Privacy Notice
Under Turkish Personal Data Protection Law No. 6698 (KVKK), we would like to explain how the personal data you send through this website is processed. We have tried to keep this plain; if anything is unclear, please write to us.
Data controller
Your personal data is processed by Yıldız Hisar, the owner and operator of this website, acting as data controller.
What we collect
We collect only what you enter yourself, and only when you complete the “Plan Your Experience” form:
- Your full name
- Your company or brand name (optional)
- Your phone number
- Your email address
- The type of experience you are planning
- Estimated date and number of guests (optional)
- Catering preference (optional)
- The free-text description of your event (optional)
- The language you used and the date the request was created
Automatically collected data
To protect the form against abuse, your IP address is held briefly in server memory while you submit. It is not written to the database and is not retained; it is used only to prevent a large number of submissions from the same address in a short period.
A cookieless analytics tool measures visitor numbers. It does not collect anything that identifies you, and your personal data is never sent to it.
Why we process it
Solely to assess your request, to reply to you and to prepare a proposal for your event. We do not send marketing messages using this data and we do not sell it to third parties.
Legal basis
Your data is processed under Article 5(2)(c) of the KVKK — being directly related to the conclusion or performance of a contract — and Article 5(2)(f), legitimate interest. As you chose to complete the form yourself, answering your request depends on processing this data.
Who it is shared with
Your request is not shared with anyone outside the Yıldız Hisar team. However, the following service providers' infrastructure is used to run the site, and your data technically resides there:
- Vercel — hosting of the website
- Neon — the database where requests are stored
- Resend — delivery of notification and thank-you emails
International transfer
The servers of the providers above are located outside Turkey (in the United States). The data you send through the form is therefore processed abroad. By submitting the form you proceed in the knowledge that this transfer takes place.
How long we keep it
Records are kept for at most 2 years after your request is concluded, then deleted. If you would like them deleted sooner, simply contact us through the channels below.
Your rights
Under Article 11 of the KVKK you have the right to:
- Learn whether your personal data is being processed
- Request information if it has been processed
- Learn the purpose of processing and whether it is used accordingly
- Know the third parties to whom it is transferred, at home or abroad
- Request correction if it is incomplete or inaccurate
- Request erasure or destruction within the conditions of the law
- Request that correction, erasure and destruction be notified to third parties to whom the data was transferred
- Object to an adverse outcome arising solely from automated analysis
- Claim compensation if you suffer loss due to unlawful processing
How to reach us
To exercise the rights above, or if you have a question about this notice, you can reach us through the “Plan Your Experience” form on this site or through the contact channels listed below. We respond to requests within 30 days at the latest.
Contact details
Last updated: 12 Eylül 2026