the website are carried out in a stable manner and that your information is remembered during your next use, improving the operation and content of the website, statistically evaluating website usage, presenting the content on the website to you and your device in the most effective manner, and providing users with customized services and advertisements in line with their preferences and usage habits. Cookies are divided into various categories according to their purposes of use and functions. Below are the cookies used on our website according to their categories, the providers of the relevant cookies, the foreign countries to which personal data may be transferred through cookies, and the purposes of use and legal grounds specific to each cookie:
- Analytical Cookies
Analytical cookies collect information about how users use the website. Such cookies are used to improve/develop user experiences. These cookies collect information such as the pages viewed by users, the number of clicks, scrolling movements on pages, and the times of entry to and exit from these pages. Personal data processed through analytical cookies are processed for the purposes of carrying out marketing analysis activities and creating and tracking visitor records, based on your explicit consent as stipulated under Articles 5/1 and 9/1 of the Personal Data Protection Law, and are shared with cookie providers located abroad.
The analytical cookies used on our website, their providers and purposes of use are as follows:
| Cookie | Type | Duration | Description |
|---|---|---|---|
| _ga | First Party: Google Analytics (Google LLC, USA) | 2 Years | Used by Google Analytics 4 to distinguish users from one another on the ATG Hotels website and to generate visit and usage statistics. |
| _ga_<container-id> | First Party: Google Analytics (Google LLC, USA) | 2 Years | Used within the scope of Google Analytics 4 to maintain the user’s session status and analyze website usage. |
| _clck | First Party: Microsoft Clarity (Microsoft Corporation, USA) | 1 Year | Microsoft Clarity stores the user identity and website-specific preferences, helping to analyze different page views by the same visitor. |
| _clsk | First Party: Microsoft Clarity (Microsoft Corporation, USA) | 1 Day | Used to associate multiple page views by a user under a single Clarity session and to analyze user behavior. |
| _ym_uid | First Party: Yandex Metrica | 1 Year | Used to distinguish website visitors from one another and to enable visitor-based traffic and user behavior analysis. |
| _ym_d | First Party: Yandex Metrica | 1 Year | Used to store the date of the visitor’s first session on the website and to support Yandex Metrica analytics processes. |
| _ym_isad | First Party: Yandex Metrica | 20 Hours | Used to determine whether the visitor uses an ad blocker and to support Yandex Metrica measurement processes. |
- Marketing Cookies
These are cookies used to present advertisements/campaigns based on users’ interests and to measure the effectiveness of marketing activities. Personal data processed through marketing cookies are processed for the purposes of carrying out the marketing processes of products/services, carrying out marketing analysis activities, and carrying out advertising/campaign/promotion processes, based on your explicit consent stipulated under Articles 5/1 and 9/1 of the Personal Data Protection Law, and are shared with cookie providers located abroad.
The marketing cookies used on our website, their providers and purposes of use are as follows:
| Cookie | Type | Duration | Description |
|---|---|---|---|
| _gcl_au | First Party: Google Ads / Google Tag (Google LLC, USA) | 90 Days | Used to measure Google Ads advertisements and campaign conversions and to associate ad clicks with actions performed on the website. |
| _fbp | First Party: Meta Pixel (Meta Platforms, USA) | 90 Days | Used by Meta Pixel to identify the browser, measure advertising performance, and support website analytics and remarketing activities. |
| _fbc | First Party: Meta Pixel (Meta Platforms, USA) | 90 Days | Used to identify clicks originating from Meta advertisements and to associate the ad click with a conversion or visit on the website. |
In addition to cookies, we may process certain personal data through different identifiers. During your navigation and transactions on our website, we may record different personal data relating to you. Below, you will be informed on an activity-based basis regarding your personal data. If you are involved in the processes specified under the relevant process headings, you may click on the headings to access detailed information regarding your processed personal data.
If You Only Visit Our Website;
| Personal Data Processed | Purposes of Processing | Legal Grounds |
Transaction Security (IP address of the parties, Source and Destination, Port Information, Start and End Time of the Service Provided, Type of Service Used and Amount of Data Transferred) |
For the purposes of carrying out activities in compliance with legislation and carrying out information security processes | Processed by us pursuant to Article 5/2(a) of the Personal Data Protection Law, on the legal ground that it is expressly stipulated by law, based on Article 5 on the Responsibility of Hosting Providers under Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed Through Such Publications. |
Methods of Collecting Personal Data
Your personal data are obtained through automated methods when you visit our website.
Your Rights Regarding Your Personal Data
Data subjects must first submit their requests concerning their personal data to the data controller.
| Pursuant to the Law, with respect to your personal data: | |
| a) Learn whether your personal data are processed, | |
| b) Request information if your personal data have been processed, | |
| c) Learn the purpose of processing your personal data and whether they are used in accordance with their purpose, | |
| ç) Know the third parties to whom your personal data are transferred domestically or abroad, | |
| d) Request correction of your personal data if they have been processed incompletely or incorrectly, | |
| e) Request deletion or destruction of your personal data if the reasons requiring their processing cease to exist, | |
| f) Request that the actions carried out pursuant to subparagraphs (d) and (e) be notified to third parties to whom your personal data have been transferred, | |
| g) Object to the occurrence of a result against you arising from the analysis of your processed data exclusively through automated systems, | |
| ğ) Request compensation for damages if you suffer damage due to the unlawful processing of your personal data. |
Application Method
- In writing to the address Barbaros Mah. Serik (E) Cad. F Blok No: 419 F İç Kapı No: 2 Aksu/ANTALYA;
- To the KEP address [email protected] with a secure electronic signature,
- If your e-mail address is registered in our system, by sending an e-mail to [email protected].
Your application must include;
- Your name, surname and, if the application is made in writing, your signature,
- For citizens of the Republic of Türkiye, your Turkish ID number; if you are a foreign national, your nationality, passport number or, if any, identification number,
- Your residential or workplace address for notification purposes,
- If any, your e-mail address, telephone number and fax number for notification purposes,
- The subject of your request, and, if any, information and documents relating to the matter must also be attached to the application.
ATG HOTELS reserves the right to verify your identity.
You may access the procedural rules to be followed during the application and more detailed information in the Personal Data Protection Authority’s “Communiqué on the Procedures and Principles of Application to the Data Controller”.
Pursuant to the Personal Data Protection Law No. 6698 (the "Law"), Adalı Otelcilik Turizm Organizasyon Ticaret A.Ş. (hereinafter referred to as "ATG HOTELS") is deemed the Data Controller due to its processing of your personal data. In accordance with Article 10 of the Law, titled "Obligation to Inform," data controllers are required to inform the natural persons whose personal data they process regarding certain matters.
This Information Notice has been prepared by ATG HOTELS both to ensure compliance with the applicable legislation and to maintain transparency and accountability.
Definitions
Pursuant to the Personal Data Protection Law No. 6698:
Personal Data means any information relating to an identified or identifiable natural person;
Processing of Personal Data means any operation performed upon personal data, whether wholly or partly by automated means or by non-automated means provided that it forms part of a data recording system, including but not limited to the collection, recording, storage, retention, preservation, alteration, reorganization, disclosure, transfer, acquisition, making available, classification, or prevention of the use of personal data;
Data Subject refers to the natural person whose personal data is processed;
Data Controller refers to the natural or legal person who determines the purposes and means of processing personal data, and who is responsible for the establishment and management of the data recording system;
Obligation to inform refers to the obligation of the data controller or the person authorized by it, at the time personal data is collected, to inform data subjects regarding: the identity of the data controller, the purpose for which personal data will be processed, to whom and for what purpose the processed personal data may be transferred, the method and legal ground of personal data collection, and other rights listed under Article 11 of the Law;
Data Subject refers to the natural person who submits an application to the Data Controller in order to exercise the rights provided under Article 11 of the Law, and whose personal data is processed during the receipt, evaluation, and resolution of such application;
Data Controller: With respect to your personal data, [ATG HOTELS] is the Data Controller responsible for determining the purposes and means of processing your personal data and for the establishment and management of the data recording system.
| Processed Personal Data | Purposes of Processing | Legal Basis |
Identity Information (Name, Surname, Turkish ID Number, Foreigner ID Number, etc.)
Contact Information (telephone number, e-mail address, address information)
Application Subject and Request Details
Information Regarding Your Relationship with the Company
Signature Information
Personal Data Contained in the Information and Documents Submitted by You within the Scope of the Application
Transaction Safety and Log Records Obtained During the Evaluation of the Application |
Your personal data is processed for the purposes of receiving, evaluating, and finalizing your applications submitted under Article 11 of the Law; handling and monitoring requests and complaints; carrying out retention and archiving activities; and conducting legal affairs.
| The collection and retention of your personal data are carried out without requiring your explicit consent, based on the legal ground set forth in Article 5/2-ç of the Law, namely that such "processing is necessary for the Data Controller to fulfil its legal obligation". The collection, recording, and retention of the personal data you provide within the scope of your application for the applicable retention period are necessary to enable the exercise of the rights of the Data Subject under Article 11 of the Law and, pursuant to Article 13 of the Law and the Communiqué on the Procedures and Principles for Application to the Data Controller, for the purposes of receiving your application, verifying your identity, evaluating your request, concluding it within the statutory period, and providing you with a response. |
To Whom and For What Purpose Personal Data May Be Transferred
Within the framework of Article 28/1 of the Personal Data Protection Law (KVKK), your personal data may be transferred to relevant authorities upon request without the obligation to inform and without seeking your explicit consent.
In addition, in unforeseen circumstances expressly stipulated by law, your personal data may be transferred, upon request, to the public authorities designated by the applicable legislation (such as the Personal Data Protection Authority and administrative authorities including Ministries), solely for the purposes and within the limitations prescribed by law.
Except for our legal obligations that do not require compliance with the obligation to inform or obtaining your explicit consent, your personal data will not be transferred to any third party.
Methods of Collecting Personal Data
Your personal data is collected in both physical and electronic environments through the following means: the Data Subject Application Form; written applications; applications submitted through a Notary Public; applications submitted via Registered Electronic Mail (KEP); applications signed with a secure electronic signature or mobile signature; applications submitted through the e-mail address registered in the Company's system; and the additional information and documents submitted by you within the scope of your application.
Your Rights Regarding Your Personal Data
| Pursuant to the Law, regarding your personal data: | |
| a) To learn whether your personal data is being processed, | |
| b) To request information if your personal data has been processed, | |
| c) To learn the purpose of processing your personal data and whether it is being used in accordance with its purpose, | |
| ç) To know the third parties to whom your personal data has been transferred within Türkiye or abroad, | |
| d) To request the correction of your personal data if it has been processed incompletely or inaccurately, | |
| e) To request the erasure or destruction of your personal data where the reasons requiring its processing no longer exist, | |
| f) To request that the operations carried out pursuant to sub-paragraphs (d) and (e) be notified to the third parties to whom your personal data has been transferred, | |
| g) To object to any result to your detriment arising from the analysis of your processed personal data exclusively through automated systems, | |
| ğ) To request compensation for the damage you have suffered as a result of the unlawful processing of your personal data. |
Application Method to the Data Controller
You may submit your application by one of the following methods:
- In writing to the following address: Barbaros Mah. Serik (E) Cad. F Blok No: 419 F İç Kapı No: 2 Aksu/ ANTALYA;
- By sending it to the Registered Electronic Mail (KEP) address [email protected], signed with a secure electronic signature or mobile signature;
- If your e-mail address is registered in our system, by sending an e-mail from the same registered e-mail address to [email protected].
Your application must include the following information;
- Your full name, and if the application is submitted in writing, your signature;
- For citizens of the Republic of Türkiye, your Turkish Identification Number (T.R. ID No.); if you are a foreign national, your nationality, passport number, or, where applicable, your identification number;
- Your residential or business address for service of notices;
- Where available, your e-mail address, telephone number, and fax number for notification purposes;
- The subject matter of your request. Where applicable, any information and supporting documents relating to your request must also be attached to the application.
ATG HOTELS reserves the right to verify your identity.
Further information regarding the procedural requirements applicable to applications may be found in the "Communiqué on the Procedures and Principles for Application to the Data Controller" issued by the Personal Data Protection Authority.
