Privacy and Cookies Policy

Last Updated: 7 November 2026

Göreme Kelebek Turizm Ltd. Şti. (“Kelebek Cave Hotel”, “our hotel”, “we”, “us” or “our”) respects the privacy and personal data protection rights of its guests, website visitors and business partners.

We are committed to protecting personal data and processing it in accordance with applicable data protection legislation, including the Turkish Personal Data Protection Law No. 6698 (“KVKK”).

This Privacy and Cookies Policy explains how we collect, process, use, store, share and protect personal data through our website, reservation channels and other communication platforms.

We reserve the right to update this Policy when necessary to reflect changes in our business practices, technological developments and applicable legislation. Any significant changes will be communicated through appropriate channels.

1. Scope of This Policy

This Policy applies to personal data collected through the following channels:

Our official website: www.kelebekhotel.com
Our online reservation system powered by Reseliva.
Direct reservation requests and bookings made with our hotel.
Travel agencies, online travel agencies (OTAs) and other booking platforms.
Email, telephone, WhatsApp and other communication channels.
Social media accounts managed by or on behalf of our hotel.
Check-in and check-out procedures at our hotel.
Guest feedback forms, surveys, reviews, requests and complaints.
Marketing campaigns, promotional activities and events.

Our website, online reservation services, social media accounts and other digital communication channels are collectively referred to as “Digital Platforms”.

2. What Personal Data Do We Collect?

The personal data we collect may vary depending on the nature of your relationship with our hotel and the services you use.

The categories of personal data we may process include:

2.1. Identification Information

Full name, surname, passport number, national identification number, nationality, date of birth and other identification details required for reservation, accommodation and legal reporting obligations.

2.2. Contact Information

Email address, telephone number, mobile phone number, residential address and other contact details provided when making a reservation or communicating with our hotel.

2.3. Reservation and Accommodation Information

Reservation dates, arrival and departure information, room preferences, number of guests, accommodation history, special requests, cancellation details and information related to the services requested or received.

2.4. Financial Information

Payment transaction details, billing information, invoice details and other financial information necessary to process payments and fulfil financial obligations.

Payment card details may be processed by authorised payment service providers through secure payment systems.

2.5. Guest Preferences and Service Information

Information regarding your preferences, special accommodation requests, service preferences, feedback and experiences at our hotel, where relevant to providing and improving our services.

2.6. Communication Information

Information contained in emails, telephone conversations, WhatsApp messages, online enquiries, feedback forms, reviews, requests and complaints.

2.7. Digital and Technical Information

IP address, browser type, device information, operating system, website usage data, access logs, cookie records and other technical information collected through our Digital Platforms.

2.8. Location Information

Location information may be processed where you voluntarily share your location or use location-based features provided through our Digital Platforms.

2.9. Visual and Audio Information

Photographs, video recordings and CCTV footage collected for security, operational and other legitimate purposes, where applicable.

2.10. Legal and Compliance Information

Information required to fulfil our legal obligations, respond to authorised requests from public institutions and comply with applicable legislation.

2.11. Marketing and Communication Preferences

Your preferences regarding promotional communications, newsletters, special offers, campaigns and other marketing activities, where applicable.

3. Why Do We Process Your Personal Data?

Kelebek Cave Hotel may process personal data for the following purposes:

To receive, manage and confirm accommodation reservations.
To provide hotel accommodation and related hospitality services.
To manage check-in, check-out and guest registration procedures.
To fulfil legal reporting and regulatory obligations.
To process payments, invoices and accounting transactions.
To respond to enquiries, requests, feedback and complaints.
To arrange additional services and experiences requested by guests.
To improve our website, reservation systems and guest experience.
To maintain the security of our hotel, guests, employees and facilities.
To conduct customer satisfaction surveys and service quality assessments.
To communicate relevant information regarding reservations and hotel services.
To conduct marketing and promotional activities where legally permitted.
To establish, exercise or defend our legal rights.

Personal data will only be processed for specific, legitimate and lawful purposes and in accordance with applicable legislation.

4. Sharing and Transfer of Personal Data

Your personal data may be shared with third parties where necessary for the provision of our services, fulfilment of legal obligations or other lawful purposes.

These parties may include:

Reservation and property management system providers.
Online booking platforms and authorised travel agencies.
Payment service providers and financial institutions.
Technology, website hosting and IT support providers.
Professional advisers, auditors and legal consultants.
Marketing and communication service providers, where applicable.
Companies within our business group, where legally permitted and necessary.
Public institutions and legally authorised authorities.

Personal data will only be shared to the extent necessary for the relevant purpose and in accordance with applicable data protection legislation.

4.1. Online Reservation Service Provider – Reseliva

Our hotel uses Reseliva as its online reservation system provider to manage direct bookings made through our website.

When you make a reservation through our website, the personal information you provide, including your name, contact details, reservation dates, accommodation preferences and relevant booking information, may be processed through Reseliva's booking system.

This information is shared with Reseliva to the extent necessary to manage, process and confirm your reservation and provide the requested accommodation services.

For further information about how Reseliva processes personal data, please review its Privacy Policy:

https://www.reseliva.com/ns/privacy_policy.php

4.2. International Data Transfers

As we welcome guests from different countries and may work with international service providers, certain personal data may need to be transferred abroad.

Any international transfer of personal data will be carried out in accordance with the requirements and safeguards stipulated under Article 9 of the Turkish Personal Data Protection Law No. 6698 and applicable regulations.

5. Retention of Personal Data

Our hotel retains personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with applicable legal obligations.

Retention periods are determined by considering:

The purpose of processing.
Applicable legal and regulatory requirements.
Accounting and financial record-keeping obligations.
Reservation and accommodation records.
Relevant limitation periods and legal proceedings.

Once the relevant retention period expires or the legal basis for processing ceases to exist, personal data will be deleted, destroyed or anonymised in accordance with applicable legislation.

6. Principles Relating to Personal Data Protection

Our hotel processes personal data in accordance with the fundamental principles of the Turkish Personal Data Protection Law No. 6698:

Processing personal data in accordance with the law and principles of good faith.
Ensuring that personal data is accurate and up to date where necessary.
Processing personal data for specific, explicit and legitimate purposes.
Ensuring that personal data is relevant, limited and proportionate to the purposes of processing.
Retaining personal data only for the period required by applicable legislation or the relevant processing purpose.

7. Cookies and Similar Technologies

Our website may use cookies and similar technologies to improve website functionality, enhance the browsing experience and understand how visitors interact with our website.

Cookies are small text files stored on your device when you visit a website.

Depending on their purpose, cookies may include the following categories:

7.1. Strictly Necessary Cookies

These cookies are essential for the proper functioning of our website and enable basic features such as page navigation, security and reservation functionality.

7.2. Functional Cookies

These cookies help remember your preferences and settings to provide a more convenient browsing experience.

7.3. Analytical and Performance Cookies

These cookies may help us understand how visitors use our website, which pages are visited and how website performance can be improved.

7.4. Advertising and Marketing Cookies

Where applicable and subject to the required consent, these cookies may be used to provide relevant advertisements, measure campaign performance and understand visitors' interests.

You may manage your cookie preferences through the cookie settings available on our website, where provided, and adjust or disable cookies through your browser settings.

Please note that disabling certain cookies may affect some website functionalities.

8. Use of Digital Platforms

When you visit or interact with our Digital Platforms, certain personal and technical information may be processed to:

Operate and maintain our website.
Improve website functionality and user experience.
Monitor website performance and usage.
Ensure the security of our digital services.
Manage online reservation requests and guest enquiries.
Provide information about our hotel and available services.

Where consent is required by applicable legislation, relevant processing activities will only take place after obtaining the necessary consent.

9. Data Security

Our hotel takes appropriate technical and organisational measures to protect personal data against unauthorised access, unlawful processing, accidental loss, alteration or destruction.

These measures may include:

Access controls and authorisation procedures.
Secure systems and technical protection measures.
Appropriate data storage and backup procedures.
Internal data protection policies and procedures.
Employee awareness and confidentiality obligations.
Monitoring and reviewing data security practices.
Appropriate contractual obligations for third-party service providers.

Access to personal data is restricted to authorised personnel who require such information for legitimate business purposes.

10. Your Rights Under the Turkish Personal Data Protection Law (KVKK)

Under Article 11 of the Turkish Personal Data Protection Law No. 6698, you have the right to:

Learn whether your personal data is being processed.
Request information regarding the processing of your personal data.
Learn the purpose of processing and whether your personal data is being used in accordance with that purpose.
Learn the third parties to whom your personal data is transferred, domestically or abroad.
Request the correction of incomplete or inaccurate personal data.
Request the deletion or destruction of personal data under the conditions stipulated by law.
Request notification of correction, deletion or destruction operations to third parties to whom your personal data has been transferred.
Object to a result arising against you through the analysis of your personal data exclusively by automated systems.
Request compensation for damages arising from the unlawful processing of your personal data.

You may exercise these rights by submitting a request to Göreme Kelebek Turizm Ltd. Şti. through the contact details provided below, in accordance with the applicable application procedures.

Requests will be evaluated and concluded within the periods stipulated under applicable legislation and, where applicable, within a maximum of thirty (30) days.

Requests are generally handled free of charge. However, a fee may be charged where permitted under the applicable tariff determined by the Personal Data Protection Board.

11. Third-Party Websites and Services

Our website may contain links to third-party websites, booking platforms, payment services or social media platforms.

These third-party services operate independently and may have their own privacy policies, cookie policies and data protection practices.

Our hotel is not responsible for the privacy practices or content of third-party websites. We recommend reviewing their respective privacy policies before sharing personal information.

12. Changes to This Policy

We may update this Privacy and Cookies Policy when necessary to reflect changes in our services, business operations, technology or applicable legislation.

The latest version will always be made available on our official website:

www.kelebekhotel.com

13. Contact Information

If you have any questions, concerns or requests regarding this Privacy and Cookies Policy or the processing of your personal data, you may contact the data controller using the details below:

Data Controller: Göreme Kelebek Turizm Ltd. Şti.

Hotel: Kelebek Cave Hotel

Address: Göreme, Cappadocia, Nevşehir, Türkiye

Website: https://www.kelebekhotel.com

Email: [email protected]

Telephone: +90 384 271 25 31

WhatsApp: +90 538 400 25 20

For requests concerning your rights under the Turkish Personal Data Protection Law No. 6698, please contact us through the above communication channels in accordance with the applicable application procedures.

Göreme Kelebek Turizm Ltd. Şti.

Kelebek Cave Hotel Team

Follow Us