Privacy Policy

Last updated: 26 August 2026

1. Who we are

This website is operated by Kaş Medusa Otelcilik Turizm Yatırım İnşaat Ticaret Ltd. Şti. (“Medusa Hotel”, “we”, “us”).

Andifli Mah. Hükümet Cad. No: 53, Küçükçakıl, 07580 Kaş / Antalya, Türkiye
E-mail: medusahotel@gmail.com
Phone: +90 543 836 14 40

We are the data controller for personal data collected through this website, under the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and, for visitors located in the European Union, the General Data Protection Regulation (“GDPR”).

2. What we collect and why

Contact form. When you write to us through the form on our Contact page, we collect your name, e-mail address, subject and message. We use this only to answer you.

Server and security data. Our hosting provider records standard technical data such as your IP address, browser type and the time of your visit. Our contact form is protected by an anti-spam check that inspects your IP address and browser characteristics to distinguish people from bots.

Reservations. Bookings are not taken on this website. When you choose to book, you are directed to an external reservation provider and leave our site. Any data you enter there is handled by that provider under its own privacy policy, not this one.

We do not knowingly collect data from children, and we do not use your data for automated decision-making or profiling.

3. Legal basis

We process contact form data on the basis of your explicit request to be contacted (KVKK Art. 5/2-c; GDPR Art. 6(1)(b)). We process technical and security data on the basis of our legitimate interest in keeping the site available and free of abuse (KVKK Art. 5/2-f; GDPR Art. 6(1)(f)).

4. Cookies

This website uses only cookies that are necessary for it to work — for example to remember your language choice and to keep the contact form secure. We do not currently use advertising or tracking cookies.

You can block or delete cookies through your browser settings. If you do, parts of the site may not work correctly.

5. Who we share it with

We do not sell your personal data and we do not share it for marketing purposes. We share it only with the service providers that make this website work:

  • our hosting provider, which stores the website and its data;
  • our e-mail delivery provider, which transmits the messages sent through the contact form;
  • our security provider, which runs the anti-spam check on the contact form.

These providers act on our instructions and may process data on servers outside Türkiye. We may also disclose data where we are legally required to do so by a court or a competent public authority.

6. How long we keep it

Contact form messages are kept for as long as needed to deal with your enquiry and for up to two years afterwards, then deleted. Technical and security logs are kept for a short period as part of normal server operation.

7. Your rights

Under KVKK Art. 11 and, where the GDPR applies, Chapter III, you have the right to:

  • learn whether we process your personal data, and request information about that processing;
  • obtain a copy of the data we hold about you;
  • have inaccurate or incomplete data corrected;
  • request that your data be deleted, and that third parties be informed of the deletion;
  • object to processing and, where the GDPR applies, request that it be restricted or that your data be transferred to another controller;
  • claim compensation for damage caused by unlawful processing.

8. How to exercise your rights

Write to medusahotel@gmail.com or to the postal address above. We will respond within thirty days at the latest. If you are not satisfied with our answer, you may complain to the Turkish Personal Data Protection Authority (KVKK Kurumu) or, in the EU, to your local supervisory authority.

9. Changes to this policy

We may update this policy when our practices or the applicable law change. The current version is always the one published on this page, with the date shown at the top.