Privacy Policy

Last updated: 27 September 2026

Ida Efes Hotel respects the privacy of guests and website visitors. This policy explains how we collect, use, and share personal data when you contact us, make a reservation, visit our website, or stay at the hotel.

1. Data controller

The data controller is Mesut Cengiz, a sole proprietor trading as Ida Efes Hotel.

Address: Ataturk Mahallesi, 1071 Sokak No: 1, 35920 Selcuk, Izmir, Turkey
Email: idaephesus@gmail.com
Phone: +90 538 930 62 62

2. Personal data we collect

Depending on how you interact with us, we may collect:

• Your name, phone number, email address and the information you provide when contacting us.

• Reservation details, including stay dates, room type, number of guests and requests relating to your stay.

• Identity card or passport details required to register guests and make legally required notifications to the authorities.

• Payment and billing information needed to manage your reservation and issue an invoice.

• Messages and other information you choose to share with us.

• Technical information generated when you use our website, such as an IP address, device information and security logs.

We collect this information directly from you, through the website or hotel reception, and, where relevant, from the booking platform or travel agent you used.

3. How we use your data and our legal grounds

We use personal data to answer enquiries, arrange and manage reservations, provide accommodation and requested services, take payments, issue invoices and respond to guest requests. This processing is generally necessary to take steps at your request or perform our agreement with you.

We also use the identity card or passport information required by law to register guests and submit the necessary details to the Turkish law enforcement authorities through the official guest notification process. We process and retain other records where required for legal, tax and accounting obligations.

We may use limited technical data to keep the website working and secure, based on our legitimate interests where permitted by law. If a particular use requires your explicit consent, we will request it separately. Accepting this Privacy Policy does not mean you have agreed to receive marketing.

4. Who receives your data?

We share information only where needed for these purposes. Recipients may include:

• Turkish police or other authorised law enforcement bodies for legally required guest notifications.

• Tax and other public authorities when disclosure is required by law.

• Reservation systems, payment providers, website hosting and technical service providers that help us operate the hotel and website.

• Accountants and professional advisers where necessary.

• A tour or transfer provider if you ask us to arrange that service for you.

If you book through a third-party platform, that platform may also handle your data under its own privacy policy.

5. Transfers outside Turkey

Some reservation, website or communication providers may process data outside Turkey. Where this happens, we apply the requirements for international transfers under Turkish personal data protection law. You may contact us for information about transfers relevant to your data.

6. How long we keep data

We retain personal data for the period required to provide the service and meet applicable guest-registration, tax, accounting and other legal obligations. When there is no longer a lawful reason to keep it, we delete, destroy or anonymise it in accordance with applicable requirements.

7. Cookies

The website may use cookies necessary for its basic operation and reservation functions. If optional analytics or advertising cookies are used, the website will provide information and request consent where required before those cookies are activated. You can also manage cookies through your browser settings.

8. Your rights

Under Turkey's Personal Data Protection Law No. 6698, you may ask whether we process your personal data and request information about its use and recipients. You may request correction of inaccurate data or deletion where the legal conditions are met, and exercise the other rights provided by Article 11 of that law.

Send requests to idaephesus@gmail.com or write to the address above. We may need to verify your identity before responding. We will handle requests within the time required by law.

9. Security and updates

We take appropriate measures to protect personal data against unauthorised access, loss and misuse. We may update this policy if our services, website tools or legal obligations change. The current version will be published on this page.