Personal Data Protection Law

Purpose of the Personal Data Protection and Processing Policy:

As San-Tur Tourism Joint Stock Company (Megasaray Hotels), we take utmost care and diligence in ensuring the security of your personal data. With this awareness, we attach great importance to the processing, recording, transfer, sharing, and storage of all types of personal data belonging to individuals associated with our Company, including those who benefit from our products and services, in compliance with the Law on the Protection of Personal Data No. 6698 (“KVK Law”).


The protection of personal data is among our Company’s core policies. Since our establishment, we have prioritized the confidentiality of personal data, adopted this as a principle of conduct, and instructed our employees to act in line with this principle. Within the scope of our Personal Data Protection and Processing Policy, San-Tur Tourism J.S.C. (Megasaray Hotels) aims to safeguard the data automatically obtained from our customers, potential customers, employees, business partners’ employees, and other third parties with whom we are in contact due to business relations.



Our Company accepts and undertakes to comply with all responsibilities imposed by the KVK Law. With this awareness and in our capacity as Data Controller, we process, record, transfer, share, and store your personal data in accordance with the principles set out below and within the limits mandated by the applicable legislation.


For all requests related to the Personal Data Processing and Information Notice, you may use the following contact details:

San-Tur Turizm A.Ş. (Megasaray Hotels)
Kadriye Mah. Üçkum Tepesi Caddesi No: 8 /1 Belek / ANTALYA, Türkiye
E-mail: 
kvkk@megasarayhotels.com


Our Company reserves the right to amend this Information Notice on the Protection and Processing of Personal Data at any time within the framework of legislative changes.

Collection, Processing, Purpose, and Core Principles of Personal Data:

San-Tur Turizm Anonim Şirketi (Megasaray Hotels) attaches great importance to obtaining data collected or received from other companies in accordance with the law.

  1. Always Based on Accurate and True Information: We ensure that all data within the Company is accurate, does not contain incorrect information, and is always kept up to date.
  2. Limited Processing of Data: Data of individuals is processed only to the extent required for service and business purposes. Data is not processed or used outside the scope of business and service needs.
  3. Retention of Data for Periods Specified in Laws: San-Tur Turizm Anonim Şirketi (Megasaray Hotels) retains data originating from contracts for legally specified periods. When these periods expire, the data is deleted or anonymized.


The Personal Data Protection and Confidentiality Policy of San-Tur Turizm Anonim Şirketi (Megasaray Hotels) has been prepared in accordance with the PDPL. In this context, your personal data may be collected by our Company through verbal, written, or electronic means, such as offices, branches, dealers, call centers, websites, social media channels, mobile applications, and similar tools, depending on the services, products, or commercial activities provided by our Company. As long as you benefit from the services of our Company, your personal data will continue to be processed and updated.



Furthermore, your personal data is processed by San-Tur Turizm Anonim Şirketi (Megasaray Hotels) to enable you to benefit more effectively from the products and services we offer and to reshape our services according to your preferences and needs. The processing of your personal data may also serve purposes related to the determination of our Company's commercial and business strategies, the management of human resources policies, legal compliance processes, financial affairs, and ensuring the legal and commercial security of individuals in business relations with our Company.

Method and Legal Basis for Collecting Personal Data:

Your personal data may be collected in any verbal, written, or electronic form within the framework of the above-mentioned purposes to provide our products and services as specified by law. The personal data collected on this legal basis is processed, recorded, transferred, shared, and stored in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the PDPL, as detailed in the relevant section of this document.

Processing of Special Category Personal Data:

According to the law, data such as an individual's race, ethnic origin, political opinion, religious, sectarian, or other beliefs are considered special category personal data. San-Tur Turizm Anonim Şirketi (Megasaray Hotels) takes sufficient precautions determined by the Board in addition to obtaining the consent of the relevant person when processing special category personal data.

To Whom and For What Purpose Processed Personal Data May Be Transferred:

Your collected personal data may be transferred to Şahinler Holding, group companies affiliated with San-Tur Turizm Anonim Şirketi (Megasaray Hotels), our shareholders, business partners, suppliers, legally authorized public institutions, and private individuals for the purposes specified in section (B) and within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the PDPL.

Rights of the Personal Data Owner Under Article 11 of the PDPL:

Under the PDPL, the relevant person has the right to be informed and to give consent before their personal data is processed, and after processing, they have the right to determine the fate of their data. If you submit your requests regarding your rights as a personal data owner through the methods specified in the "Personal Data Processing Disclosure Statement," your request will be finalized free of charge within thirty days at the latest.

Data Retention Periods:

In compliance with the PDPL, your personal data processed for the purposes specified in this “Personal Data Processing Disclosure Statement” will be deleted, destroyed, or anonymized when the purpose requiring processing no longer exists and/or the statutory retention periods expire.

Situations Where San-Tur Turizm Anonim Şirketi (Megasaray Hotels) May Process Your Personal Data Without Your Explicit Consent:

Pursuant to Article 5 of the PDPL, in certain situations, San-Tur Turizm Anonim Şirketi (Megasaray Hotels) may process your personal data without your explicit consent. These situations include cases stipulated by law, protection of public health or life, and legitimate interests, among others.

Requesting Under the Law on the Protection of Personal Data:

Pursuant to Article 13 of the KVK Law, you may communicate your requests regarding the exercise of the above-mentioned rights to our Company using the methods determined/to be determined by the Personal Data Protection Board.

You may complete the form at the provided link and send a signed copy by registered mail with return receipt, via notary public, or electronically with a secure electronic signature to kvkk@megasarayhotels.com or santur@hs02.kep.tr.