Privacy policy
Last updated: March 31, 2026
1. Data controller
The data controller is Sindibad Turizm Ticaret Anonim Şirketi, TURSAB No: 10028, with registered office at Halaskargazi Caddesi, Cumhuriyet Mahallesi, 93/9, Şişli, Istanbul, Türkiye. Email: hola@hotelesestambul.com.
2. Data we collect
We collect the following types of personal data: (a) Identification data: name, surname, email, phone number, nationality, passport or ID number. (b) Booking data: check-in and check-out dates, room type, number of guests, special requests, booking history. (c) Browsing data: IP address, browser type, pages visited, time spent, technical and analytical cookies. (d) Payment data: credit card data is processed directly by Stripe and is never stored on our servers.
3. Purpose of processing
We use your personal data to: (a) Manage and confirm hotel bookings. (b) Send communications related to your booking (confirmation, pre-trip reminders, post-stay follow-up). (c) Send offers and news about Istanbul, only if you have given your express consent. (d) Improve our services through anonymized statistical analysis. (e) Comply with legal and tax obligations.
4. Legal basis
The processing of your data is based on: (a) The execution of the booking contract. (b) Your consent for commercial communications. (c) Our legitimate interest in improving services. (d) Compliance with legal obligations. You can withdraw your consent at any time.
5. Data recipients
Your data may be shared with: (a) Hotels where you make reservations, for the provision of accommodation services. (b) Safaryar Holidays (safaryarholidays.com), as our booking technology provider. (c) Stripe, as our payment processor. (d) Analytics and marketing service providers (PostHog, Sentry) with anonymized data. We do not sell or transfer personal data to third parties for commercial purposes.
6. User rights
In accordance with the General Data Protection Regulation (GDPR) and Turkish data protection legislation (KVKK), you have the right to: access your personal data, rectify inaccurate data, request deletion of your data, object to processing, request limitation of processing, and data portability. To exercise these rights, write to: hola@hotelesestambul.com. We will respond within a maximum of 30 days.
7. Security
We implement appropriate technical and organizational measures to protect your personal data, including SSL/TLS encryption, restricted data access, periodic backups, and continuous security monitoring. Payment data is processed in PCI DSS certified environments by Stripe.
8. Contact
For any queries related to the protection of your personal data: hola@hotelesestambul.com — Sindibad Turizm Ticaret A.Ş., Halaskargazi Caddesi, Cumhuriyet Mahallesi, 93/9, Şişli, Istanbul, Türkiye.