This Privacy Policy has been prepared to explain our general approach to personal data protection to visitors to the La Blanche Island website at https://lablancheisland.com/, operated by Güvercinlik Enternasyonel Otelcilik Turizm İnş. A.Ş. (the "Company"). Detailed information on specific processing activities is provided separately in the Website Privacy Notice and Cookie Policy.
1. Purpose and Scope
The policy covers the general principles of personal data processing during website visits, use of online forms, reservation and availability enquiries, contact and support requests, payment referrals, campaign preferences, cookies and similar technologies, and third-party links or integrations.
This text is not in itself an explicit consent statement and does not require user approval to confirm fulfilment of the duty to inform. Optional processing requiring explicit consent is carried out through separate, specific choices.
2. Data Controller and Contact Details
| Information | Description |
|---|---|
| Data controller | Güvercinlik Enternasyonel Otelcilik Turizm İnş. A.Ş. |
| Property / short name | La Blanche Island |
| Address | Meşelik Mahallesi Çomca Mevkii Köy Sk. No:5 Güvercinlik Bölgesi Milas/Muğla |
| Telephone | 0252 322 0000 |
| KVKK request email | kvkkkomite@lablancheisland.com |
| KVKK Committee email | kvkkkomite@lablancheisland.com |
| KEP address | guvercinlikenternasyonal@hs03.kep.tr |
| Website | https://lablancheisland.com/ |
3. Our Personal Data Processing Principles
Personal data are processed lawfully and fairly, accurately and where necessary kept up to date, for specific, explicit and legitimate purposes, and in a manner connected with, limited to and proportionate to those purposes. Data are retained for the period prescribed by applicable legislation or necessary for the purpose of processing; appropriate technical and organizational measures are applied to ensure their security.
4. Data That May Be Processed Through the Website
Depending on the feature used, identity and contact details; reservation, accommodation, transaction and payment/invoice information; request, complaint and message contents; IP addresses, access times, device, browser, log and transaction security records; cookie identifiers, website usage and preference information may be processed. Information additionally entered by the user in free-text fields or attachments is also processed within the scope submitted.
Users are advised not to enter special categories of personal data in general contact or request fields. Where such data are necessary to provide the service, the conditions under Article 6 of the Law and the required security measures are assessed separately.
5. Processing Purposes and Legal Bases
Personal data may be processed to operate the website securely and continuously, respond to requests, establish and perform reservation and service processes, monitor payment and invoicing, fulfil legal obligations, establish, exercise or protect rights, prevent fraud and misuse, and manage visitor preferences.
Depending on its nature, processing is based on one of the conditions under Article 5 of the Law: express provision by law, conclusion or performance of a contract, a legal obligation, establishment/exercise/protection of a right, or legitimate interests provided that fundamental rights are not harmed. Prior explicit consent is obtained for optional analytics, personalization or advertising activities where these conditions do not apply.
6. Methods of Collecting Data
Data may be collected wholly or partly by automated means through the web server, security and log systems, online forms, reservation and payment referrals, cookies and similar technologies, email/telephone communications and content directly submitted by the visitor; where necessary, data may also be collected by non-automated means as part of a data filing system.
7. Cookies and Similar Technologies
Necessary cookies may be used on a limited basis to operate the website and expressly requested services, provide security and record preferences. Non-essential analytics, functional or advertising cookies are not activated before the user makes a choice. Technologies, providers, purposes, durations and transfer information are explained in the Cookie Policy and cookie preference panel.
8. Transfer of Personal Data
Personal data may be transferred, within the purpose and to the extent necessary, to authorized public institutions and organizations, legally authorized private-law entities, and reservation, payment, hosting, email, IT security, support, communications and similar providers involved in service delivery, in accordance with Article 8 of the Law.
9. International Data Transfers
If personal data are transferred abroad, the data categories, recipient or recipient group, country, purpose and transfer mechanism under Article 9 of the Law are identified and explained in the relevant texts. If a standard contract is used, it is notified to the Turkish Personal Data Protection Authority within five business days after all signatures have been completed. If there is no international transfer, this section is explicitly updated accordingly.
10. Retention and Disposal
Personal data are retained for the periods prescribed by applicable legislation and necessary for the purpose of processing. Once the period expires and no other legal basis exists, data are deleted, destroyed or anonymized under the Company's Retention and Disposal Policy.
| Record group | Maximum period / determination criterion |
|---|---|
| Web access and security logs | For periods prescribed by applicable legislation, particularly Law No. 5651 and its secondary legislation, and additionally as necessary for information security, system security and investigation of possible security incidents. Deleted, destroyed or anonymized at the end of the period. (Maximum 2 years) |
| Contact and request records | For as long as necessary to resolve the contact or request; afterwards, if needed to follow up the legal relationship or possible claims, retained with regard to applicable limitation periods. (Maximum 2 years) |
| Reservation/transaction records | For as long as necessary to carry out reservation and accommodation, fulfil accounting and financial obligations, meet legal requirements and manage possible disputes, taking account of statutory retention and limitation periods. (10 years from the last transaction date) |
| Cookie and preference records | For the technical lifetime of the cookie or technology and the validity of the user's cookie preference. Periods are specified separately for each cookie/technology in the Cookie Inventory. Necessary updates/deletion are performed when preferences change or the processing purpose ends. (2 years) |
| Legal dispute records | Until the dispute is resolved and throughout related statutory limitation periods, for as long as necessary to protect and defend the Company's legal rights. (Duration of the dispute + 10 years) |
11. Data Security
The Company applies technical and organizational measures proportionate to risk against unauthorized access, unlawful processing, loss, alteration or disclosure, including restricted access rights, user and transaction logs, update/patch management, backups, secure communications, supplier checks, staff awareness and incident response processes. As absolute security of data transmission over the internet cannot be guaranteed, visitors should also take reasonable measures to protect their accounts and devices.
12. Third-Party Websites and Services
The website may link to third-party websites, social media platforms, maps, videos, reservation or payment services. The privacy practices of parties acting as independent data controllers apply. Providing a link does not mean that the Company controls the third party's data processing practices.
13. Children's Data
Children's data are processed only to the extent required for reservation and accommodation, in accordance with applicable legal conditions and the authority of a parent/guardian. Children should not share unnecessary personal data in general contact fields, and parents or guardians should submit only information required for the service.
14. Data Subject Rights and Requests
Under Article 11 of the Law, data subjects have the right to learn whether their personal data are processed; request information if processed; learn the purpose of processing and whether the data are used accordingly; know the third parties receiving data within Türkiye or abroad; request correction of incomplete or inaccurate processing; request deletion or destruction when the conditions are met; request notification of correction/deletion/destruction to third parties receiving the data; object to an adverse result arising solely from analysis by automated systems; and request compensation for damage resulting from unlawful processing.
Requests may be submitted in accordance with the Communiqué on the Procedures and Principles for Applications to the Data Controller: in writing to Meşelik Mahallesi Çomca Mevkii Köy Sk. No:5 Güvercinlik Bölgesi Milas/Muğla, to the KEP address guvercinlikenternasyonal@hs03.kep.tr, by secure electronic/mobile signature to kvkkkomite@lablancheisland.com, or via an email address previously provided to the data controller and registered in its system.
15. Policy Updates and Effective Date
This Policy takes effect on 01.05.2026. It may be updated when processing activities, technologies or legislation change. Material changes are announced on the website or by another appropriate method before new processing begins.