Политика конфиденциальности и GDPR

Bodrumapartkiralama.com (the "Company") processes your personal data as the data controller in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK") and applicable GDPR principles. This notice explains how and why we process your data.

1. Data Controller

Website: bodrumapartkiralama.com
Contact: info@bodrumapartkiralama.com

2. Categories of Data

• Identity: Full name.
• Contact: Email, phone number.
• Booking data: Check-in / check-out, guest count, apartment preference, special requests.
• Technical: IP address, browser info, cookie preferences.

3. Purposes

• To evaluate your booking request and contact you.
• To confirm availability, share payment details, and process bookings.
• To handle cancellations, changes and refunds.
• To comply with legal obligations (tax, accounting, tourism regulations).
• To improve service quality and run statistical analyses.

4. Legal Basis

We process your data based on contract performance, legal obligations, and legitimate interests. We rely on your explicit consent for marketing and cookie usage.

5. Transfers

Your data may be shared with partner transfer/tour/apartment owners, legal authorities, and infrastructure providers (Vercel, Resend). International transfers comply with KVKK Article 9 and applicable safeguards.

6. Retention

Booking data is kept for the legally required periods (10 years commercial, 5 years tax). Marketing data is kept until you withdraw consent.

7. Your Rights

• Learn whether your data is being processed.
• Request information if processed.
• Request correction or deletion.
• Learn the third parties data has been shared with.
• Object to results from purely automated processing.
• Claim compensation in case of damage.

To exercise these rights, send a written request to info@bodrumapartkiralama.com. We respond within 30 days.

8. Cookies

We use cookies for performance, analytics and marketing. You can change cookie preferences in your browser at any time.

This text is a template. Have it reviewed by a lawyer or data protection specialist before going live.