This notice has been prepared in accordance with Article 10 of Law No. 6698 on the Protection of Personal Data (KVKK; “the Law”) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform. It covers people who visit the veloragrandsuite.com website and people who contact us through the site. Accommodation, venue contracts and other transactions outside the site are not within the scope of this notice.
1. Data controller
Your personal data are processed by VELORA GRAND TURİZM İNŞAAT GIDA SANAYİ TİCARET LİMİTED ŞİRKETİ (“the Company”) in its capacity as data controller. The Company provides services at the same address under the Velora Grand Roof event venue and Velora Grand Suite brands.
- Address: Batı Mah. Hakimler Çıkmazı Sk. Yayla A Blok No:1 İç Kapı No:1, 34890 Pendik / İstanbul
- Tax office / tax identification number: Kartal / 9241166597
- Email: veloragrandotel@gmail.com
- Phone: 0538 454 96 79
2. Personal data processed
Only the following data are processed on the site:
- “Check a date” form: your identity information (full name), your contact information (phone number) and your enquiry information (event date, approximate number of guests, event type, whether accommodation is needed and anything you write in the note field). Full name and phone are required; the other fields are optional.
- Form record: the date and time of submission, the indication that you have read this notice and the follow-up status of your enquiry.
- Form security: a salted hash value generated from your IP address. The site software does not store your raw IP address; the IP address appears only in the server logs described below.
- Server logs: IP address, date and time of the visit, the page requested and browser information.
- If you contact us via WhatsApp, phone or email: your phone number or email address, your WhatsApp profile name and the message or information you send.
Please do not write special categories of personal data, such as health, religion or belief, or identity or payment information, in the note field or in your messages. Please share information about other people only to the extent necessary for your enquiry.
No analytics, advertising or social media tracking tools are used on the site. No cookies are placed on visitors’ devices. Details are in the Cookie Policy.
3. Purposes of processing
- To respond to your event enquiry, inform you whether the date is available, prepare a quote and plan a visit to the venue.
- To assess room requirements for event enquiries that need accommodation.
- To answer the questions you send via WhatsApp, phone or email.
- To follow up your enquiry and to be able to show that we have provided this notice to you.
- To prevent misuse of the form through automated and repeated submissions.
- To ensure the security of the site and to detect technical problems.
- To protect our rights if a dispute arises.
- To comply with lawful requests from competent authorities and courts.
Your form information is not used to send advertising, campaign or promotional messages.
4. Legal grounds
- Your form information and the information you send via WhatsApp, phone or email are processed to respond to your enquiry, prepare a quote, assess room requirements and plan a visit. Legal ground: the processing is directly related to the establishment of a contract initiated at your request (Article 5(2)(c) of the Law).
- The form record and enquiry records are kept during the retention period in order to follow up your enquiry and to be able to show that we have provided this notice to you. Legal ground: the Company’s legitimate interest, provided that it does not harm your fundamental rights and freedoms (Article 5(2)(f)).
- The IP hash is processed to prevent misuse of the form; server logs are processed for site security and to detect technical problems. Legal ground: the Company’s legitimate interest (Article 5(2)(f)).
- Requests from competent authorities and courts: compliance with the Company’s legal obligation (Article 5(2)(ç)).
- Disputes: the establishment, exercise or protection of a right (Article 5(2)(e)).
Processing on the site is not based on explicit consent. The “I have read the Privacy Notice (KVKK)” box on the form only shows that you have read this notice; it is not a declaration of explicit consent.
5. Method of collection
Data are collected electronically:
- Form information and form record: when you submit the form, by fully automated means.
- IP hash: when you submit the form. Server logs: when you visit the site. Both by fully automated means.
- WhatsApp, phone and email information: when you initiate contact, in writing or verbally; by partially automated means.
6. Transfer
- Hosting provider: The site, form records and server logs are kept on the servers of the site’s hosting provider. The hosting provider processes these data on behalf of the Company for the purpose of providing the hosting service. The legal grounds are those stated for these data in Section 4 (Article 5(2)(c) and 5(2)(f)). The hosting provider also keeps the server logs under the retention obligation that Law No. 5651 imposes on hosting providers.
- Competent public institutions and organisations and judicial authorities: only when legally required and to the extent requested. Legal ground: the Company’s legal obligation (Article 5(2)(ç)).
Apart from these, your form information is not shared with any person or company. The notification email sent to the Company when the form is submitted does not contain your name, phone number or note.
Services you connect to by your own choice
In the following two cases, data reach service providers whose servers may be located abroad, by your choice and directly from your device. Using these services is optional.
- Map: The map is not loaded and no request is sent to Google until you click the “Show map” button. When you click, your browser connects to Google’s servers. Google may process your IP address and browser information and may place cookies on your device. This processing is subject to Google’s privacy policy: https://policies.google.com/privacy
- WhatsApp: If you write to us via the WhatsApp link, your messages are transmitted through the infrastructure of WhatsApp (Meta) and may be processed on servers abroad, including in the USA: https://www.whatsapp.com/legal/privacy-policy. Our reply is also sent through the same application. You can also send the same enquiry by phone or through the form on the site.
Booking redirection
Room bookings are not made on this site. The “Book” and “See available rooms” buttons take you to the booking page of Reseliva (reseliva.com). The site adds to this link only the check-in and check-out dates you select, the number of adults and children and the children’s ages; your name or phone number is not transferred. The information you enter on the booking page is not within the scope of this notice.
7. Retention period
- Form records: 12 months from the date of submission. When the period expires, the record is permanently deleted by the daily automatic clean-up.
- If the form is submitted with errors: the information you entered is kept temporarily for 15 minutes to make it easier for you to fill in the form again. It is deleted when the page is reopened or, if the page is not reopened, at the latest at the next daily automatic clean-up.
- Enquiries received via WhatsApp, phone and email: the same period as form records (12 months).
- IP hash: valid for 1 hour after the last submission; deleted at the latest at the next daily automatic clean-up.
- Server logs: for the period prescribed by legislation, as required by the hosting company’s obligation under Law No. 5651 (not less than one year and not more than two years).
If your enquiry leads to a contract, the contract and invoice records are also kept separately for the periods prescribed by commercial and tax legislation. Data whose retention period has expired are deleted, destroyed or anonymised in accordance with Article 7 of the Law.
8. Your rights (Article 11 of the Law)
By applying to the Company, you have the right to:
- a) learn whether your personal data are processed,
- b) request information about the processing if your data have been processed,
- c) learn the purpose of the processing and whether the data are used in accordance with that purpose,
- ç) know the third parties in Türkiye or abroad to whom the data are transferred,
- d) request rectification if the data are incomplete or inaccurately processed,
- e) request the erasure or destruction of the data within the framework of the conditions in Article 7 of the Law,
- f) request that the operations carried out under subparagraphs (d) and (e) be notified to the third parties to whom the data have been transferred,
- g) object to a result against you arising from the analysis of the data exclusively through automated systems,
- ğ) claim compensation for damage if you suffer damage due to unlawful processing
The methods of application are set out in Section 9.
9. Methods of application
In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, you can submit your application by one of the following methods:
- By delivering a petition bearing your wet signature by hand to the address in Section 1, or by sending it by post or through a notary public.
- By signing it with a secure electronic signature or mobile signature and sending it to veloragrandotel@gmail.com.
- By sending it to veloragrandotel@gmail.com from the email address you have previously notified to the Company and that is registered in our system.
Your application must include your full name, your signature for written applications, your Turkish identity number (T.C. kimlik no.) (for foreign nationals, nationality and passport number or, if any, identity number), your address for notifications, your email and phone if any, and the subject of your request. Please attach any relevant documents.
Your application will be concluded free of charge as soon as possible and within 30 days at the latest. If the process requires an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.
If your application is rejected, you find the response insufficient or no response is given in time, you may file a complaint with the Personal Data Protection Board within 30 days from the date you learn of the response and, in any case, within 60 days from the date of your application (Article 14 of the Law).
10. Date of update
This notice is updated when the processing activities change. The current text is on this page.