Personal Data Protection and Privacy Policy

Website Privacy Agreement

By visiting restayway.com and using the services we provide through this site, the collection, use, and protection of your personal information and information related to the services you request are subject to the terms set out in this “Privacy Policy.” By accessing this website and benefiting from our services, you declare that you have read, understood, and accepted this Privacy Policy.

I. Purpose of the Personal Data Protection and Processing Policy

As restayway.com, we process your personal data in accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”) and relevant regulations, within the scope explained below and in compliance with the personal data processing requirements set forth in the KVKK. In this context, we would like to inform you about the processing of your personal data.

Protecting your personal data and providing a secure platform is one of the most important priorities of restayway.com. For this purpose, we take all necessary technical and administrative measures to fulfill all obligations imposed by the Personal Data Protection Law.

II. Scope of the Personal Data Protection and Processing Policy

This policy, prepared by restayway.com, has been established in accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”). The Law is currently in full force and effect. Data obtained with your consent or based on other legal grounds stipulated by the Law will be used to provide you with better services, improve our service quality, and offer personalized services. As restayway.com, we may use some data in anonymized form for statistical purposes. Such data will be fully de-identified and will not be shared with any third parties under any circumstances. All these data will remain within restayway.com and will be used solely for the development of our platform.

III. Modification of the Personal Data Protection and Processing Policy

restayway.com reserves the right to amend this policy and its regulations in compliance with the Law. Therefore, we recommend that you regularly review our policy and regulations. If we make any changes, they will be published on our website and you will be notified by e-mail before the changes take effect.

IV. Fundamental Principles Regarding the Protection and Processing of Personal Data

a) Compliance with Law and Rules of Honesty: restayway.com collects, uses, and processes your data in compliance with the law and principles of honesty. restayway.com only performs data verification through services provided by official authorities when necessary and does not collect data from any other external sources.

b) Accuracy and Up-to-date Data: restayway.com is committed to ensuring that all data it holds is accurate and up to date, and that it does not contain incorrect information. If there are any changes to your personal data and you notify us, your information will be updated accordingly.

c) Processing for Specific, Explicit, and Legitimate Purposes: restayway.com only collects and processes data that is necessary for the services it provides. Your personal data will be processed only for specific, explicit, and legitimate purposes, and will never be used or made available for any other purpose.

d) Being Relevant, Limited, and Proportionate to the Purpose for Which They Are Processed: restayway.com processes your personal data only to the extent that it is relevant, limited, and proportionate to the purpose for which it is collected.

e) Storage for the Period Stipulated in the Relevant Legislation or Required for the Purpose for Which They Are Processed: restayway.com will retain your personal data for the period required by the relevant legislation or for as long as necessary for the purpose for which they are processed. Data that has expired will be automatically deleted or anonymized from the system.

restayway.com will process the personal data it collects in accordance with the law or based on your explicit consent, for the purposes stated above and in full compliance with the provisions of the KVKK and relevant legislation.

Your Rights Regarding the Protection and Processing of Personal Data

Pursuant to Article 11 of the Law on the Protection of Personal Data, as the owner of personal data, you have the following rights:

a) To learn whether your personal data is being processed,

b) If your personal data has been processed, to request information regarding this,

c) To learn the purpose of processing your personal data and whether it is used in accordance with its intended purpose,

ç) To learn about the third parties to whom your personal data has been transferred, either domestically or abroad,

d) To request correction of your personal data if it has been processed incompletely or incorrectly, and to request that such correction be notified to third parties to whom the data has been transferred,

e) To request the deletion or destruction of your personal data within the framework of the conditions set out in Article 7 of the Law, and to request that such actions be notified to third parties to whom the data has been transferred,

f) To object to any result that is to your detriment arising from the exclusive analysis of your data through automated systems,

g) To request compensation for damages if you suffer any loss due to the unlawful processing of your personal data.

restayway.com provides the necessary means for personal data owners to exercise the rights listed above.

Principle of Data Minimization / Principle of Frugality

According to the principle of data minimization (or frugality), only the data necessary for the system is processed on restayway.com. The types of data collected are determined based on the purpose of the service provided. Data that is not necessary is not collected or is anonymized. In this way, the privacy of data subjects is protected. Sensitive personal data such as health information is collected only for the purpose of providing better service to customers and ensuring their well-being; and, if necessary, may be transferred—solely for the same purpose—to hotels or relevant organizations located within or outside the country, depending on the type of service chosen. Explicit consent is obtained from customers for the processing of such data.

Deletion of Personal Data

When legally required retention periods expire, judicial processes are completed, or other obligations cease to exist, restayway.com deletes, destroys, or anonymizes these data either automatically or upon the request of the data subject.

Accuracy and Up-to-Date Data

All data held by restayway.com is processed as declared by the relevant individuals and in accordance with their statements. restayway.com is not obliged—either legally or by company policy—to verify the accuracy of data provided by customers or those in contact with the company; the data declared is considered accurate. The principle of accuracy and up-to-date personal data is also adopted by restayway.com. restayway.com updates personal data it processes either upon receipt of official documents or at the request of the data subject, and takes all necessary precautions for this.

Privacy and Data Security

Personal data is confidential and restayway.com strictly observes this confidentiality. Only authorized individuals have access to personal data. restayway.com takes all necessary technical and administrative measures to protect the personal data it collects, to prevent unauthorized access, and to avoid any harm to our users and potential customers. Within this scope, software compliance with standards, careful selection of third parties, and adherence to internal data protection policies are ensured.

V. Purposes of Data Processing

The collection and processing of personal data by restayway.com will be carried out in line with the purposes specified in the information notice. Data is collected and processed for the establishment of contracts and to provide better services to customers.

VI. Data of Customers, Potential Customers, and Business & Solution Partners

Collection and Processing of Data for Contractual Relationship

If a contractual relationship has been established with our customers or potential customers, the personal data collected may be used without additional consent from the customer. However, this use will occur solely for the purposes and requirements of the contract. Data is used and updated as necessary for better execution of the contract and service, and may be updated by contacting customers when required. On the other hand, data voluntarily provided by potential customers is processed in order to provide them with easier and higher-quality services in the future. If requested or if no contractual relationship is established, this data will be deleted or anonymized.

Data of Business and Solution Partners

restayway.com adopts compliance with the law as a fundamental principle when sharing data with business and solution partners. Data is shared with business and solution partners under confidentiality commitments and only to the extent required by the service; these parties are also strictly required to take all necessary measures to ensure data security.

Data Processing for Advertising Purposes

In accordance with the Law on the Regulation of Electronic Commerce and the Regulation on Commercial Communication and Commercial Electronic Messages, advertising-related electronic messages may only be sent to individuals who have given prior consent. Explicit consent from the recipient is required for the delivery of advertising. restayway.com strictly complies with all details regarding “consent” as defined in the relevant legislation. For the purpose of sending electronic messages, personal data is transferred to service providers and to İleti Yönetim Sistemi A.Ş. as required by the Regulation.

Data Processing Due to the Company’s Legal Obligations or Explicit Legal Requirements

Personal data may be processed without additional consent if it is clearly specified in the relevant legislation or for the fulfillment of a legal obligation set forth in the legislation. The type and scope of data processing must be limited to what is legally permitted and in compliance with the applicable legal provisions.

Company’s Data Processing

restayway.com may process personal data in line with the services it offers and its legitimate purposes. However, personal data can never be used for any unlawful services.

Processing of Special Categories of Personal Data

According to the Law, data regarding an individual’s race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, attire, membership in associations/foundations/trade unions, health, sexual life, criminal convictions, and security measures, as well as biometric and genetic data, are considered special categories of personal data. restayway.com also takes the additional measures stipulated by the Authority for the processing of special categories of personal data.

restayway.com may process special categories of personal data, with the explicit consent of the individual, solely for the purpose for which they are collected and to provide better services. Facilities you book through us may, due to regulations enacted during the Covid-19 pandemic or similar legal requirements, request some personal data, including health data relating to yourself and your close contacts. Such personal data may be shared with official authorities and healthcare organizations when necessary.

Data Obtained Through Membership Transactions

If you become a member of restayway.com, the personal data you share with us during the registration process is processed in our systems. If you register through Facebook, Google, Apple, or any other social platform, information such as your name, surname, profile picture, and email address, as provided by the relevant platform, is accessed and transferred to the restayway.com systems.

Data Processed by Automated Systems

With regard to data processed by automated systems, restayway.com acts in accordance with the law. Without the explicit consent of individuals, information obtained from such data cannot be used against the person. However, restayway.com may make decisions regarding individuals it will interact with, based on the data held in its own systems.

Cookie Policy

Like many websites, restayway.com uses cookies and similar technologies to improve user experience, ensure security, and enhance the quality of service. The restayway.com Cookie Policy has been prepared to inform website users about cookies and the types of cookies used, and to provide guidance on how to manage cookie preferences.

If you do not consent to the use of cookies, we recommend that you do not continue using the website or that you change your cookie preferences as described in this Policy. Please note that if cookies are not allowed, some features of the website may not function properly and your use of the website may be restricted.

What is a cookie?

A cookie is a small text file stored on your computer or mobile device when you visit a website. These files may store information such as your IP address, session information, and pages you visit. Thanks to cookies, your website preferences can be remembered, your session can be maintained, and you may be presented with content tailored to your interests. For more detailed information about cookies, you can visit about cookies and all about cookies.

Types of Cookies

Cookies are classified according to criteria such as their storage duration on mobile devices and by whom they are placed. The basic distinctions are as follows:

Session Cookies: Session cookies are temporary and are deleted from your device once you close your browser. Their main function is to ensure the proper functioning of the website.

Persistent Cookies: Persistent cookies remain on your device after you close your browser, either until they are deleted by the user or until they expire.

First-Party Cookies: First-party cookies are those placed on your device by the operator of the website you are visiting (restayway.com).

Third-Party Cookies: Third-party cookies are placed and controlled by individuals or organizations other than the operator of the website you are visiting.

When personal data is collected, processed, or used on restayway.com websites, other systems, or applications, data subjects are informed via a privacy notice and, when necessary, about cookies. Users are kept informed about our practices on our web pages. Personal data will always be processed in accordance with the law.

Cookies Used in restayway.com Systems

restayway.com uses various cookies for different purposes in accordance with its Privacy Policy. The types and purposes of cookies used in restayway.com systems are explained below:

Strictly Necessary Cookies: These are technical cookies that ensure the website functions properly and allow you to use its features. They are typically classified as session cookies. Blocking these cookies may result in the website’s features not functioning properly. Your consent is not required for the use of strictly necessary cookies.

Analytical Cookies: Analytical cookies are used to improve your experience on the website. They help us understand how you use the website (e.g., which pages you visit, how long you stay on the site, etc.). This information enables us to improve our content and optimize the website design.

Functionality Cookies: These cookies allow your preferences—such as language selection and region—to be remembered when you revisit the website.

Targeting/Advertising Cookies: restayway.com uses various first-party and third-party cookies for targeting and advertising purposes on its website. You can block these cookies by changing your browser settings or by adjusting your cookie preferences as described in this Policy.

Managing Cookie Preferences

You can personalize or completely block cookies by changing the settings of your browser. For detailed information on the steps to follow for different browsers, please refer to the links below:

For other browsers, you can check the help or support page of the respective browser to manage your cookie preferences.

Domestic and International Transfer of Personal Data

Your personal data may be shared with hotels, airlines, transfer service providers, and related agencies located abroad in order to complete your reservation and provide the requested service. In cases where you search for, book, or stay at hotels that do not have an agreement with restayway.com, your personal data may also be shared with other electronic platforms, both domestically and internationally. Upon lawful requests from official institutions authorized to request information and documents according to their own legislation, your personal data may also be shared with such institutions and authorities.

Additionally, if you accept the cookie information notice upon entering the restayway.com website, your data may be transferred to platforms and applications located abroad for the purposes of improving the customer experience, enabling better use of the products and services offered by restayway.com, providing personalized content and recommendations according to your preferences and habits, and determining restayway.com’s strategies.

VII. Principle of Confidentiality

Whether they are employees or other individuals, all data on restayway.com is confidential. No one may use, copy, reproduce, transfer to others, or use such data for purposes other than legitimate business operations, unless permitted by contract or law.

VIII. Transaction Security

All necessary technical and administrative measures are taken to protect the personal data collected by restayway.com, to prevent unauthorized access, and to avoid any victimization of our users or prospective customers. Compliance with software standards, careful selection of third parties, and adherence to internal data protection policies are ensured. Security measures are continuously updated and improved.

Protection of Credit Card and Payment Information

Payment and credit card information obtained from you for the services provided is transmitted to and stored in encrypted form by a third-party service provider that operates in accordance with PCI DSS (Payment Card Industry Data Security Standards) security standards, until the service fee is collected. PCI DSS security standards were developed by a council formed by leading payment card service providers such as American Express, Discover, JCB International, Mastercard, and Visa Inc. The purpose is to enable secure payment solutions, ensure that merchants, service providers, and financial institutions protect their own payment systems, and implement new security policies and technologies to prevent breaches and card information theft.

The credit card and other payment information you share with restayway.com will be transmitted to a third-party security service provider with a Level 1 security certificate in compliance with the aforementioned standards, and will be stored until the service fees are collected by the suppliers. Thereafter, your information may continue to be stored for a certain period of time to ensure transaction security.

IX. Audit

restayway.com conducts all necessary internal and external audits regarding the protection of personal data on a regular basis.

X. Notification of Violations

If restayway.com is notified of any personal data breach, it will take immediate action to remedy the violation. Measures will be taken to minimize and compensate any potential damage to the affected individuals. In case it is determined that personal data has been accessed by unauthorized parties from outside, the situation will be reported promptly to the Personal Data Protection Authority.

Notifications of violations can also be made by following the procedures indicated on the restayway.com websites.