Privacy Notice
This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) to people who contact us through the Contact and Request an Analysis forms on www.maresamanagement.com, or by e-mail, phone or WhatsApp.
1. Data controller
The data controller for the Maresa Management brand and the www.maresamanagement.com website is OKS BİLİŞİM DANIŞMANLIK TİCARET LİMİTED ŞİRKETİ.
- Address: Güvenevler Mah. Hüseyin Onat Sk. Özlem No: 15, İç Kapı No: 14, Çankaya / Ankara, Türkiye
- E-mail: info@maresamanagement.com
- Phone: +90 539 737 45 70
- Website: www.oksbilisim.com
2. Personal data we process
When you complete a form, we process:
- Identity and professional data: full name, job title (optional), hotel / company name
- Contact data: phone number, e-mail address
- Request content: what you write in the message field (optional)
- Transaction data: the form type and language, the page it was sent from, the date and time of submission, and the time you ticked the box confirming you had read this notice
Please do not include special categories of personal data (such as health, religion or ethnic origin) or information unrelated to your request in the message field.
3. Technical data processed for security
- A value derived from your IP address: To prevent misuse of the forms, your IP address is converted into a one-way hashed value using the website’s secret key, and this value is kept for up to 10 minutes to limit the number of submissions. The IP address itself is not stored by this rate-limiting mechanism and is not written to your request record.
- Server access logs: For technical operation and security, the server hosting the website records the IP address, date and time, requested page and browser information of requests made to the website. These logs are created on the hosting provider’s infrastructure.
4. Purposes and legal bases
| Purpose | Legal basis (KVKK Art. 5(2)) |
|---|---|
| Assessing your analysis request, planning a preliminary analysis or meeting, preparing a proposal | Processing is necessary and directly related to the establishment of a contract with the parties to it (Art. 5(2)(c)) |
| Answering your questions and contact request and getting in touch with you | Processing is necessary for our legitimate interests, provided it does not harm your fundamental rights and freedoms (Art. 5(2)(f)) |
| Preventing misuse of the forms and unwanted submissions; information security | Our legitimate interest (Art. 5(2)(f)) |
| Responding to lawful requests from competent authorities | Processing is necessary to comply with a legal obligation (Art. 5(2)(ç)) |
Data collected through the forms is not used to send bulk marketing or advertising messages.
5. Method of collection
Your personal data is collected electronically, partly by automated means, when you complete and submit a form on our website, and to the extent you provide it when you contact us by e-mail, phone or WhatsApp.
6. Recipients and transfers
Your personal data is shared only for the purposes above and only to the extent necessary with:
- Hosting provider (Natro): The website and form requests are stored on a hosting server located in Türkiye.
- E-mail service provider (Microsoft – Microsoft 365): When a form is submitted, the request is sent as a notification e-mail to our info@maresamanagement.com mailbox on Microsoft 365; e-mail correspondence is also stored there. Because Microsoft 365 may be hosted in data centres outside Türkiye, your personal data may be transferred abroad in this context.
- Google (map on the contact pages): The Google Maps map on the Turkish and English contact pages loads automatically, without you having to press any button, when the page opens or when the map section comes into view. While the map loads, your browser connects directly to Google’s servers, and data such as your IP address, browser and device information, the address of the page containing the map and any Google cookies in your browser may be sent to Google LLC (USA). This data may be processed on Google’s servers outside Türkiye; your personal data may therefore be transferred abroad when you visit the contact pages. Google’s own privacy policy applies to this processing. If you do not want this connection to Google to be made, you can contact us by e-mail or phone without opening the contact pages.
- Competent public authorities: where required by law, to the extent requested.
7. Retention
- Form requests and related e-mail correspondence are kept for as long as needed to complete your request and, if a business relationship is established, to carry it out, subject to the retention and limitation periods set by applicable law; they are then deleted, destroyed or anonymised.
- The value derived from your IP address is kept for up to 10 minutes and then removed automatically.
- Notification e-mails that could not be delivered are kept, including their content, in the e-mail sending log for 7 days for troubleshooting; notifications sent successfully are not recorded in this log.
- Server access logs and server backups are kept for periods determined by the technical operation of the hosting service.
8. Your rights under KVKK Article 11
You have the right to learn whether your personal data is processed; to request information about it; to learn the purpose of processing and whether it is used for that purpose; to know the third parties in Türkiye or abroad to whom it is transferred; to request correction of incomplete or inaccurate data; to request deletion or destruction under Article 7; to request that third-party recipients be notified of such correction, deletion or destruction; to object to an outcome against you arising solely from automated analysis of the data; and to claim compensation for damage caused by unlawful processing.
9. How to apply
You can send your request in writing, with information identifying you and in line with the Communiqué on the Procedures and Principles of Application to the Data Controller, to Güvenevler Mah. Hüseyin Onat Sk. Özlem No: 15, İç Kapı No: 14, Çankaya / Ankara, Türkiye, or by e-mail to info@maresamanagement.com from the e-mail address you previously provided to us and that is registered in our systems.
We will respond as soon as possible and within 30 days at the latest, free of charge. If the request requires an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.
For details on cookies and loading the map, see our Cookie Policy. This English text is provided for information; the Turkish KVKK Aydınlatma Metni prevails in case of any discrepancy.
Last updated: 27 October 2026