Personal Data Protection Notice

This information notice has been prepared under Article 10 of the Turkish Personal Data Protection Law ("KVKK" No. 6698) to inform you, as data subject, about the processing of your personal data by Aqua Plus Spa & Wellness ("Aqua Plus") acting as data controller.

Data Controller

Aqua Plus Spa & Wellness is the data controller for the personal data collected through its website, branches and service operations. You can reach us through our contact page.

Categories of Personal Data Processed

• Identity: first name, last name, date of birth.
• Contact: phone, email, address.
• Customer transactions: reservations, payments, invoices, service history.
• Marketing: newsletter subscriptions and campaign preferences (only with explicit consent).
• Health (special category): only when voluntarily disclosed for safe service delivery (allergies, pregnancy, chronic conditions).
• Transaction security: IP address, cookie identifiers, session logs.

Purposes of Processing

• Managing reservation and service workflows.
• Performing our contractual obligations.
• Responding to communication requests.
• Marketing and newsletter activities, where explicit consent has been given.
• Meeting statutory record-keeping and reporting obligations.
• Measuring and improving the quality of our services.

Legal Basis for Processing

We process your personal data under Article 5/2 of KVKK on the grounds of (i) the establishment or performance of a contract, (ii) compliance with our legal obligations, (iii) the establishment, exercise or protection of a right and (iv) our legitimate interests. Marketing-related processing is based solely on your explicit consent and may be withdrawn at any time.

Transfers

Your data may be shared, to the extent permitted by law and required by the relevant operation, with our business partners, authorised payment institutions, financial advisers, legal counsel, audit firms and competent public authorities. International transfers are made only to safe countries permitted by KVKK or, where required, on the basis of your explicit consent.

Your Rights as a Data Subject

Under Article 11 of KVKK you have the right to:

• learn whether your personal data has been processed;
• request information regarding the processing;
• learn the purpose of processing and whether the data is used in accordance with that purpose;
• know the third parties to whom data is transferred domestically or abroad;
• request correction of incomplete or inaccurate data;
• request deletion or destruction in line with Article 7 of KVKK;
• request that corrections, deletions and destructions be communicated to third parties;
• object to outcomes that arise from automated analysis;
• claim compensation for damages caused by unlawful processing.

How to Apply

To exercise the rights above, please submit your request through our contact page together with the documentation required to confirm your identity. Aqua Plus responds free of charge within 30 days; if a specific cost arises, the official tariff set by the Authority applies.