Privacy Notice
The data controller is Faralya. For any request or notice under this statement, please write to .
What data we collect and from where: from the partner application form, the diagnostic wizard, the contact form, and our conversations we collect name, surname, role, corporate email, phone, hotel name, region, room count and your message.
In addition, publicly available hotel contact details (corporate email, phone, website, Google Business Profile) are collected from the Ministry of Culture and Tourism facility list, the hotel's own site and other publicly available sources.
Site usage data (IP address, browser, pages visited) is collected from Cloudflare server logs.
Contract and invoice information provided during the engagement is also processed.
Personal email addresses (such as gmail or hotmail), personal mobile numbers and personal addresses that include a first and last name are not added to our commercial communication pool; only corporate addresses are processed.
Purposes and legal bases: evaluating your application and replying to you; performing the service agreement, invoicing and support; sending commercial electronic messages to hotels about our services (for merchant or tradesperson recipients, prior consent is not required under Law No. 6563 and the Commercial Communication Regulation, and an opt-out link is included in every message); site security and debugging; and handling legal requests and disputes. The legal bases under Article 5 of the Turkish Personal Data Protection Law are establishment of a contract, performance of a contract, legal obligation, legitimate interest, and establishment, exercise or protection of a right.
Hosting and email infrastructure is provided by services hosted abroad: Cloudflare (abroad), Google Workspace (abroad) and an email sending service hosted abroad; only corporate communication data is processed through this infrastructure, and transfers are carried out under the safeguards of Article 9 of the Turkish Personal Data Protection Law. Data is shared with competent authorities only upon a lawful request; we do not sell your data and do not share it with third parties for marketing purposes.
Retention periods: application and contact data for 2 years from the last contact; contract and invoice records for the statutory period of 10 years; the commercial communication pool until you opt out, after which your address is kept only to honour the do-not-send request; server logs for 6 months.
Commercial electronic messages and opt-out: every message we send to your hotel carries our sender identification and a one-click opt-out link; opt-out requests are processed within at most 3 business days. You may also send your opt-out request to .
Your rights under Article 11 of the Turkish Personal Data Protection Law: to learn whether your data is being processed, to request information, to learn whether it is used in line with its purpose, to learn about third parties to which it is transferred, to request correction, deletion or destruction, to request that these actions be notified to transferred parties, to object to outcomes produced by automated analysis and to claim compensation if you suffer harm. Your request is sent to and answered within at most 30 days.
Cookies: our site does not use non-essential cookies and does not set any third-party analytics or advertising cookies; if cookie usage changes, an updated cookie policy will be published separately. The current version of this notice is published on this page; any changes will be announced here before taking effect.
Data controller / legal notice
The legal notice will be updated with the company title once incorporation is complete.