Privacy Policy

1. Data Controller

OtelCiro is the data controller for all personal data collected through this website.

Contact: [email protected]

2. Personal Data We Collect

The following personal data may be collected during your use of our website:

• Identity information: Name, surname, title
• Contact information: Email address, phone number, WhatsApp number
• Business information: Hotel name, number of rooms, location, website
• Technical data: IP address, browser type, device information, cookie data
• Usage data: Pages visited, click data, session duration
• Form data: Information shared through contact forms, demo requests, or consultation applications

3. Purposes of Data Processing

Your personal data is processed for the following purposes:

• To provide, manage, and improve our services
• To evaluate your demo requests and consultation applications
• To provide customer support and respond to your inquiries
• To send product updates and industry content with your consent
• To analyze website performance and improve user experience
• To fulfill our legal obligations

4. Legal Basis

Your personal data is processed under Articles 5 and 6 of KVKK based on the following legal grounds:

• Your explicit consent (for marketing communications)
• Necessity for the performance or establishment of a contract
• Fulfillment of our legal obligations
• Our legitimate interests (website security and performance analytics)

5. Data Sharing

Your personal data is not shared with third parties except in the following cases:

• Service providers: Your data may be processed for hosting (Google Cloud Platform), email (Resend), analytics (Google Analytics), and CRM services
• Legal obligation: Upon request from authorized public institutions
• With your explicit consent

Your data is never sold or commercially transferred to third parties under any circumstances.

6. Cookies

Our website uses cookies to improve your experience and analyze site performance.

• Essential cookies: Required for the proper functioning of the website
• Analytics cookies: Anonymously analyze visitor behavior (Google Analytics)
• Functional cookies: Remember your language preference and session information

You can manage or disable cookies through your browser settings. However, some site features may not function properly if cookies are disabled.

7. Data Retention Period

Your personal data is retained for the duration required by the processing purpose. Contact form data is stored for a maximum of 2 years, analytics data for 26 months, and email subscription data until you unsubscribe. Subject to legal obligations, your data is deleted, destroyed, or anonymized when the retention period expires.

8. Data Security

We implement the following technical and administrative measures to ensure the security of your personal data:

• Data transmission via SSL/TLS encryption
• Access controls against unauthorized access
• Secure hosting on Google Cloud Platform infrastructure
• Regular backup and data recovery procedures
• Periodic security audits

9. Your Rights Under KVKK & GDPR

You have the following rights under Article 11 of KVKK and GDPR:

• Learn whether your personal data is being processed
• Request information about the processing if applicable
• Learn the purpose of processing and whether data is used accordingly
• Know the third parties to whom data is transferred domestically or abroad
• Request correction if data is incomplete or inaccurate
• Request deletion or destruction under Article 7 of KVKK
• Object to any result arising from automated analysis of your data
• Claim compensation for damages caused by unlawful processing

To exercise these rights, please submit a written request to [email protected]. Your request will be processed within 30 days at the latest.

10. Children's Privacy

Our website is not intended for individuals under the age of 18. We do not knowingly collect personal data from anyone under 18. If you become aware of such a situation, please contact us.

11. International Data Transfers

Some of our service providers (Google Cloud Platform, Resend) may process data outside the European Economic Area (EEA). In such cases, we ensure that adequate security measures are in place in compliance with KVKK and GDPR.

12. Policy Changes

We may update this Privacy Policy from time to time. In the event of significant changes, we will provide notice on our website. You can always find the current version on this page.

13. Contact

For questions about our privacy policy or the processing of your personal data:

For applications under KVKK, please submit a written request to [email protected] with information verifying your identity.