Privacy notice
Enquiry form privacy notice
Information about personal data processing when you contact us or plan an experience through this website.
Enquiry recording is disabled while company and hosting details are completed. The information below describes the general framework; the company-specific notice will be published before collection begins.
1. Data controller
The controller’s full legal name, address and application contact will be completed.
2. Information collected and method
Enabled contact and experience planning forms collect your name, email and/or phone, selected experience, date, guest counts, menu and seating preferences, and optional message electronically. Only total counts are collected for children and infants; names or dates of birth are not requested. Please do not include identity documents, payment cards or health information.
3. Purposes and legal grounds
Information necessary to answer your request, discuss a programme and proposal, and make preparations you request before booking is processed under Article 5(2)(c) of Law No. 6698 where directly related to establishing or performing a contract. Necessary abuse prevention and session security records rely on legitimate interests under Article 5(2)(f), subject to your fundamental rights and freedoms. These forms do not collect marketing permission or assume permission to send promotional messages.
4. Recipients and international transfers
Only the authorised administrator can access enquiry records. The hosting infrastructure is the service provider storing those records. There is no automatic form transfer to an external CRM, advertising or analytics platform at this stage. Information may be shared with competent authorities when a legal obligation applies.
5. Retention and deletion
Website enquiry records are retained for 12 months from creation and removed during daily maintenance when that period ends. Administrative backups rotate over seven days. Web server security logs record IP addresses, time and request paths on a seven-day rotation. Contract, payment and accounting records are outside this enquiry system. Pseudonymous abuse prevention rate records expire within one day; administrator sessions expire after 12 hours.
Applications and contact
Submit an Article 11 request in writing or through another method allowed by the Communiqué on applications to data controllers. State your request and contact details, and avoid sending unnecessary personal documents. Applications are answered as soon as their nature permits and within 30 days; any charge permitted by applicable rules is communicated separately.
Law No. 6698 · official authority source
Last updated: 6 October 2026