Personal Data Protection Law

INFORMATION NOTICE UNDER THE LAW ON THE PROTECTION OF PERSONAL DATA

1. Data Controller

In accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”), your personal data may be processed by the data controller, Sammy & Sally Trading Limited (Sammy's Hotel), within the scope explained below.

Title: Sammy & Sally Trading Limited (Sammy's Hotel)
Company Registration No: MŞ 22285
Address: Ömer Sami Coşar Street No.7, Kyrenia / Turkish Republic of Northern Cyprus 99300
Phone: +90 (392) 815 62 79
E-mail: info@sammysotel.com

2. Purposes of Processing Personal Data

Your personal data collected by us are processed for the purposes stated below, in accordance with the conditions set forth in Articles 5 and 6 of the KVKK:

• Provision of Accommodation Services: Receiving, managing, confirming, and ensuring the complete delivery of your accommodation and reservation requests.
• Management of Contractual Processes: Establishment and execution of the Distance Sales Agreement.
• Financial and Accounting Transactions: Payment of service fees, invoicing, collection, and refund processes (where applicable).
• Communication Activities: Contacting you regarding your reservation details, changes, or cancellations.
• Fulfillment of Legal Obligations: Reporting guest identity information to the security authorities pursuant to the Law on Identity Notification No. 1774, and fulfilling obligations arising from tax and other legal regulations.
• Customer Relationship Management: Evaluating and resolving your requests, complaints, and suggestions; conducting guest satisfaction surveys and feedback processes.
• Ensuring Physical Security: Ensuring personal and property safety in hotel common areas through security cameras (CCTV).
• Marketing and Promotional Activities: With your explicit consent, sending commercial electronic messages (e-mail, SMS) regarding general or personalized campaigns, discounts, promotions, and new services.
• Information Security: Ensuring the security of the website and other information systems.

3. Transfer of Personal Data to Third Parties and Purposes of Transfer

Your personal data may be shared with third parties, in accordance with Articles 8 and 9 of the KVKK, for the purposes mentioned above:

• Authorized Public Institutions: To the Police Directorate and Gendarmerie Command as legally required, and to other public authorities such as tax offices or courts when requested.
• Suppliers and Business Partners: To banks and payment service providers for processing payments; to IT service providers (hosting, software, server services); and, with your consent, to marketing service providers for the delivery of commercial electronic communications.
• For Legal Processes: To lawyers, auditors, and consultants when necessary for legal or consultancy purposes.

4. Method and Legal Basis for Collecting Personal Data

Your personal data are collected by our Company through automatic or non-automatic means such as:
our website reservation forms, e-mail, phone, online sales channels, and physical registration forms during check-in.

Your personal data are processed based on the following legal grounds under Article 5 of the KVKK:

• Necessity for the performance of a contract (for the provision of reservation and accommodation services),
• Compliance with legal obligations (e.g., identity notification, invoicing),
• Legitimate interests of the data controller provided that it does not harm fundamental rights and freedoms (e.g., ensuring physical security),
• Explicit consent (for marketing and promotional communications).

5. Rights of the Data Subject

Pursuant to Article 11 of the KVKK, as a data subject, you have the following rights:

a) To learn whether your personal data are being processed,
b) To request information if your personal data have been processed,
c) To learn the purpose of processing and whether your data are used in accordance with such purpose,
d) To know the third parties to whom your data are transferred domestically or abroad,
e) To request correction of your personal data if they are incomplete or incorrect,
f) To request deletion or destruction of personal data within the framework of Article 7 of the KVKK,
g) To request notification of the actions taken pursuant to (e) and (f) to third parties to whom the data have been transferred,
h) To object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems,
i) To demand compensation for damages arising from unlawful processing of personal data.

You may submit your requests regarding your rights by e-mail to info@sammysotel.com or in writing to the address Ömer Sami Coşar Street No.7, Kyrenia / Turkish Republic of Northern Cyprus 99300.
Your application will be concluded as soon as possible and free of charge.