KVKK and Privacy Policy

Last updated: 24 October 2026 1. Data controller and scope This notice has been prepared to inform visitors to the website and people who contact us through our available communication channels about the processing of their personal data under Türkiye’s Personal Data Protection Law No. 6698 (“KVKK”). GES Seyahat Turizm Otelcilik ve Ticaret Ltd. Şti. (the “Company”), operating under the Easy Stay brand, is the controller for its own personal data processing activities. The Easy Stay website presents accommodation properties and room types, provides information about them and directs visitors to the relevant property’s external booking screen. It does not provide visitor membership, booking or payment forms within the website. Accommodation and check-in processes are also subject to the notices provided by the relevant operator for those activities. This document is an information and privacy notice. Visiting the website or reading this notice does not mean that you have given explicit consent. 2. Data that may be processed and collection methods When you visit the website, technical data such as your IP address, access date and time, requested page, browser/device information, and security and error records may be processed through server logs and technologies used to operate the website. If you contact us by telephone or WhatsApp, we may receive the details you share through that channel, such as your name, telephone number, message content, the property you are interested in, intended stay dates, number of guests and enquiry/complaint details. Such information is processed only to the extent that you provide it and it is needed for your enquiry. Share other people’s information only where you are authorised to do so. Do not send identity documents, health information or payment card details through these channels unless they are necessary for your enquiry. 3. Purposes and legal grounds Data may be processed for the following purposes, taking account of KVKK principles concerning purpose limitation, proportionality, accuracy and retention only for as long as necessary: • Providing the website, resolving errors and preventing misuse: our legitimate interest in providing a secure, reliable service, provided that your fundamental rights and freedoms are not harmed (Article 5/2-f KVKK). • Providing accommodation information, answering questions and forwarding your enquiry to the relevant property or booking service: Article 5/2-c KVKK where directly related to entering into or performing a contract; Article 5/2-f KVKK for other communications where processing is necessary and proportionate. • Maintaining legally required records and responding to lawful requests from competent authorities: Articles 5/2-a and 5/2-ç KVKK, depending on the specific legal obligation. • Exercising or protecting rights in disputes: Article 5/2-e KVKK, to the extent necessary. Where an activity requires explicit consent, your consent is requested separately for that activity. Reading this notice, closing a promotional message or browsing the website is not general consent to marketing or tracking. 4. Parties with whom data may be shared Data may be shared with hosting, technical maintenance and security service providers; the relevant property operator and booking infrastructure providers such as HotelRunner where necessary to fulfil your enquiry; authorised advisers where necessary for legal proceedings; and public authorities legally entitled to receive it. Sharing is limited to the information necessary for the relevant purpose and is subject to the transfer requirements of KVKK. Using another service provider does not remove the Company’s responsibilities for its own processing activities. 5. Bookings through HotelRunner “Book Now” links are intended to direct you to the relevant property’s booking screen using HotelRunner infrastructure. Contact, accommodation, identity or payment information requested for a booking is submitted through the relevant booking service. Payment card details are not entered on this website. Before booking, review the information on the destination screen concerning the property operator, controller, privacy, payment and cancellation. HotelRunner’s and the relevant operator’s notices also apply to their own activities. If booking information is passed to the Company, the Company processes it only to the extent necessary for its own service and where there is a lawful basis. 6. Cookies and similar technologies Our website may use cookies and similar technologies to help it operate securely and properly, remember your preferences and improve your browsing experience. For example, these technologies may help prevent a campaign announcement you have closed from appearing again for a specified period. Non-essential analytics or advertising cookies are subject to your explicit consent where legally required. You can manage, delete or block cookies and stored website data in your browser settings. Blocking some cookies may affect certain website functions. Reading this notice or continuing to use the website does not mean that you have given explicit consent. 7. Maps, WhatsApp, social media and processing abroad Google Maps may be embedded in property pages to show locations. When a map loads, your browser connects to Google, and technical data such as your IP address and browser/device information may be transmitted to that provider. When you contact us through WhatsApp or follow a social media link, you access the relevant provider’s service. Its privacy notices also apply to its own processing activities. The social media icons on this website are external links. Using service providers such as Google, WhatsApp/Meta and HotelRunner may involve processing your personal data on servers outside Türkiye. Such processing requires a lawful basis and the applicable data protection conditions to be met. Where those conditions are satisfied, processing may take place without separate explicit consent; where explicit consent is required, it must be obtained separately. The information on this page alone is not sufficient to authorise an international transfer. 8. Retention and security Data is retained only for the period required by applicable law or necessary to respond to enquiries, operate the service securely and protect rights. The period depends on the type of data, the nature of the enquiry and the applicable legal obligations. When the reasons justifying retention cease to apply, the data should be erased, destroyed or anonymised. The Company is required to implement technical and organisational measures proportionate to the risks to prevent unauthorised access and unlawful use. Restricting website administration access to authorised persons is among those measures. 9. Your personal data rights Under Article 11 KVKK, you may find out whether your data is processed, request information about processing, ask about its purposes and whether use is consistent with those purposes, and learn which third parties receive your data in Türkiye or abroad. You may request correction of incomplete or inaccurate information, erasure or destruction where the statutory conditions are met, and notification of these actions to recipients of your data. You may object to adverse consequences arising from exclusively automated analysis and seek compensation for damage caused by unlawful processing. Where processing is based on explicit consent, you may withdraw that consent for the future. Requests relating to these rights may be submitted to the Company as controller using the methods set out in KVKK and the relevant Communiqué. Properly submitted requests are assessed as soon as possible and within thirty days at the latest. You may call 0256 234 05 95 for information about the Company’s contact and correspondence details. This telephone number is for general communication and does not replace statutory application methods. Any mandatory rights under other applicable laws remain unaffected. 10. Children’s information The website has no membership or direct data collection forms aimed at children. A parent or legal representative making an accommodation enquiry on a child’s behalf should share only the information necessary for that purpose. Processing children’s data during booking and accommodation is subject to the information requirements and legal conditions applicable to the relevant service. 11. Updates and contact This notice may be updated when services, tools or legislation change. The current version is published on this page with its update date. Where a new activity requires separate explicit consent, updating this notice alone does not constitute consent. Data controller: GES Seyahat Turizm Otelcilik ve Ticaret Ltd. Şti. Brand: Easy Stay General contact telephone: 0256 234 05 95