Data controller
This notice has been prepared by Zen Spa (part of Suzanne Spa Group) as data controller under the Turkish Personal Data Protection Law No. 6698 (“KVKK”).
Personal data we process
Through our booking and contact forms we process your full name, phone number, email address, room number if you are a hotel guest, the treatment, date and time you choose, and any information you share in your note. For security, your IP address and the time of the request are also recorded.
Purposes
Your data is processed to receive and confirm your booking request, contact you, provide the treatment as requested, meet legal obligations and keep the website secure.
Legal basis
We process your data under Article 5 of the KVKK on the grounds that it is directly related to entering into or performing a contract, necessary for our legal obligations, and in our legitimate interest. Special categories of data, such as health information you may share in your note, are processed only with your explicit consent and solely to provide the treatment safely.
Transfers
Your data may be shared, to the extent necessary to provide the service, with authorised units within Suzanne Spa Group and with our email and hosting providers. It is not transferred to third parties except where required by law.
Retention
Booking and contact records are kept for as long as the purpose requires and for the periods set out in applicable legislation, after which they are deleted or anonymised.
Your rights
Under Article 11 of the KVKK you have the right to learn whether your data is processed, request information, ask for correction or deletion, and object. You can send your requests to info@zensparamada.com.