Privacy Policy

Prince Alanya Apart Hotel ("we", "us", "our"), located at Şekerhane, Şevket Tokuş Cd. No:23, 07400 Alanya/Antalya, Turkey, is the data controller for personal data collected through this website. You may contact us regarding data protection matters at prince-app@hotmail.com. As a small hospitality establishment meeting the employee count and annual turnover thresholds defined in the KVKK Board's published communiqués, we are exempt from mandatory registration with VERBİS (Veri Sorumluları Sicil Bilgi Sistemi — the Turkish Data Controllers' Registry).

We collect data in two categories. (1) Data you provide voluntarily: when you submit a reservation enquiry via our email link, we collect your name, email address, phone number (if included), preferred check-in and check-out dates, and number of guests. This is the minimum information necessary to process your enquiry. (2) Data collected automatically: our content delivery network and hosting provider, Cloudflare, Inc. (USA), automatically records technical log data for every website visitor, including your IP address, browser type, operating system, referring URL, and the date and time of each page request. This data is collected as an inherent function of internet infrastructure and is used solely for security, network performance, and abuse prevention. Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe a child under 16 has submitted personal information to us, please contact us at prince-app@hotmail.com and we will delete it promptly.

We use your personal data strictly for the following purposes, each with its identified legal basis. (1) Processing reservation enquiries: to review and respond to enquiries sent via email, and to take pre-contractual steps at your request. Legal basis: performance of a contract or pre-contractual steps at your request (GDPR Article 6(1)(b); KVKK Article 5(2)(c)). (2) Website security and performance: Cloudflare processes server log data, including IP addresses, to protect the website from attacks, monitor uptime, and deliver content efficiently. Legal basis: our legitimate interests in operating a secure and functional website (GDPR Article 6(1)(f); KVKK Article 5(2)(f)). (3) Analytics: to understand how visitors use our website in aggregate, using Google Analytics 4. Legal basis: your freely given, specific, and informed consent (GDPR Article 6(1)(a); KVKK Article 5(1)). You may withdraw this consent at any time. We do not sell, rent, or disclose your personal data to any third party, except to the data processors named in this policy, who act strictly under our instructions.

We retain personal data only for as long as necessary for the purpose for which it was collected, and no longer than required by applicable law. (1) Reservation enquiry emails: retained in our inbox for a maximum of 3 years from the date of receipt, reflecting the standard limitation period for contractual disputes in the hospitality sector, and then permanently deleted. (2) Cloudflare server logs (IP addresses and technical request data): retained by Cloudflare for between 7 and 30 days depending on our service tier, then automatically purged. We do not access raw log data beyond the aggregated reports Cloudflare provides. (3) Google Analytics 4 data: retained for 14 months from the date of collection, as configured in our Google Analytics property settings, after which it is automatically deleted by Google. (4) Cookie consent preference (prince-cookie-consent): stored in your browser's local storage with no automatic expiry date. It persists until you clear your browser data or change your preference via the cookie manager on this site. When the legal purpose for which data was collected has been fulfilled and no legal retention obligation applies, we delete or anonymise personal data without undue delay.

We use the following tracking and storage mechanisms on this site. (1) prince-cookie-consent — this is a browser local storage entry, not a browser cookie. It stores your consent preference ("accepted" or "declined"). It has no automatic expiry date and persists until you clear your browser's local storage or change your preference via the cookie manager icon in the bottom-left corner of this site. No data is sent to any third party. (2) _ga, _ga_[YOUR_GA_ID_HERE] — Google Analytics 4 cookies, set only after you explicitly accept analytics via the cookie banner. They distinguish individual users and sessions for statistical purposes, expire after 2 years, and transmit data to Google LLC (USA). No marketing, advertising, retargeting, or social media tracking cookies are used on this site.

This website uses the following third-party services acting as data processors, which may involve the transfer of personal data to the USA. (1) Cloudflare, Inc. (USA) — our content delivery network and hosting provider. Cloudflare processes all web traffic routed to this site, including visitor IP addresses in server logs. Cloudflare participates in the EU–US Data Privacy Framework, making transfers lawful for EU residents. For Turkish residents, this transfer is covered by our legitimate interest in website security and performance (KVKK Article 5(2)(f)). See cloudflare.com/privacypolicy. (2) Google LLC (USA) — provider of Google Analytics 4. Google processes pseudonymised usage statistics on our behalf only after you give consent. "Pseudonymised" means the data cannot directly identify you by name, but uses a persistent identifier (Google Client ID) to distinguish browser sessions. Google operates under a Data Processing Agreement with us. Legal basis: your explicit consent (GDPR Article 6(1)(a) and Article 49(1)(a); KVKK Article 9). Google LLC participates in the EU–US Data Privacy Framework. You may withdraw consent at any time via the cookie manager icon in the bottom-left corner of this site. (3) Microsoft Corporation (USA) — our email service provider (Outlook/Hotmail). When you send an enquiry to prince-app@hotmail.com, the content is processed by Microsoft's email infrastructure, constituting a transfer to the USA. Microsoft participates in the EU–US Data Privacy Framework. Legal basis: pre-contractual steps at your request (GDPR Article 6(1)(b); KVKK Article 5(2)(c)).

Under GDPR and KVKK you have the following rights: the right to access a copy of your data; the right to rectification of inaccurate data; the right to erasure where no overriding legal ground exists; the right to restriction of processing; the right to data portability; the right to object to processing based on legitimate interests; and the right to withdraw consent at any time without affecting the lawfulness of prior processing. To exercise any of these rights, contact us at prince-app@hotmail.com. We will acknowledge your request within 72 hours and respond in full within 30 calendar days of receipt. If your request is complex or we receive a high volume of requests, we may extend this period by a further 30 days (KVKK) or 60 days (GDPR) and will notify you of the extension within the initial 30-day period. Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint — free of charge — with a supervisory authority: in Turkey, the Kişisel Verileri Koruma Kurumu (KVKK Board) at www.kvkk.gov.tr; in the EU/EEA, the data protection authority of your country of residence.

For all data protection enquiries: Prince Alanya Apart Hotel, Şekerhane, Şevket Tokuş Cd. No:23, 07400 Alanya/Antalya, Turkey — or email prince-app@hotmail.com. We reserve the right to update this policy to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of the website after a policy update constitutes your acknowledgement of the revised policy.