Privacy Policy

1. Data controller

This website is operated by Atak Hammam Spa. Your personal data is processed by us as the data controller under the Turkish Personal Data Protection Law (KVKK) no. 6698 and applicable data protection rules.

2. Data we process

Through our contact form we process your name, phone number, e-mail address, subject and any message you send. Your IP address and browser information are also recorded for technical purposes.

3. Purposes of processing

Your data is processed in order to respond to your enquiry, to contact you, to measure service quality, to fulfil legal obligations and to inform you when you request it.

4. Legal basis

Processing is based on the necessity for the establishment or performance of a contract, our legitimate interest as data controller and, where applicable, your explicit consent.

5. Transfers

Your personal data may be shared with our hosting provider and e-mail infrastructure provider only to the extent necessary to deliver the service. Transfers to competent public authorities may be made where legally required. Your data is not otherwise shared with third parties and is never sold.

6. Retention period

Contact records are kept for the period required by the applicable legislation or until the purpose of processing no longer applies. At the end of that period, records are deleted or anonymised.

7. Your rights

You have the right to learn whether your data is processed, to request information about it, to request its correction or deletion and to object to processing. You can send your requests through the contact channels on our website.

8. Security

To protect your data we apply CSRF protection on form submissions, parameterised queries for database access, and encryption and session security measures for administrator access.

9. Changes

This policy may be updated when necessary. The current version is always published on this page.