1. What is a Cookie?
Cookies are small text files placed on your computer, tablet, or smartphone via your browser when you visit a website. Cookies are utilized to ensure the secure functioning of the website, preserve session integrity, and remember user preferences.
2. Cookie Categories and Purposes
Beg Spa & Wellness employs cookies strictly for transparent, proportionate, and legitimate purposes:
A. Strictly Necessary Cookies
Essential for basic website security, page routing, Cross-Site Request Forgery (CSRF) protection on reservation forms, and recording your cookie consent preferences. These cookies cannot be disabled as they are required for fundamental site operation.
B. Functional Cookies
Utilized to remember your chosen language preference (TR/EN) on subsequent page loads and display interactive Google Maps on our contact page. Activated strictly upon explicit user consent.
C. Analytics & Performance Cookies
Third-party tracking tools such as Google Analytics are currently not deployed on our website.
D. Marketing & Targeting Cookies
Remarketing pixels or third-party ad networks (such as Meta Pixel) are currently not utilized on our website.
3. Verified Cookie Inventory Table
The factual cookie inventory verified directly from our application codebase and browser runtime is detailed below:
| Cookie Name | Provider | Party | Purpose | Lifespan | Category & Security |
|---|---|---|---|---|---|
begspa_csrf_seed |
begspa.com.tr | First-Party | Prevents CSRF (Cross-Site Request Forgery) attacks on reservation intake forms and verifies submission authenticity. | Duration of the browser session | Strictly Necessary HttpOnly, Secure, SameSite=Lax |
begspa_locale |
begspa.com.tr | First-Party | Remembers visitor language selection (TR / EN) across subsequent visits (only set when functional consent is granted). | 365 Days (1 Year) | Functional HttpOnly, Secure, SameSite=Lax |
begspa_cookie_consent |
begspa.com.tr | First-Party | Stores your consent choices and timestamp submitted via the Cookie Preference Center. | 180 Days (6 Months) | Necessary / Functional Secure, SameSite=Lax |
BEGSPA_ADMIN_SESSID |
begspa.com.tr | First-Party | Restricted exclusively to authorized CMS administrators logging into the /admin dashboard. Never served to public guests. | 30 min idle / 8 hr absolute | Necessary (Admin Only) HttpOnly, Secure, SameSite=Lax |
4. Third-Party Integrations & Google Maps
Our contact page incorporates an interactive Google Maps element to assist guests in locating our physical venue at YediMavi Lacivert. In accordance with privacy standards, this iframe component is not loaded until you explicitly enable “Functional Cookies” via the preference center or the map placeholder.
You may alternatively access directions without loading any third-party cookies using our direct Google Maps Share Link at any time.
5. Managing and Withdrawing Cookie Consent
You can change your preferences or withdraw consent at any time by clicking the “Cookie Preferences” button located in the footer of every page:
Alternatively, you may adjust cookie permissions or delete saved cookies directly through your web browser settings.
To learn more regarding your rights under Turkish Data Protection Law, please consult our Personal Data Protection Notice (KVKK).
