PRIVACY POLICY

Data Controller:
Limancepte Seyahat Acentesi Turizm ve Ticaret LTD ŞTİ (hereinafter referred to as "Villacepte.com.tr")
Trade Registry No: 6091317899
Address: Kızılarık Mah. 2754 Sok. No:1/318 Muratpaşa/Antalya
Contact: booking@villacepte.com.tr | [5069223783]

1. COLLECTED DATA & PURPOSES

A) Data You Provide Directly:

• Reservation Information: Full name, phone, e-mail, address, payment details (encrypted, not stored).
• Identity Information: ID card/passport (only pursuant to Law No. 678 and for the duration of the stay).

B) Automatically Collected Data:

• Technical Data: IP address, browser information, cookies (detailed below).

Data Processing Purposes:

• Carrying out reservation processes,
• Compliance with the Identity Notification Law No. 678,
• Customer support and legal obligations.

2. COOKIE POLICY

Cookie Types:

• Mandatory Cookies: For site functionality (e.g. signing in).
• Analytics Cookies: Anonymous usage statistics via Google Analytics.
• Preference Cookies: Language/currency selection.

Consent Mechanism: Explicit consent is obtained via the cookie consent banner upon your first visit to the site. You can adjust your cookie preferences from the [ayarlar] page.

3. DATA SHARING & RETENTION PERIODS

Sharing:

• Law Enforcement: In the event of a legal obligation (identity information).
• Payment Providers: Only to complete the transaction (Paytr, Stripe, etc.).

Retention Periods:

• Reservation Information: 10 years (Tax Procedure Law).
• Identity Information: 1 month after the end of the stay.

4. USER RIGHTS (KVKK & GDPR)

Under KVKK Art.11:

• Access to your data,
• Request for correction or deletion,
• Right to object to processing.

Under GDPR (EU Users):

• Data portability,
• Right to complain (you may apply to [AB yerel otoritenize]).

For Your Requests: Write to booking@villacepte.com.tr. It will be answered within 30 days.

5. SECURITY MEASURES

• SSL Encryption: All data transfers are protected with a 256 Bit Secure Site.
• Identity Data: Stored encrypted; only authorized personnel can access it.
• Periodic Audits: Cyber security tests are carried out.

6. LEGAL NOTICES

• Identity Information: Processed pursuant to Law No. 678. It is never used for commercial purposes.
• Reservation Data: Processed only for the performance of the contract.

7. CHANGES

When this policy is updated, an announcement will be made on the site 7 days in advance. The latest version is always accessible via [bu link].