Personal Data Protection Notice

01Identity of the Data Controller

Data controller: Monezza Maltepe Rezidans

Address: Bağlarbaşı Mahallesi Kumru Sokak No: 14 Maltepe / Istanbul

Phone: +90 216 410 44 34 · +90 507 191 30 30

Email: info@monezzamalteperezidans.com

02Categories of Personal Data Processed

• Identity data: name, surname, national ID / passport number, date of birth, nationality (for the mandatory guest notification)
• Contact data: phone number, email address, address
• Customer transaction data: booking and stay dates, room preferences, requests and notes
• Financial data: invoice details, payment and collection records
• Physical security data: CCTV recordings where in use, entry and exit logs
• Transaction security data: IP address, internet access logs, cookie data about site usage
• Special categories: allergy, disability or special-needs information only if you share it (with your explicit consent)
• Professional experience data: CV details submitted with job applications
• Customer communication records: complaints, suggestions, requests and satisfaction feedback

03Purposes of Processing

• Receiving booking requests and providing accommodation services
• Identity verification and mandatory notifications under Identity Notification Law No. 1774
• Invoicing, accounting and finance processes
• Answering requests received via the website, phone, WhatsApp and email
• Measuring guest satisfaction and handling complaints and suggestions
• Ensuring the security of the property and guests
• Planning meeting-room and event requests
• Evaluating job applications
• Using records as evidence in legal disputes and responding to requests from authorities
• Campaign, promotion and analytics activities where you have given explicit consent

04Collection Methods and Legal Grounds

Your personal data is collected verbally, in writing or electronically through reception, the contact, careers and stay-request forms on our website, the Monezza Assistant, the online booking system, phone, WhatsApp, email, cookies, CCTV systems where in use, and third-party booking platforms.

The data is processed on the following legal grounds under Article 5 of the KVKK:

• Being directly related to the conclusion or performance of a contract (Art. 5/2-c)
• Compliance with our legal obligations (Art. 5/2-ç)
• Establishment, exercise or protection of a right (Art. 5/2-e)
• Our legitimate interests, provided they do not harm your fundamental rights (Art. 5/2-f)
• Your explicit consent where required (Art. 5/1 and Art. 6)

05Transfer of Personal Data

Within the limits of the purposes above and in line with Articles 8 and 9 of the KVKK, your personal data may be transferred to:

• Public authorities legally entitled to receive it (the police guest-notification system, tax offices, courts, etc.)
• Providers of our online booking and hotel management (PMS) infrastructure
• Payment institutions and banks
• Website hosting, email and IT service providers
• Accountants, auditors, legal and consulting firms
• Analytics and advertising providers (Google, Meta) only with your explicit consent

Transfers to providers with servers abroad are made only under the conditions of Article 9 of the KVKK (adequacy decision, appropriate safeguards or explicit consent).

06Retention Periods

Your personal data is kept for the period required by the relevant legislation or by the purpose of processing, after which it is deleted, destroyed or anonymised.

• Accounting and invoice records: 10 years
• Stay and guest-notification records: for the period required by law
• Booking and stay requests: 5 years
• Contact form and complaint records: 3 years
• Job applications and CVs: 1 year
• CCTV recordings (where in use): 30 days
• Cookie and marketing consents: until consent is withdrawn

07Data Security Measures

We take the technical and administrative measures needed to prevent unlawful processing of and access to your personal data:

• SSL/HTTPS encryption, security headers and protection against form abuse on the website
• Access to the admin panel and CV files limited to authorised staff
• Access matrix, strong passwords and access logs
• Staff training on data protection and confidentiality undertakings
• Regular backups and up-to-date software
• Notification of the Personal Data Protection Board and data subjects in the event of a breach

08Your Rights under the KVKK

Under Article 11 of the KVKK, you have the right to apply to the data controller to:

• Learn whether your personal data is processed
• Request information if it has been processed
• Learn the purpose of processing and whether it is used accordingly
• Know the third parties in Turkey or abroad to whom it is transferred
• Request correction if it is incomplete or inaccurate
• Request deletion or destruction under the conditions of Article 7
• Request that corrections, deletions and destructions be notified to the third parties it was transferred to
• Object to a result against you arising from analysis exclusively by automated systems
• Claim compensation if you suffer damage due to unlawful processing

09How to Apply

You can submit requests regarding your rights, together with information verifying your identity:

• by email to info@monezzamalteperezidans.com,
• in person or by registered mail with a signed petition to Bağlarbaşı Mahallesi Kumru Sokak No: 14 Maltepe / Istanbul,
• via registered electronic mail (KEP), secure electronic signature or mobile signature.

Your application will be concluded free of charge within 30 days at the latest, depending on the nature of the request. If the process requires an additional cost, the fee set by the Personal Data Protection Board may be charged.

10Cookies

Our website uses strictly necessary cookies and, only if you give consent, analytics (Google Analytics) and marketing (Google Ads, Meta) cookies. You can change your preferences at any time via the “Cookie preferences” link at the bottom of the page.