Privacy Notice on the Protection of Personal Data

1. Data Controller

Within the scope of the Turkish Personal Data Protection Law No. 6698 (“KVKK”), Triptolia, operating under the Triptolia brand (“Triptolia” or the “Company”), processes your personal data in its capacity as data controller.

At Triptolia, we attach importance to the privacy and security of your personal data and aim to process, store, and protect such data in accordance with KVKK and other applicable legislation.
E-mail: [email protected]

2. Personal Data We Process

While you use Triptolia services, create an account, make a reservation, stay at a property, create a listing, or contact us, we may process certain categories of personal data.

Identity data may include your name, surname, date of birth and, where required by applicable legislation, your Turkish ID number.

Contact data may include your phone number, e-mail address, and address information.
Account and membership data may include user account information, login records, account preferences, and verification details.

Reservation and accommodation data may include the selected property, check-in and check-out dates, number of guests, reservation details, and accommodation-related requests.

During payment transactions, order and payment status information may be processed. Depending on the payment infrastructure used, credit or debit card details may be processed directly by the relevant payment service provider and may not be stored by Triptolia.

We may also process technical data such as IP address, device information, browser information, transaction logs, and security logs when you use our website.

3. Purposes of Processing Personal Data

Kişisel verileriniz; üyelik ve kullanıcı hesabı oluşturulması, kullanıcı doğrulama işlemlerinin gerçekleştirilmesi, rezervasyon süreçlerinin yürütülmesi, konaklama hizmetlerinin sunulması, ev sahibi ve misafir arasındaki iletişimin sağlanması, ilanların oluşturulması ve yönetilmesi amacıyla işlenebilir.

Your data may also be processed for carrying out payment and order transactions, providing customer support, sending reservation and transaction notifications by e-mail or SMS, handling requests and complaints, improving service quality, and ensuring platform security.

Where required by law, personal data may also be processed in order to notify relevant public authorities about guests, respond to official authority requests, conduct accounting and financial processes, and fulfil legal obligations.

Where your explicit consent is required and obtained, your contact information may also be processed for marketing communications such as campaigns, discounts, and announcements about new accommodation options.

4. Legal Grounds for Processing

Your personal data is processed on the legal grounds set out in Articles 5 and, where applicable, 6 of KVKK.

Bu kapsamda kişisel verileriniz; kanunlarda açıkça öngörülmesi, bir sözleşmenin kurulması veya ifasıyla doğrudan ilgili olması, veri sorumlusunun hukuki yükümlülüğünü yerine getirebilmesi için zorunlu olması, bir hakkın tesisi, kullanılması veya korunması için veri işlemenin zorunlu olması ve temel hak ve özgürlüklerinize zarar vermemek kaydıyla Triptolia’nın meşru menfaatleri için veri işlenmesinin zorunlu olması hukuki sebeplerine dayanılarak işlenebilir.

Processing activities that require explicit consent are carried out only where the relevant consent has been obtained.

5. Methods of Collecting Personal Data

Your personal data may be collected electronically through the Triptolia website, membership and reservation forms, listing submission forms, contact forms, customer support channels, e-mail communications, SMS verification systems, and technical website records.

Personal data may also be collected from information and documents directly provided by users during the provision of services.

6. Transfer of Personal Data

Your personal data may be shared with third parties only to the extent necessary for the provision of services or fulfilment of legal obligations.

In this context, your data may be transferred to payment service providers, SMS and communication service providers, hosting and server providers, information technology and security service providers, accountants, legal advisers, and other service providers necessary for the operation of the platform.

Where required for reservation and accommodation services, relevant information may also be shared with the applicable property owner, operator, or accommodation service provider.

Where legally required, personal data may be disclosed to authorised public institutions, judicial authorities, law enforcement bodies, and other competent authorities.

Where personal data is transferred abroad, such transfers are carried out in accordance with the applicable provisions of KVKK and relevant legislation.

7. Identity Information of Guests

For the purposes of managing accommodation services and complying with applicable legal obligations, guests may be asked to provide information such as their name, surname and, where required, Turkish ID number.

Such information is processed only for the purposes of managing reservation and accommodation processes, fulfilling statutory notification obligations, and responding to requests from authorised authorities.

Identity information is retained for the period required for the relevant service and applicable legal retention periods, and appropriate technical and administrative measures are applied to protect such information against unauthorised access.

8. SMS and Phone Verification

For account and user security purposes, a one-time password (“OTP”) may be sent to your phone number.

For this purpose, your phone number and technical verification records may be shared with the SMS service provider used to provide the verification service.

Service-related SMS notifications concerning reservations, payments, and account transactions may be sent as part of the performance of the service.

Marketing and commercial electronic communications are sent only where the required permissions have been obtained under applicable legislation.

9. Retention and Security of Personal Data

Your personal data is retained for as long as necessary for the purposes for which it is processed and for the statutory retention periods prescribed by applicable legislation.

Once the processing purpose no longer exists and the applicable retention period has expired, personal data is deleted, destroyed, or anonymised in accordance with applicable legislation.

Triptolia implements appropriate technical and administrative measures to prevent unlawful processing of personal data, prevent unauthorised access, ensure secure storage, and reduce security risks.

10. Cookies and Website Use

Triptolia may use cookies and similar technologies in order to ensure the proper functioning of the website, improve user experience, maintain security, and analyse website usage.

Where required by applicable legislation, non-essential cookies are activated only in accordance with the user’s preferences or consent.

For more information about the use of cookies, please refer to our Cookie Policy.

11. Your Rights Under KVKK

Under Article 11 of KVKK, you have the right to:

• learn whether your personal data is being processed,
  
• request information if your personal data has been processed,
  
• learn the purpose of processing and whether your data is being used in accordance with that purpose,
  
• learn the third parties to whom your personal data has been transferred,
  
• request correction of incomplete or inaccurate personal data,
  
• request deletion or destruction of personal data where the conditions set out in KVKK are met,
  
• request notification of correction, deletion, or destruction operations to third parties to whom the data has been transferred,
  
• object to any adverse result arising from the analysis of personal data exclusively through automated systems,
  
• request compensation if you suffer damage due to unlawful processing of your personal data
  
  

.

12. How to Submit a Request

You may submit your requests regarding your rights under KVKK to Triptolia together with information and documents that verify your identity through the following contact channels:

E-Mail: [email protected]

Your request will be reviewed and concluded within the periods prescribed by KVKK and applicable legislation, depending on the nature of the request.

13. Amendments to this Privacy Notice

Triptolia may update this Privacy Notice due to changes in legislation, services, or personal data processing activities.

The latest version of this Privacy Notice becomes effective as of the date it is published on our website.