This notice has been prepared for visitors to the website at https://lablancheisland.com/ under Article 10 of the Personal Data Protection Law No. 6698 (the "Law") and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform.
Identity and Contact Details of the Data Controller
| Information | Description |
|---|---|
| Data controller | Güvercinlik Enternasyonel Otelcilik Turizm İnş. A.Ş. |
| Short name | La Blanche Island |
| Address | Meşelik Mahallesi Çomca Mevkii Köy Sk. No:5 Güvercinlik Bölgesi Milas/Muğla |
| Telephone | 0252 322 0000 |
| kvkkkomite@lablancheisland.com | |
| KEP address | guvercinlikenternasyonal@hs03.kep.tr |
| Website | https://lablancheisland.com/ |
1. Personal Data Processed, Purposes and Legal Bases
| Process | Data categories | Processing purposes | Legal basis |
|---|---|---|---|
| Website access and security | IP address, access time, URL, device/browser information, logs and transaction security records | Website operation, information security, prevention of misuse, fault detection and record management | Depending on the circumstances, Article 5/2-ç and/or f of the Law |
| Contact/request form | First name and surname, email, telephone, subject and message contents, files and information attached by the visitor | Receiving and responding to requests, communication and, where necessary, establishment/exercise/protection of rights | Depending on the request, Article 5/2-c, ç, e and/or f of the Law |
| Necessary cookies | Cookie identifiers, session and preference information, technical records | Providing the expressly requested service, security and recording preferences | Depending on the circumstances, Article 5/2-c, ç and/or f of the Law |
| Optional cookies | Cookie identifiers, interaction, device/browser and usage data | Selected analytics, personalization or advertising purposes | Explicit consent under Article 5/1 of the Law; not activated without a choice |
| Reservation and availability enquiries | First name and surname, contact details, Turkish identity/identity number, date of birth, nationality, address, stay dates, room and guest/child numbers and ages | Establishing and managing reservations, guest management, identity/accommodation obligations | Depending on the activity, Article 5/2-a, c, ç, e and/or f of the Law |
| Payment and invoicing | Reservation/transaction number, payment status, invoice details; limited technical records accessible to the Company where card data are collected by a payment institution | Payment referral/monitoring, invoicing, accounting and dispute management | Article 5/2-c, ç and e of the Law |
| Live support and call/callback requests | First name and surname, telephone, email, request and conversation contents, time/transaction records | Providing support, responding, and managing requests and complaints | Depending on the request, Article 5/2-c, e and/or f of the Law; additional necessary permission/consent for marketing purposes |
| Campaign/callback forms and commercial communications | First name and surname, telephone, email, channel and permission/refusal records | Making the requested callback; sending commercial electronic messages | Article 5/2-c or f of the Law for a one-off request; approval under applicable legislation and explicit consent where necessary for commercial communications |
| Third-party platforms and links | Referral/interaction, device/browser and data collected by the provider | Referral/integration to Google, Instagram, YouTube, TripAdvisor, mobile app stores and similar external services | Legal basis according to the actual integration; prior explicit consent for non-essential tracking |
2. Collection Methods
Personal data are collected wholly or partly by automated means through the web server and security systems, cookies and similar technologies, online forms and content directly submitted by the visitor; where necessary, by non-automated means as part of a data filing system.
3. Transfers
Personal data may be transferred, within the stated purposes and to the extent necessary, to hosting, reservation, payment, live support, call/communications, IT security, email, analytics and similar service providers; and to authorized public institutions and organizations and authorized private-law entities to fulfil legal obligations or establish, exercise and protect rights, subject to Article 8 of the Law. (Actual recipient groups/providers to be completed by the customer) must be specified before publication.
4. International Transfers
If international transfers occur, the recipient/country or recipient group, data categories, purpose and transfer mechanism under Article 9 of the Law are explained. If a standard contract is used, the obligation to notify the Authority within five business days of signature is also fulfilled. If there is no international transfer, this section is amended to state "no transfer abroad takes place".
5. Retention Periods
| Record | Period/criterion |
|---|---|
| Web access and security logs | Subject to the periods prescribed by Law No. 5651 and applicable legislation, for as long as necessary for security and system administration; deleted, destroyed or anonymized at the end of the period. |
| Contact/request records | A maximum of 2 years after the request is resolved; where an ongoing legal or commercial relationship exists, for its duration and applicable limitation periods. |
| Cookie and preference records | For the lifetime of the relevant cookie/technology and the validity of the user's preference; updated/deleted when preferences change or the purpose of the cookie ends. |
| Legal dispute records | Until the dispute is resolved and throughout related statutory limitation periods, for as long as necessary to protect the relevant legal obligations and rights. |
At the end of the period, data are deleted, destroyed or anonymized. Actual periods or objective determination criteria must be specified instead of vague statements such as "for as long as the processing purpose continues".
Data Subject Rights and Requests
Under Article 11 of the Law, data subjects have the right to learn whether their personal data are processed; request information if processed; learn the purpose of processing and whether the data are used accordingly; know the third parties receiving data within Türkiye or abroad; request correction of incomplete or inaccurate processing; request deletion or destruction when the conditions are met; request notification of correction/deletion/destruction to third parties receiving the data; object to an adverse result arising solely from analysis by automated systems; and request compensation for damage resulting from unlawful processing.
Requests may be submitted in accordance with the Communiqué on the Procedures and Principles for Applications to the Data Controller: in writing to Meşelik Mahallesi Çomca Mevkii Köy Sk. No:5 Güvercinlik Bölgesi Milas/Muğla, to the KEP address guvercinlikenternasyonal@hs03.kep.tr, by secure electronic/mobile signature to kvkkkomite@lablancheisland.com, or via an email address previously provided to the data controller and registered in its system.
6. Separation of Information and Explicit Consent
This notice is informational and is not subject to visitor approval. Optional activities requiring explicit consent are offered with separate, granular choices. Information and explicit consent are not combined in the same text or in a single checkbox.
7. Effective Date and Updates
This notice entered into force on 01.05.2026. Material changes in processing activities are communicated to the data subject by appropriate methods before new processing begins.
This policy has been prepared to provide information on cookies and similar technologies used on https://lablancheisland.com/ under Article 10 of Law No. 6698 and to enable visitors to manage their preferences.
1. What Is a Cookie?
Cookies are small text files stored in the browser or on the device when a website is visited. Local storage, pixels and similar technologies are also covered by this policy according to their functions.
2. Cookie Categories and Legal Bases
| Category | Purpose | Legal basis / preference |
|---|---|---|
| Strictly necessary | Operation of the website and expressly requested service, security, sessions and recording preferences. | Depending on the circumstances, Article 5/2-c, ç or f of the Law. Consent is not required; the scope is kept narrow. |
| Functional | Optional personalization and remembering advanced functions. | Prior explicit consent/active choice insofar as not necessary. |
| Analytics / performance | Measuring visits, statistics and improving website performance. | Prior explicit consent/active choice if not necessary. |
| Advertising / marketing | Interest profiles, conversion tracking and personalized advertising. | Prior explicit consent/active choice. |
3. Cookies Used
Before publication, the table below must be completed by the customer/technical service provider using the actual website, browser developer tools and a cookie scanning tool. Unused rows must be removed; the cookie/technology name, provider, category, purpose, duration, party and transfer information must be specified. The policy must not be published before the inventory is complete.
| Cookie/technology | Provider | Category | Purpose | Duration | Party | Transfer/abroad |
|---|---|---|---|---|---|---|
| Google Analytics 4 (GA4) – _ga | Analytics / Performance Cookie | Distinguishing visitors, analyzing website use and visitor behaviour, and creating statistical reports | 2 years | Third party | Yes (Google) | |
| Google Analytics 4 (GA4) – _ga_<Measurement-ID> | Analytics / Performance Cookie | Measuring session status and user interactions, and analyzing visitors' use of the website | 2 years | Third party | Yes (Google) | |
| Google Analytics 4 – _gid | Analytics / Performance Cookie | Statistical analysis of visitor behaviour and website use | 2 years | Third party | Yes (Google) | |
| Meta Pixel – _fbp | Meta | Advertising / Marketing Cookie | Measuring the effectiveness of Meta advertising, distinguishing browsers, tracking conversions and building remarketing audiences | 90 days | First party | Yes (Meta) |
| Meta Pixel – _fbc | Meta | Advertising / Marketing Cookie | Storing information about Facebook/Instagram advertising clicks (e.g. fbclid) and linking conversions to the relevant advertising interaction; created only for appropriate referrals | 90 days | First party | Yes (Meta) |
| Meta Pixel (pixel technology) | Meta | Advertising / Marketing Technology | Measuring page views and relevant conversion events, evaluating advertising performance and conducting remarketing activities | Not a cookie | Third party | Yes (Meta) |
4. Giving and Changing Preferences
• Non-essential cookies are not activated before the visitor makes an explicit choice.
• The reject-all option is as visible and accessible as the accept-all option.
• Category boxes are not preselected; purposes are shown separately and clearly.
• The version, category, time and necessary technical records of consent are retained to meet the burden of proof.
• Browser settings may provide additional control, but cannot alone replace an appropriate preference panel for non-essential cookies.
5. Transfer and Retention of Personal Data
Cookie data may be shared with necessary recipient groups only within the purposes and durations specified in the table. For providers causing international transfers, an appropriate transfer mechanism under Article 9 of the Law is also established and explained in the table. If cookie expiry and server-side record retention periods differ, both must be specified.
Data Subject Rights and Requests
Under Article 11 of the Law, data subjects have the right to learn whether their personal data are processed; request information if processed; learn the purpose of processing and whether the data are used accordingly; know the third parties receiving data within Türkiye or abroad; request correction of incomplete or inaccurate processing; request deletion or destruction when the conditions are met; request notification of correction/deletion/destruction to third parties receiving the data; object to an adverse result arising solely from analysis by automated systems; and request compensation for damage resulting from unlawful processing.
Requests may be submitted in accordance with the Communiqué on the Procedures and Principles for Applications to the Data Controller: in writing to Meşelik Mahallesi Çomca Mevkii Köy Sk. No:5 Güvercinlik Bölgesi Milas/Muğla, to guvercinlikenternasyonal@hs03.kep.tr, by secure electronic/mobile signature to kvkkkomite@lablancheisland.com, or via an email address previously provided to the data controller and registered in its system. Duly submitted requests are resolved within thirty days at the latest and generally free of charge; if the procedure incurs additional costs, the tariff determined by the Board may apply.
Identity and Contact Details of the Data Controller
| Information | Description |
|---|---|
| Data controller | Güvercinlik Enternasyonel Otelcilik Turizm İnş. A.Ş. |
| Short name | La Blanche Island |
| Address | Meşelik Mahallesi Çomca Mevkii Köy Sk. No:5 Güvercinlik Bölgesi Milas/Muğla |
| Telephone | 0252 322 0000 |
| kvkkkomite@lablancheisland.com | |
| KEP address | guvercinlikenternasyonal@hs03.kep.tr |
| Website | https://lablancheisland.com |
6. Effective Date
This policy entered into force on 01.05.2026.