Data controller
Yiğitoğlu Tur. İnş. Otom. San. İç ve Dış Tic. Ltd. Şti. is the data controller for the Dilek Kaya Hotel website and the communications described in this notice.
Scope and contact details
This notice covers booking referrals, privacy preferences, and contact with the hotel through the Dilek Kaya Hotel website. Separate information is provided for identity reporting, payments, and other processes during your stay.
Our contact address is: Bahçelievler Mah. Mecit Yavuz Sk. No: 55, 50650 Ortahisar, Ürgüp / Nevşehir. For questions about your personal data, contact us at [email protected].
What information do we use, and why?
The dates and numbers of rooms and guests you select are used to open the booking page for your stay. When you select Book your stay, this information is sent to Reseliva as URL parameters. This page does not ask for your name, identity details, or payment information.
When you contact us by phone, email, or WhatsApp, we use the contact details and messages you share to answer your request and handle the booking services you ask for. For requests before booking, the legal basis is Article 5/2-c of Türkiye’s Personal Data Protection Law (KVKK), covering processing directly related to entering into or performing a contract. Article 5/2-e applies to correspondence that must be kept to establish, exercise, or protect a right.
Your map and Instagram choices are stored in your browser to remember your preferences and display the content you allow. These optional features are enabled with your explicit consent under Article 5(1) of the Turkish Personal Data Protection Law; you may withdraw permission at any time. The preference record is not used to create an advertising profile.
Contact data necessary to answer general questions unrelated to a booking is processed on the basis of our legitimate interest in responding to enquiries, provided that your fundamental rights and freedoms are not harmed (KVKK Article 5/2-f). Using a communication channel does not constitute permission to receive marketing messages.
How we collect information
The information you enter in the booking fields and the preference record in your browser are collected automatically by electronic means. Email and WhatsApp messages are received electronically through those channels. Information you share by phone is received verbally; when entered into an enquiry or booking record, it is processed as part of a filing system.
Website delivery and security
The website is delivered through Cloudflare. When you open a page, this provider processes your IP address, the requested address, request time and technical information sent by your browser to establish the connection, deliver content and prevent abuse. This technical processing is separate from optional map permission.
This information is collected automatically by electronic means when you access the site. Processing to keep the site secure and accessible is based on the necessity of the controller’s legitimate interests, provided that your fundamental rights and freedoms are not harmed (Article 5(2)(f) of the Turkish Personal Data Protection Law). Cloudflare is the technical service provider receiving this information for these purposes.
Email service
The hotel uses Pair Networks for its email service. When you email us, the sender and recipient addresses, message content, any attachments and technical delivery information are processed by this service provider to receive and deliver the message. Pair Networks states that it processes personal data in the United States as part of its services. This process is independent of the map or Instagram preference on the website.
Pair Networks privacy statement
Service providers and external links
Cloudflare uses a global service network, so technical connection data may be processed outside Türkiye. The OpenStreetMap map loaded with your permission may also connect to servers abroad. Permission for optional content does not replace the international transfer requirements in Article 9 of the Turkish Personal Data Protection Law.
With your permission, map images load from OpenStreetMap and Instagram images from Meta servers. These connections send your IP address and browser technical information to the relevant provider, where they may be processed outside Türkiye. Content you do not allow remains unloaded; directions and the Instagram account are available through external links.
Links to Reseliva, Google Maps, Instagram, or WhatsApp take you to those services. Please review each provider’s privacy notice for information about data processing on its platform. This website does not collect marketing consent. Choosing to book or contact us does not count as permission to send advertising.
Preferences and retention
Privacy tercihiniz bu tarayıcıda 180 gün geçerlidir. Süre dolduğunda yeniden seçim yapmanız istenir. You can change your map permission through Cookie preferences at the bottom of the page. İzni geri almanız sonraki yüklemeleri durdurur; daha önce gerçekleşmiş bağlantıları geri alamaz.
Information you share in enquiries that do not lead to a booking is used to answer your enquiry and handle the communication; no separate customer archive is created for this correspondence. Records remaining in email and messaging services are also subject to personal data protection obligations. The need to retain them is assessed according to whether the enquiry is ongoing and whether applicable legal obligations or the protection of legal rights require retention. The 180-day browser preference period is not the retention period for correspondence or booking records.
Your rights and how to make a request
Under Article 11 of the KVKK, you may ask whether your personal data is processed and, if so, request information about the processing, its purpose, whether the data is used for that purpose, and the third parties to whom it is transferred in Türkiye or abroad. You may request correction of incomplete or inaccurate data, deletion or destruction when the legal conditions are met, and notification of these actions to third parties who received the data. You may object to an adverse outcome resulting solely from automated analysis of your data and seek compensation for damage caused by unlawful processing.
You may submit a request using the methods set out in the Communiqué on the Principles and Procedures for Requests to the Data Controller. Send written requests to the mailing address above, or email us for information about the process. Requests are resolved as soon as possible, depending on their nature, and within 30 days at the latest. If the process involves additional costs, a fee may be charged according to the tariff set by the Personal Data Protection Board.
Guest reviews
Our website displays selected excerpts from reviews that guests have publicly posted about our hotel on Google and Tripadvisor. The name or username used on the platform, review text, rating and date, where available, are displayed to share guest experiences with our visitors. Sources are identified; excerpts preserve the meaning of the original and translations are labelled. You can contact us to request a correction or removal of the review as displayed on our website.
Last updated: 24 September 2026
