Data controller
Yiğitoğlu Tur. İnş. Otom. San. İç ve Dış Tic. Ltd. Şti. is the data controller for the Dilek Kaya Hotel website and the communications described in this notice.
Scope and contact details
This notice covers booking referrals, privacy preferences, and contact with the hotel through the Dilek Kaya Hotel website. Separate information is provided for identity reporting, payments, and other processes during your stay.
Our contact address is: Bahçelievler Mah. Mecit Yavuz Sk. No: 55, 50650 Ortahisar, Ürgüp / Nevşehir. For questions about your personal data, contact us at [email protected].
What information do we use, and why?
The dates and numbers of rooms and guests you select are used to open the booking page for your stay. When you select Book your stay, this information is sent to Reseliva as URL parameters. This page does not ask for your name, identity details, or payment information.
When you contact us by phone, email, or WhatsApp, we use the contact details and messages you share to answer your request and handle the booking services you ask for. For requests before booking, the legal basis is Article 5/2-c of Türkiye’s Personal Data Protection Law (KVKK), covering processing directly related to entering into or performing a contract. Article 5/2-e applies to correspondence that must be kept to establish, exercise, or protect a right.
Your map and Instagram choices are stored in your browser to remember your preferences and display the content you allow. These optional features are enabled with your explicit consent under Article 5(1) of the Turkish Personal Data Protection Law; you may withdraw permission at any time. The preference record is not used to create an advertising profile.
Contact data necessary to answer general questions unrelated to a booking is processed on the basis of our legitimate interest in responding to enquiries, provided that your fundamental rights and freedoms are not harmed (KVKK Article 5/2-f). Using a communication channel does not constitute permission to receive marketing messages.
How we collect information
The information you enter in the booking fields and the preference record in your browser are collected automatically by electronic means. Email and WhatsApp messages are received electronically through those channels. Information you share by phone is received verbally; when entered into an enquiry or booking record, it is processed as part of a filing system.
Website delivery and security
Cloudflare processes IP addresses, requested URLs, request times and browser information to deliver and protect the site. This processing is independent of map and Instagram permissions.
This information is collected automatically by electronic means when you access the site. Processing to keep the site secure and accessible is based on the necessity of the controller’s legitimate interests, provided that your fundamental rights and freedoms are not harmed (Article 5(2)(f) of the Turkish Personal Data Protection Law). Cloudflare is the technical service provider receiving this information for these purposes.
Email service
The hotel uses Pair Networks for its email service. When you email us, the sender and recipient addresses, message content, any attachments and technical delivery information are processed by this service provider to receive and deliver the message. Pair Networks states that it processes personal data in the United States as part of its services. This process is independent of the map or Instagram preference on the website.
Pair Networks privacy statement
Service providers and external links
Cloudflare uses a global service network, so technical connection data may be processed outside Türkiye. The OpenStreetMap map loaded with your permission may also connect to servers abroad. Permission for optional content does not replace the international transfer requirements in Article 9 of the Turkish Personal Data Protection Law.
With your permission, map images load from OpenStreetMap and Instagram images from Meta servers. These connections send your IP address and browser technical information to the relevant provider, where they may be processed outside Türkiye. Content you do not allow remains unloaded; directions and the Instagram account are available through external links.
Links to Reseliva, Google Maps, Instagram, or WhatsApp take you to those services. Please review each provider’s privacy notice for information about data processing on its platform. This website does not collect marketing consent. Choosing to book or contact us does not count as permission to send advertising.
Preferences and retention
Your preferences are saved in your browser for 180 days, after which you will be asked to choose again. You can change map and Instagram permissions through “Cookie preferences” in the footer. Withdrawing permission stops future loading.
Enquiries that do not lead to a booking are used to respond to your request; no separate customer archive is created. Email and message retention depends on the status of the request, legal obligations and the need to protect legal rights. The 180-day preference period does not apply to these records.
Your rights and how to make a request
Under Article 11 of the KVKK, you may ask whether your personal data is processed and, if so, request information about the processing, its purpose, whether the data is used for that purpose, and the third parties to whom it is transferred in Türkiye or abroad. You may request correction of incomplete or inaccurate data, deletion or destruction when the legal conditions are met, and notification of these actions to third parties who received the data. You may object to an adverse outcome resulting solely from automated analysis of your data and seek compensation for damage caused by unlawful processing.
You may submit a request using the methods set out in the Communiqué on the Principles and Procedures for Requests to the Data Controller. Send written requests to the mailing address above, or email us for information about the process. Requests are resolved as soon as possible, depending on their nature, and within 30 days at the latest. If the process involves additional costs, a fee may be charged according to the tariff set by the Personal Data Protection Board.
Guest reviews
We share excerpts from public Google and Tripadvisor reviews to present guest experiences. We retain the platform name or username, rating and available date, and identify sources and translations. Contact us to request a correction or removal.
Last updated: 24 September 2026
