Dear Visitor,

We would like to inform you about the Protection of Personal Data Law. According to the Personal Data Protection Law No. 6698 ("KVKK"), your personal data, including any information that identifies or can identify you and your sensitive personal data, may be processed by [LOSTA BOUTIQUE HOTEL] as the data controller.

Processing of personal data refers to any operation performed on data, including the collection, recording, storage, retention, alteration, reorganization, disclosure, transfer, classification, or prevention of use of personal data. The protection of your personal data is of vital importance to us, and we want you to know that we take utmost care in ensuring the security of your personal data.

1. Data Controller Identity

In accordance with the Personal Data Protection Law No. 6698, your personal data may be processed by [LOSTA BOUTIQUE HOTEL] as the data controller, within the scope described below, in compliance with the law and principles of honesty, to the extent permitted by the legislation, and limited to the purposes for which they are processed.

2. Purpose of Processing Personal Data

Our company processes personal data within the purposes and conditions specified in Article 5, Paragraph 2, and Article 6, Paragraph 3 of Law No. 6698 on the Protection of Personal Data. These purposes and conditions include:

- The explicit provision of our company's involvement in the processing of your personal data according to the law,
- The necessity of processing your personal data by our company for the establishment or performance of a contract,
- The mandatory processing of your personal data by our company to fulfill its legal obligations,
- The limited processing of your personal data by our company for the purpose of publicity, provided that they have been made public by you,
- The necessity of processing your personal data by our company to establish, exercise, or protect the rights of our company, you, or third parties,
- The necessity of processing personal data for our legitimate interests, provided that they do not harm your fundamental rights and freedoms,
- The necessity of processing personal data by our company for the protection of life or physical integrity of the data subject or another person when it is impossible to obtain explicit consent due to physical impossibility or legal invalidity,
- The processing of special categories of personal data other than health and sexual life when required by law,
- The processing of special categories of personal data related to health and sexual life by persons or authorized institutions and organizations under the obligation of confidentiality for the protection of public health, preventive medicine, medical diagnosis, treatment, and care services, planning and management of health services and their financing.

In the absence of these conditions, our company seeks the explicit consent of the data subjects to process personal data. Under the aforementioned conditions, our company may process personal data for the following purposes, among others:

- Carrying out the commercial activities of the company by our relevant departments and executing related business processes,
- Planning and executing activities to ensure the continuity of business operations,
- Monitoring financial and/or accounting transactions,
- Providing information to authorized institutions as required by legislation,
- Planning and executing corporate communication activities,

Carrying out necessary activities by our departments to benefit the relevant individuals from the products and services offered by our company and executing related business processes,

- Planning and executing customer relationship management processes,
- Tracking customer requests and/or complaints,
- Planning and/or executing after-sales support activities,

Carrying out necessary activities to personalize the products and services offered by our company according to the preferences, usage habits, and needs of the data subjects,

- Planning and executing market research activities for the sale and marketing of products and services,
- Sales, after-sales, and purchasing operations,

Carrying out the processes of customer reservations and check-in/check-out,

- Planning and/or executing processes

to establish and/or increase loyalty to the products and/or services offered by the company,
- Ensuring the implementation of our company's human resources policies,
- Ensuring the legal and commercial security of our company and individuals in business relationship with our company,
- Organizing and managing events,
- Carrying out occupational health and safety activities,
- Fulfilling notification obligations to relevant/authorized public institutions,
- Carrying out information and physical security processes,
- Verifying the information of individuals conducting transactions through our corporate website and mobile applications,
- Recording address and other necessary information for communication regarding notifications made via the Contact Center,
- Ensuring the security of our employees, guests, and company buildings through video recording and other security measures and controlling entries and exits,
- Determining the communication and content of voice and call recordings when communication is established with our call centers or company phones,
- Creating statistical data, recording visitor information, and providing feedback when our website is visited.

All necessary technical and administrative measures are taken to prevent the unlawful processing and unauthorized access to your personal data and to ensure the secure storage of your personal data.

3. To whom and for what purposes it can be transferred

Your personal data processed within the scope of the mentioned purposes will be securely stored. In accordance with the fundamental principles stipulated in the KVKK and the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK, your personal data may be transferred to public institutions due to notification obligations, legal regulations, banks related to the legal basis of contract performance, hospitals and healthcare institutions for emergency medical interventions and occupational health and safety obligations, and domestically/internationally within the framework of legal grounds and your consent, for the purposes of personal data processing mentioned above.

Our company, taking necessary security measures in line with lawful purposes of personal data processing, can transfer the personal data and special category personal data of the data subject to third parties abroad.

Personal data processed by our company can be transferred to foreign countries that have been declared to have sufficient protection by the DPA Institution ("Foreign Country with Adequate Protection"), or to foreign countries where there is no adequate protection but the data controllers in Turkey and the relevant foreign country have undertaken to provide sufficient protection in writing and have the permission of the DPA Institution ("Foreign Country where Data Controller Providing Adequate Protection is Located"). In this regard, our company acts in compliance with the regulations envisaged in Article 9 of the KVKK.

4.Method and Legal Basis of Personal Data Collection

Your personal data, depending on the services provided by our company and our company's commercial activities, may vary; however, they can be collected through automated or non-automated methods, with all accommodation documents, application forms, and other documents related to transactions arranged with your consent and/or signature, by our company units and departments, website, social media platforms, mobile applications, and similar means, orally, in writing, or electronically. Additionally, when you use our company's call centers or website to access our services, visit our company or our website, or participate in training, seminars, or events organized by our company, your personal data may be processed.

Your personal data is obtained in written, verbal, or electronic form through automated or non-automated means, in accordance with Articles 5 and 6 of the Law and the purposes stated above.

5. Rights of the Data Subject

As data subjects, you have the following rights. If you submit your requests regarding your rights to our Company through the methods outlined below, our Company will respond to your request free of charge within a maximum of 30 (thirty) days, depending on the nature of the request. However, if the response process incurs additional costs, our Company may request a fee according to the tariff determined by the Personal Data Protection Board. In this context, data subjects have the right to:

• Learn whether their personal data is being processed,
• Request information if their personal data has been processed,
• Learn the purpose of processing personal data and whether they are used in line with their purpose,
• Be informed about the third parties to whom personal data is transferred domestically or abroad,
• Request the rectification of personal data if it is incomplete or inaccurately processed and request the notification of the transaction made within this scope to the third parties to whom personal data has been transferred,
• Request the erasure or destruction of personal data in the event that the reasons requiring its processing cease to exist, despite being processed in accordance with the Law on the Protection of Personal Data and other relevant legislation, and request the notification of the transaction made within this scope to the third parties to whom personal data has been transferred,
• Object to the occurrence of a result against the person arising from the analysis of the processed data exclusively through automated systems,
• Demand the remedy of damages in case of suffering damages due to the unlawful processing of personal data.

As the data subject, you are required to submit your rights requests in writing to our Company. In this regard, in order to ensure the proper and expeditious management of your applications within the scope of Article 11 of the Law on the Protection of Personal Data, we recommend that you use the "Data Subject Information Request Application Form" available under the "Personal Data Protection" heading on our website www.selimiyelostabeach.com, and submit your request in person or by registered mail along with the necessary documents identifying your identity, which may be requested depending on your request. Additionally, you can also use the data subject information request form as an online user (with the Electronic Mail Address previously notified to us and registered in our system) by sending your request to kvkkbilgi@selimiyelostabeach.com.

For more detailed information, you can review the "Data Subject Information Request Application Form" under the "Personal Data Protection" heading on our website www.selimiyelostabeach.com.

Our Company uses Cookies on its website to fulfill the services provided to our valued customers. By visiting our website, you agree to the placement of cookies on your device that are necessary for the use of the website.

What is a Cookie?

Cookies are small electronic files containing information that are added to your device when you visit our website. Cookies help to remember information about your device, such as language, settings, etc., due to the automatic pre-identification of web browsers, in the virtual world.

Session Cookies Session cookies are cookies that are valid during your use of the website and remain valid until the web browser is closed.

Persistent Cookies These cookies are cookies that are stored in your browser and remain valid until they are deleted by you or until the expiration date.

Mandatory Cookies Mandatory cookies are cookies that are mandatory for the proper functioning of the website and for you to benefit from the features and services offered by the site.

Functional and Analytical Cookies These cookies are used for purposes such as remembering your preferences, the effective use of the website, and optimizing the site to respond to your requests. Due to their nature, these types of cookies may contain your personal data. For example, cookies that remember your viewing language preference on the website are functional cookies.

Tracking Cookies Tracking cookies are primary and third-party cookies created during your visit to our website and domain names owned by third parties. These cookies allow tracking of your click and visit history in the domain names where they are created and mapping these records between different domain names. These types of cookies are used for the recognition and profiling of users, targeting of advertising and marketing activities, and personalization of content. These cookies will not be used to identify you or make individual decisions about you.

In general, our purposes of using cookies are:

• Saving and personalizing user experiences and preferences on websites for their subsequent visits,
• To improve your website visit experience,
• For promotional activities related to your interests,
• To customize our website according to your preferences,
• To enhance website performance.

No confidential information of users is stored in any of the cookies we use. Please note that if you do not configure your browser, you will accept the cookies provided by this website.

To disable cookies:

In Chrome, you can use the "Settings/Privacy/Content Settings/Turn off cookie usage" option in your browser settings. For Internet Explorer users: You can use the "Options/Internet Options/Privacy/Settings" options. For Firefox users: You can use the "Tools/Options/Privacy/Cookie acceptance method/Until Firefox is closed" options. For Safari users: "Preferences/Privacy/Website Data/Select one or more websites/Delete All"

Notification Regarding Policy Changes

In the event of changes to the content of this Policy or new additions, the most up-to-date policy will be provided on our website to ensure transparency for our users and inform them about how we collect and use data.