H2MHOSPITALITY MANAGEMENT

Corporate Policies

KVKK Personal Data Notice

Last updated: 10 October 2026 • Version 1.2

1. Data Controller and Contact

FAEY Teknoloji ve Danışmanlık Ltd. Şti.
Tax office: Zincirlikuyu • Tax number: 3841020074
MERSİS: 0384102007400001 • Trade registry: 1160243, Istanbul Trade Registry Directorate
Esentepe Mah. Talatpaşa Cad. No:5 İç Kapı No:1, Şişli / İstanbul 34394, Türkiye
Telephone: +90 212 706 66 90 • Mobile: +90 533 493 95 62
General contact: info@faeyconsulting.com • Personal data requests: kvkk@faeyconsulting.com

2. Scope of the Notice

This notice informs individuals who visit the h2mhotels.com corporate website or submit enquiries through the website and the company’s communication channels. FAEY Technology & Consulting is a brand name; FAEY Teknoloji ve Danışmanlık Ltd. Şti. (the “Company”) is the data controller for the activities described on this website.
Brand and service names, including H2M and FAEY Cloud, do not in themselves constitute separate legal entities or data controllers. Product use, customer cloud environments, hospitality and reservation activities, and employee-related processing are addressed separately according to the service and the parties’ respective roles.

3. Collection Methods, Purposes and Legal Grounds

This corporate information website has no data-entry form. If you use an email or telephone link to contact the Company, your name, company, contact details and enquiry content may be processed. Website access may generate infrastructure records containing IP addresses and connection, device or browser information.
• Service and business cooperation enquiries: where necessary and directly related to concluding or performing a contract, Article 5(2)(c).
• Other business communications: the legitimate interest in responding, provided fundamental rights and freedoms are not harmed, Article 5(2)(f).
• Website delivery and security: where necessary and proportionate, Article 5(2)(f).
• Records required by legal obligations: Article 5(2)(ç); necessary records to establish, exercise or protect rights in disputes: Article 5(2)(e).
Corporate communication channels are not designed for submitting special category data or identity documents. Visits and enquiries do not constitute marketing permission.

4. Disclosure and International Transfers

The corporate website is delivered on Hostinger hosting infrastructure. Connection and technical traffic information may be processed by network providers to the extent used. Email or telephone enquiries are processed through the Company’s communication service providers and by authorised personnel assessing the request. Only information necessary for the applicable legal duty or request may be disclosed to competent authorities or courts.
International transfers require an applicable legal ground and satisfaction of the conditions under Article 9 and relevant secondary legislation.

5. Retention, Disposal and Data Security

Retention must reflect the processing purpose, statutory obligations and the period necessary to establish, exercise or protect legal rights. Once processing conditions cease to apply, Article 7 and applicable regulations require deletion, destruction or anonymisation.
The Company’s technical and organisational obligations under Article 12 remain applicable. Website access uses HTTPS; security and retention in separate product or service environments are assessed within the relevant engagement.

6. Individual Rights

Under Article 11 of Law No. 6698, you may learn whether your data is processed and obtain information about that processing, its purpose, whether it is used accordingly and recipients in Türkiye or abroad. You may request correction of incomplete or inaccurate data, deletion or destruction where Article 7 conditions are met and notification of those actions to recipients. You may object to an adverse result arising solely from automated analysis and seek compensation for damage from unlawful processing.

7. Requests and Responses

Submit requests in Turkish in writing to the company address above. Electronic requests meeting the Communiqué requirements may be directed to kvkk@faeyconsulting.com, using an email address previously provided to the company and recorded in its system, secure electronic signature, mobile signature or other methods specified in the Communiqué, with the applicable identity checks. This is not a registered electronic mail (KEP) address.
Include your name, signature for written requests, Turkish identity number for Turkish citizens or nationality and passport/identity number for foreign citizens, service address, any notification email/telephone/fax and the subject of your request. Provide only necessary supporting documents; do not send identity documents through the ordinary enquiry form.
Requests must be answered in writing or electronically as soon as practicable and within 30 days. Requests are generally free; additional costs may only be charged according to the Board tariff. Subject to prior application requirements, you may complain to the Board within 30 days of learning the response and in any event within 60 days of your application.

8. Complementary Policies and Notices

See the Cookie Policy for device storage and the Privacy Policy for the general privacy approach. This notice is not a request for consent; notice and any necessary explicit consent are separate processes.