KVKK Disclosure Notice

Trade name: Fatih Doğramacı (Doğramacı Hotel)

Address: Yunusemre Mahallesi, Hoca Ahmet Yesevi Caddesi No: 1, Tosya / Kastamonu, Türkiye

Contact: 0366 313 22 22 · hoteldogramaci@gmail.com

Identity data: first name, last name, Turkish ID number; for foreign guests, the identity and passport details required by legislation. The identity document is only viewed for verification; a photocopy is not taken or kept.

Contact data: telephone number, email address and address.

Customer transaction data: reservation, check-in and check-out dates, room and service details, and your special requests.

Financial data: for invoicing, first and last name or trade name, address, tax office and tax or Turkish ID number. Your card details are not stored at our hotel.

Transaction security data: for guest internet access, IP address, device information and connection time.

Physical premises security data: camera recordings in the car park and common areas.

Your personal data is processed, in a limited and proportionate manner connected with these purposes, for: providing accommodation and event services, taking and managing reservations, and handling your requests and complaints; fulfilling legal obligations such as identity notification, invoicing and keeping accounting and tax records; ensuring the safety of the hotel, guests and staff; fulfilling legal obligations relating to internet access; and establishing, exercising or protecting our rights in possible disputes. Your data is not used for marketing purposes.

Your personal data may be transferred, limited to the relevant purpose and where necessary, to the following recipient groups: law enforcement authorities under the identity notification obligation; our accountant and the competent tax authority under invoicing and tax legislation; hotel software, IT and security system providers we use to run the service; and public bodies and courts authorised by law. Your data is not transferred to third parties for marketing purposes.

Your data is collected through the information you provide in person or by telephone at registration, and through the hotel’s register and hotel software, the guest internet access system and the camera system, by automated, partly automated or non-automated means that form part of a data recording system.

Legal bases (Law Art. 5/2): expressly provided for by law (a); being directly related to the establishment or performance of a contract (c); being mandatory for the data controller to fulfil its legal obligation (ç); being mandatory for the establishment, exercise or protection of a right (e); being mandatory for the legitimate interests of the data controller, provided that this does not harm the fundamental rights and freedoms of the data subject (f). Security cameras rely on the legitimate interest basis.

As a data subject, you have the right to learn whether your personal data is processed; to request information if it has been processed; to learn the purpose of processing and whether it is used accordingly; to know the third parties to whom data is transferred in Türkiye or abroad; to request correction of incomplete or inaccurate data; to request deletion or destruction under the conditions set out in the Law; to request that these actions be notified to third parties to whom data has been transferred; to object to a result against you arising from analysis exclusively by automated systems; and to claim compensation for damage arising from unlawful processing.

You can submit your requests regarding your rights by a wet-signed written application containing information that identifies you and states your request, delivered in person or through a notary to Yunusemre Mahallesi, Hoca Ahmet Yesevi Caddesi No: 1, Tosya / Kastamonu, Türkiye. You can also send to hoteldogramaci@gmail.com an application signed with a secure electronic signature or mobile signature, or an application sent from the email address you previously notified to us and which is registered in our system. Your applications are concluded free of charge as soon as possible according to the nature of the request and within thirty days at the latest; if the process requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be charged.