GDPR / Personal Data Protection

Data Controller: MoonSA Turizm İnşaat Limited Şirketi ("Company") acts as a data controller under the Law on Protection of Personal Data (KVKK).

Legal Grounds for Processing Personal Data

Your personal data is processed based on the following legal grounds specified in Articles 5 and 6 of the KVKK Law No. 6698:

• Being directly related to the establishment or performance of a contract,
• Fulfilling the legal obligations of our Company,
• Data processing being mandatory for the establishment, exercise or protection of a right,
• Data processing being mandatory for the legitimate interests of the data controller,
• Being clearly envisaged in the laws,
• Availability of your explicit consent in necessary cases.

Purpose of Processing Personal Data

The Company processes your personal data for the following purposes:

• Creating and managing accommodation reservations
• Carrying out the reservation process
• Executing payment transactions
• Providing the accommodation service
• Providing customer support, managing request and complaint processes, performing accounting/invoicing operations and fulfilling legal obligations

Processed Personal Data

The Company processes the following categories of personal data:

• Identity data (first name, surname, Turkish ID number or passport information where required under accommodation legislation)
• Contact data (e-mail address, telephone number, address)
• Reservation and invoice data
• Transaction security data (IP address, log records)

Legal Grounds for Processing Personal Data

The Company processes your personal data based on the following legal grounds:

• Authorised payment institutions and banks
• Accounting service providers
• Cloud infrastructure and e-mail/SMS service providers
• Competent public institutions and authorities within the scope of legal obligations

Transfer of Personal Data to Third Parties

The Company may transfer your personal data to third parties, limited to the following situations:

• Learning whether your personal data is processed,
• Requesting information if your personal data is processed,
• Learning the purpose of processing and whether it is used in accordance with its purpose,
• Knowing the third parties to whom your personal data is transferred domestically or abroad,
• Requesting correction if it is incompletely or incorrectly processed,
• Requesting deletion or destruction of your personal data within the scope of Article 7 of KVKK,
• Requesting notification of correction or deletion operations to third parties to whom your personal data is transferred,
• Objecting to the occurrence of a result against you by analyzing it exclusively through automated systems,
• Requesting compensation for the damage in case of damage due to unlawful processing.

Retention of Personal Data

The Company retains your personal data for the periods specified in the relevant legislation. When the retention period expires or the purpose of processing ceases, data is deleted or destroyed automatically.

Rights of the Personal Data Owner

You have the rights specified in the KVKK legislation:

• Submitting the application in writing with a wet signature, delivered by hand or through a notary to our Company address
• Applying from the e-mail address you have previously notified to our Company and which is registered in our systems
• The application petition must contain the identity and contact details that are mandatory under the relevant communiqué
• Depending on the nature of the request, our Company will conclude the application within thirty days at the latest
• In the event that an application is rejected, your legal rights are reserved

Contact Details

You can submit your applications and requests under KVKK to our Company as the data controller.

Credit Card Payments: Your credit card information is processed securely by the payment institution and is not viewed or stored by our company.