**ONLINE PRIVACY POLICY**
---
**GENERAL DATA PROTECTION INFORMATION**
Transatlantik Hotel & SPA, "http://spa.transatlantikhotel.com.tr" wants to clarify what happens to your personal data when you visit our website or application with this **Online Privacy Policy** document. Personal data is legally defined as "any information that can personally identify you". You can find detailed information on the subject later in this document.
---
**PERSONAL DATA COLLECTION ON OUR WEBSITE**
**Who Is Responsible for Data Collection on This Website?**
The data processing on our website is carried out by ………. . You can find contact details at the bottom of the website.
**How Do We Collect It?**
User data about you is collected when you enter the website. For example, data you enter into forms on the website are included. Other data are automatically recorded by our IT systems when you visit the site (technical data such as browser type, operating system, page view time). This data is collected automatically at the moment of site access.
**For What Purpose Do We Use It?**
Some of the data are for ensuring the website functions without errors. Other data may be used for purposes such as analyzing your user behavior.
**Your Rights Over Your Data**
You have the right to obtain free information about the source, recipient and purpose of your stored personal data. You may also request the correction, restriction or deletion of this data. You can always contact us with questions about privacy and your rights. In addition, you retain the right to lodge a complaint with the relevant data protection supervisory authority in your country of residence.
**Third-Party Analytics Tools**
When you visit our website, your navigation behavior can be analyzed statistically. This is usually done using cookies and analytics software. Analyses are anonymous; your behavior cannot be tracked to you personally. You can object to this analysis or block it by not using certain tools on the website.
---
**GENERAL INFORMATION AND MANDATORY DISCLOSURES**
**Privacy**
We strive to protect your personal data at the highest level. We keep your data confidential in accordance with the law. However, please note that data transmission over the internet is not 100% secure.
**Information About the Responsible Unit**
The unit responsible for data processing on this website:
…
Phone: 902425245524
E-mail: [email protected]
**Withdrawing Your Consent to Data Processing**
Many data processing operations are only possible with your explicit consent. You can withdraw your consent at any time by e-mail. The legality of processing carried out prior to withdrawal remains unaffected.
**Right to Complain to the Relevant Supervisory Authority**
In the event of a data breach, you have the right to contact the relevant supervisory authority. You can contact the data protection officer of the state in which our company is located. List of authorities: https://www.bfdi.bund.de/
**Right to Data Portability**
You have the right to request personal data that is processed automatically based on your consent.
**Encryption**
For security reasons, our website uses encryption (SSL/TLS) to protect your orders or requests. An encrypted connection is indicated by "https://" and the lock icon in the browser bar. If encryption is active, your data cannot be read by third parties.
**Encrypted Payment Transactions**
If payment data (e.g. bank account number) is requested after a paid contract, these data are processed over an encrypted SSL/TLS connection. Your data are protected for Visa/MasterCard or direct payments.
**Information, Restriction or Deletion**
Under applicable law, you may request information about stored personal data, correct it, restrict it or have it deleted. You can reach us via our contact details.
---
**DATA COLLECTION ON OUR WEBSITE**
**Cookies**
Our website uses cookies. Cookies do not harm your device and do not contain viruses. They are used to improve the user experience and increase security. Most cookies ("session cookies") are deleted after the visit. Others remain on your device. You can set your browser to customize cookie settings. If cookies are disabled, website functionality may be limited. Technical cookies are processed under GDPR Article 6(1)(f). Other cookies (for analysis purposes) are specified separately in this document.
**Server Log Files**
Automatically collected data:
- Browser type and version
- Operating system used
- Referrer URL
- Name of the device accessing
- Server request time
- IP address
These data are not merged with other data. They are processed under GDPR Article 6(1)(f).
**Contact Form**
Inquiries you send via the form are stored together with your contact details. Your data are processed based on GDPR Article 6(1)(a) (consent). You can withdraw your consent. Data are deleted after your request is processed or statutory retention periods apply.
**Registration on the Website**
You can register for additional services. The information you provide during registration is used only for the respective service. Mandatory information must be provided completely. Processing is based on GDPR Article 6(1)(a). Your registration data are stored as long as your account is active.
**Data Processing (Customer and Contract Data)**
Personal data necessary to establish a legal relationship are processed under GDPR Article 6(1)(b). After the order is completed, data are deleted (except for legal retention periods).
**Data Transfer Within the Scope of the Contract**
Your personal data are only transferred as required by the contract (e.g., to payment service providers). Transfer for advertising purposes requires your explicit consent. GDPR Article 6(1)(b) applies.
**Online Application**
Data collected during the application process (name, date of birth, contact details, documents) are used only for the application process. Your data are not shared with third parties and are deleted 3 months after the process is completed (except legal obligations).
---
**SOCIAL MEDIA**
Social media plugins/cookies are not currently used.
---
**ANALYTICS TOOLS AND ADVERTISING**
**Google Analytics**
Our website uses Google Analytics. Usage data (including IP) collected via cookies may be transferred to servers in the USA. Processing is based on GDPR Article 6(1)(f). You can prevent data collection with the browser plugin (https://tools.google.com/dlpage/gaoptout). Detailed information: https://support.google.com/analytics/answer/6004245
---
**PLUGINS AND TOOLS**
**YouTube**
YouTube plugins are used. If you log in with your YouTube account, your behavior may be associated with your profile. Processing is based on GDPR Article 6(1)(f). Details: https://www.google.de/policies/privacy
**Google Maps**
Google Maps is used. Your IP address is transmitted to Google. Processing is based on GDPR Article 6(1)(f). Details: https://www.google.de/policies/privacy
---
**PAYMENT PROVIDERS**
**PayPal**
Your payment data are transferred to PayPal. Processing is based on GDPR Article 6(1)(a) and (b). You can withdraw your consent.
**İyzico and Stripe**
İyzico or Stripe are used for instant payment transactions. Your payment data and personal information (name, address, IP, etc.) are transmitted encrypted. GDPR Article 6(1)(a) and (b) apply. You can withdraw your consent.
