Personal Data Protection and Privacy Policy

1. Identity of the Data Controller

In accordance with the Personal Data Protection Law No. 6698 ("KVKK"), DEPOT KONAKLAMA HİZMETLERİ ANONİM ŞİRKETİ ("The Casa Cala", "Hotel", or "Company"), residing at Harbiye Mah. Teşvikiye Cad. No: 41 Şişli / Istanbul, acts as the data controller and processes your personal data within the scope of the purposes explained below, in compliance with the law and the rules of good faith.

2. Processed Personal Data and Purposes of Processing

Your identity, contact, financial, visual, and audio records, as well as customer transaction data obtained due to your stay at our facility, benefiting from our services, or visiting our website, are processed for the following purposes:

• Execution of accommodation and reservation processes,
• Ensuring security within the hotel (CCTV closed-circuit camera systems),
• Planning VIP services and privileges aimed at guest satisfaction,
• Fulfillment of our legal and administrative obligations (e.g., Identity Notification Law),
• Providing personalized campaigns and event communications (E-Newsletter), subject to your explicit consent.

Payment Security and Financial Data: For online reservation payments made via our Virtual POS, your credit card information is never stored on our hotel servers. All payment transactions are encrypted (SSL) and securely processed directly through authorized payment institutions that hold high-security PCI-DSS certifications.

3. Transfer of Personal Data

Your personal data may be shared with legally authorized public institutions (law enforcement, ministries, etc.), contracted business partners, IT and security infrastructure suppliers, and authorized legal authorities for the follow-up of legal processes, strictly within the conditions specified in Articles 8 and 9 of the KVKK. The Casa Cala maintains the highest level of guest privacy and never shares non-mandatory data with third parties for commercial purposes.

4. Method and Legal Basis for Collecting Personal Data

Your personal data is collected via reservation/contact forms filled out on our website, documents received during check-in, call center interactions, and security cameras within the facility. This data is processed based on the legal grounds stipulated in Article 5/2 of the KVKK: "It is necessary for the establishment or performance of a contract," "It is mandatory for the data controller to fulfill its legal obligation," and "Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject."

5. Rights of the Data Subject

As a personal data owner, you possess the following rights:

• To learn whether your personal data is processed and request information if it has been processed,
• To learn the purpose of processing and whether it is used accordingly,
• To know the third parties to whom personal data is transferred domestically or abroad,
• To request correction if processed incompletely or inaccurately, and to request deletion/destruction,
• To object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems.

6. Data Controller Contact Information

To exercise your rights mentioned above and for any questions regarding your personal data, you can contact us via our official company details below:

• Commercial Title: DEPOT KONAKLAMA HİZMETLERİ ANONİM ŞİRKETİ
• Headquarters: Harbiye Mah. Teşvikiye Cad. No: 41 Şişli / Istanbul, Türkiye
• Tax Office and No: Beyoğlu / 2920641341
• Phone: +90 252 606 06 49
• Email: info@thecasacala.com