Last updated 4 August 2026. This policy covers this website only. Information collected at the hotel itself — at check-in, or under the registration rules Turkish law places on accommodation providers — is handled under the notices given to you there.
Beach Club Doğanay, Konaklı Mah., Gazi Mustafa Kemal Blv. No: 289, Konaklı / Alanya, Antalya, Turkey. Telephone +90 242 745 05 84. Email info@doganayotel.com. We decide what happens to the data described here, which makes us the data controller for it.
There is one form on this site — the enquiry form — and it is the only place where we ask you for anything.
| What | Why | Required |
|---|---|---|
| Name | To address the reply | Yes |
| Email address | To send the reply and the automatic acknowledgement | Yes |
| Telephone number | Only if you would rather be called | No |
| Country | Language of the reply, and transfer distance | No |
| Dates, number of guests, children's ages | To check what is actually free | No |
| Room type | To quote the right rate | No |
| Free-text message | Whatever you decide to tell us | No |
The server also records the ordinary things a web server records — IP address, time, page requested — and the enquiry form counts recent submissions per IP address so that it cannot be used to send bulk mail. That counter holds a one-way hash and a list of timestamps. It does not hold your address or anything else about you.
If you write something sensitive into the free-text box — a medical condition, a mobility need, a dietary restriction — we use it to answer you properly and for nothing else. Please include only what is relevant to the stay.
Submitting the enquiry form produces exactly two messages. One goes to our reservations desk with what you wrote. One goes to you, once, confirming that the enquiry arrived — it is an acknowledgement of something you just did, not a mailing. After that, any further email is a person at the hotel replying to you.
Outgoing mail is handled by Amazon Simple Email Service, operated by Amazon Web Services. Delivering your message means it passes through their infrastructure. AWS processes it on our instruction and does not use it for its own purposes.
Under the Turkish Personal Data Protection Law (KVKK, no. 6698) we rely on your explicit consent, given by ticking the box on the form, and on the necessity of processing to take steps at your request before entering into a contract. For visitors in the European Union and the United Kingdom the same processing rests on Article 6(1)(a) and 6(1)(b) of the GDPR. You give consent by ticking the box; you can withdraw it at any time, and withdrawing it does not make what happened before unlawful.
An enquiry that does not become a booking is deleted from the reservations inbox within twelve months. An enquiry that becomes a booking is kept for as long as Turkish accounting and accommodation-registration rules require, and then deleted. Server logs are rotated within a short period in the normal course. The anti-spam counters expire after one hour.
Our reservations and reception staff. Our web host, which operates the server this site runs on. Amazon Web Services, which carries the email. Public authorities where Turkish law obliges us to provide information. Nobody else.
Because we are established in Turkey, an enquiry sent from the European Union is transferred outside the EEA. Where that transfer needs a legal mechanism, it is your explicit consent to the transfer, given when you submit the form, together with the necessity of the transfer to take pre-contractual steps you asked for.
You may ask what we hold about you, ask for it to be corrected, ask for it to be deleted, ask us to restrict what we do with it, object to the processing, or ask for a copy in a portable form. Write to info@doganayotel.com with enough detail to find the enquiry — the address you used and roughly when. We answer within thirty days, and there is no charge.
If you are not satisfied with the answer, you may complain to the Turkish Personal Data Protection Authority (KVKK Kurumu). Visitors in the EU or UK may instead complain to the supervisory authority where they live.
This site sets no advertising or analytics cookies. If your browser holds anything from this domain, it is a technical cookie needed for a page to work at all. There is no consent banner because there is nothing to consent to.
The site is served over HTTPS. The enquiry form checks submissions server-side, rejects attempts to inject additional email headers, and limits how often the same connection may submit. Access to the reservations inbox is limited to staff who need it.
If this policy changes, the date at the top changes with it. We do not change it retroactively to cover something we have already done.