1. Scope
This Privacy Policy explains how personal data is protected when you visit the Beg Spa & Wellness website or use our reservation and communication channels. The data controller is DUYAR SPOR SALONLARI VE GÜZELLİK MERKEZİ TİCARET LİMİTED ŞİRKETİ.
2. Data We Process
Reservation and communication processes may involve your full name, telephone number, email address where provided, selected service, preferred date and time window, party size, and optional note. Privacy-notice acknowledgement details, a limited IP hash, and browser information may be retained for security. Please do not enter health data or other sensitive personal data in the note field.
3. Purposes
Data is used to answer requests, assess availability, contact guests, operate the requested service and business processes, maintain security, and prevent abuse. Acknowledging the KVKK notice is not marketing consent; any commercial communication permission is obtained separately.
4. Retention and Sharing
Reservation, communication, and related acknowledgement records are retained for one year from the request date, subject to mandatory legal periods. Data is not transferred abroad. Domestic sharing is limited to authorised service providers where necessary to deliver the service or to competent authorities where legally required.
5. Security and Cookies
We apply access controls, CSRF protection, rate limits, data minimisation, and secure-session measures. Non-essential cookies are not activated without active consent. See our Cookie Policy for the current inventory.
6. Your Rights and Contact
Our Personal Data Protection Notice explains how to exercise your rights under the KVKK. You may contact info@begspa.com.tr.
