Guest Privacy NoticeGDPR · Privacy Notice
Pur Hotel Privacy Notice for Guests
Introduction
Pür Hotel ("Hotel", "we", "our", or "us") is committed to protecting your personal data in compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other applicable data protection laws. This Privacy Notice explains how we collect, use, share, and protect your personal data when you use our services, including accommodation, recording studio, beach club, restaurant, and our website.
Data Controller
Pür Otelcilik ve Turizm İşletmeleri Anonim Şirketi ("Hotel")
Caddebostan Mah. Funda Çıkmazı Sk. No: 2-6 İç Kapı No: 6 Kadıköy / İstanbul
What Personal Data Do We Process?
We may process the following categories of personal data depending on the service you use:
- Identification Data
- Full name, national ID number, passport information, nationality, date of birth, place of birth, gender, signature
- Contact Data
- Telephone number, e-mail address, postal address
- Payment & Financial Data
- Payment details, billing information, transaction history, payment methods used
- Accommodation Data
- Reservation details, check-in/check-out dates and times, room preferences, guest profile, past stays, vehicle plate number, cancellation/refund records
- Studio Recording Data
- Audio and/or video recordings (recorded materials), technical information (file format, device data), content/meta data (date, track name, work information)
- Beach Club / Beach Usage Data
- Reservation details, service usage frequency, beach equipment preference, sunbed/umbrella information, participation in beach events
- Restaurant Usage Data
- Table reservations, order and payment details, dietary preferences or allergies, customer feedbacks
- Website & IT Data
- When using our website, technical data obtained via cookies and similar technologies (IP address, device type, browser information, access times)
- Special Category Data
- If you declare to our hotel, your special category personal data such as access needs, disability, allergies, or health information
If you share your special category personal data with our hotel, it will only be processed for the purpose of meeting your specific requests. Beyond this, the processing of your special category personal data is not applicable.
What are the legal grounds, purposes, and collection methods for processing your personal data?
Your personal data are collected by our Hotel, in whole or in part through automated means or, provided that they form part of a data recording system, through non-automated means; via reservation forms, guest registration forms, studio recording agreements/forms and technical recording systems, beach club/restaurant reservation forms, security cameras, photo/video recordings (events, social media content), the website, cookies and other online tracking tools, surveys, feedback forms, and promotional campaigns, in electronic or physical media.
Accommodation / Reservation Services
Data processed: identity, contact, payment, accommodation, transaction security data, and special category data if provided.
- Managing reservation requests, confirmations, and cancellations
- Carrying out check-in and check-out procedures
- Identity verification and fulfilling legal obligations
- Implementing room allocation, housekeeping and accommodation preferences (e.g., bed, pillow and linen preferences, minibar, and other amenities)
- Providing additional services (e.g., parking, transfers, room service, laundry)
- Processing payments, billing, and financial records
- Conducting guest satisfaction surveys and managing complaints
- Providing service recommendations based on past usage or preferences
- Recording for security and facility protection (cameras, entry/exit logs)
- Conducting communication activities
- Managing business operations and audits
- Complying with legal obligations applicable to the Hotel
- Coordinating with third-party providers for tours, transport, reservations
- Facilitating reservations for restaurants and events
- Managing access to Wi-Fi, TV, and other connection services
- Determining eligibility for age-restricted goods and services (such as alcoholic beverages)
Compliance with legal obligations, necessity for contract performance, legitimate interests of our Hotel without harming your rights and freedoms.
Studio Recording Services
Data processed: identity, contact, payment, studio recording, transaction security data, and special category data if provided.
- Managing studio reservations and usage planning
- Recording, storing, and delivering audio/video content
- Providing technical support (mixing, mastering)
- Providing requested special equipment
- Fulfilling studio recording agreements with artists/guests
- Managing content and work information (track name, duration, artist, rights ownership)
- Monitoring copyright, licensing, and legal notifications
- Ensuring studio security and protecting recording materials
- Post-service billing and accounting
- Preparing campaigns and offers for artists/guests
Legal obligation compliance, contract performance, and legitimate interests of the Hotel without harming your rights and freedoms.
Beach Club / Beach Services
Data processed: identity, contact, payment, beach usage, transaction security data, and special category data if provided.
- Managing beach club reservations and access records
- Administering equipment allocation (sunbeds, cabanas, umbrellas)
- Registering event/organization participants
- Managing beach safety (entry/exit monitoring, guest security)
- Processing order and consumption information (e.g., bar service)
- Providing emergency assistance when necessary for health and safety
- Offering personalized services based on guest requests
- Sending promotions, campaigns, and event invitations
- Creating usage statistics for planning services and facility capacity
- Managing registration and coordination for special events (weddings, birthdays, corporate events)
Legal obligation compliance, contract performance, legitimate interests of the Hotel without harming your rights and freedoms, protection of the life or physical integrity of guests in circumstances of vital interest.
Restaurant Services
Data processed: identity, contact, payment, restaurant service, transaction security data, and special category data if provided.
- Managing table reservations
- Recording orders and managing kitchen/service operations
- Processing payments and billing
- Handling dietary, allergy, or health-related requests
- Measuring customer satisfaction (reviews, surveys)
- Communicating campaigns, special menus, and promotions
- Maintaining restaurant safety and order
- Analyzing order data for inventory/menu planning
- Planning event/catering services for group bookings
- Evaluating complaints, suggestions, and feedback
Legal obligation compliance, contract performance, legitimate interests of the Hotel without harming your rights and freedoms.
Use of our Hotel Website and Communication Management
Data processed: identity, contact, and transaction security data.
- Responding to communication requests via phone, email, or online form
- Recording and evaluating information requests, complaints, suggestions, or feedback
- Tracking potential customer inquiries
- Ensuring website functionality, security, and protection from unauthorized access or threats
- Analyzing visitor behavior via cookies (e.g., statistical analysis, site optimization)
- Enabling technical functionality via necessary cookies
- Conducting information security processes
- Improving website content and functionality
Legal obligation compliance, contract performance, legitimate interests of the Hotel without harming your rights and freedoms.
Customer Experience and Satisfaction
Data processed: identity, contact, accommodation, studio recording, beach usage, restaurant service, transaction security data, and special category data if provided.
- Improving customer experience and service quality
- Performing analysis and reporting
- Conducting communication activities
- Evaluating requests, complaints, and feedback regarding products/services
- Post-sale support services
- Sending campaigns, promotions, email/SMS notifications
Contract performance and legitimate interests of the Hotel.
Hotel Security, Risk, Control, and Legal Compliance
Data processed: identity, contact, accommodation, studio recording, beach usage, restaurant service, transaction security data, and special category data if provided.
- Managing finance and accounting processes and audits
- Conducting billing processes
- Implementing security and facility safety processes
- Entry/exit control
- Risk assessment, complaint handling, fraud prevention
- Reporting to tax authorities, law enforcement, or legal obligations
- Responding to legal claims and protecting rights/claims
- Managing business operations, internal audits, reporting, financial records, and business continuity
- Conducting statistics and analyses (occupancy, sales volume)
- Ensuring information security (data leakage, loss, unauthorized access)
- Emergency and health safety management (ensuring guest safety in cases such as fire, medical emergencies, or natural disasters)
Legal obligation compliance, contract performance, legitimate interests of the Hotel, or protection/exercise of rights, protection of the life or physical integrity of guests in circumstances of vital interest.
Processing Based on Explicit Consent
Data processed: identity, contact, and special category data if provided.
- Marketing, advertising, and promotional activities
- Processing special category data (disability, allergy) to fulfill specific guest requests (such as accessibility needs and health conditions)
Explicit consent.
You may withdraw your consent at any time by contacting the Hotel using the methods described under "7 – Contact for Your Rights and Requests."
Who Do We Share Your Personal Data With?
We ensure data minimization and implement appropriate technical and administrative security measures. Your personal data may be shared with the following third parties, limited to the purposes described above, including but not limited to ensuring business continuity and fulfilling our contractual obligations:
- Internal Sharing: hotel group companies, affiliates
- Business Partners / Suppliers / Service Providers: reservation system providers, online booking platforms, banks/payment service providers, studio equipment providers, audio engineers, accountants, IT and software service providers
- Subcontractors / Service Providers: cleaning, security, technical maintenance, occupational health and safety providers
- Public Authorities: law enforcement, tax authorities, courts, regulators
- Legal Advisors / Auditors, Accountants
If your personal data is transferred outside the EEA, appropriate safeguards will be implemented in compliance with GDPR (e.g. adequacy decisions, Standard Contractual Clauses).
Data Retention
We collect and use your personal information for a variety of purposes described above. Each of these purposes has different requirements and therefore a different retention period. We will delete your personal data as soon as it is no longer necessary to keep it for the purpose for which it was collected.
If you request erasure of your personal information, we will endeavor to erase your personal information within 30 days. Under certain circumstances, this may take longer. In this case we will inform you accordingly. However, please note that we are required by law to keep some of your personal information in order to comply with our own legal obligations to which we are subject.
Your Rights
As a data subject under the GDPR, you have the following rights:
- Right to access: You have the right to request access to your personal data that we process and receive a copy of it.
- Right to rectification: You have the right to request the correction of inaccurate or incomplete personal data we hold about you.
- Right to erasure: You have the right to request the erasure of your personal data under certain circumstances, such as when it is no longer necessary for the purposes for which it was collected.
- Right to restrict processing: You have the right to request the restriction of processing of your personal data under certain circumstances, such as when the accuracy of the data is contested.
- Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another data controller.
- Right to object: You have the right to object to the processing of your personal data, under certain conditions.
- Right to withdraw consent: If we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.
To exercise your rights or if you have any questions or concerns about this Privacy Policy, please contact us using info@purcunda.com email address.