Legal · Privacy Policy

Privacy Policy

Our detailed policy on how your personal data is collected, processed, shared and protected, and how you can exercise your rights.

Last updated · 8 May 2026

1.Definitions and General Provisions

1.1.Definitions

The terms used in this Privacy Policy are defined below:

Site: the website published under the yenihisarnightclub.com domain belonging to Yeni Hisar Gazinosu.
User / Visitor: all natural persons who visit, use or make a reservation on the Site.
Personal Data: any information relating to an identified or identifiable natural person.
Processing: any operation performed on personal data, including obtaining, recording, storing, altering, transferring, deleting and classifying it.
Cookie: a small text file placed on your device by the Site (see the Cookie Policy).

1.2.Effect and Acceptance

From the moment you begin using the Site, you are deemed to have read, understood and accepted the content of this Privacy Policy. If you do not accept the Policy, we kindly ask that you not use the Site.

2.Data Controller Information

Contact information of Yeni Hisar Gazinosu, which holds the status of data controller under Law No. 6698: İnönü Caddesi, Ersan İş Hanı, Zemin Kat No: 6/Z-2, Osmangazi/Bursa. Telephone: +90 (224) 224 66 34. Data subjects may submit their requests regarding their rights under this Policy via this address.

3.Categories of Personal Data Collected

The following categories of personal data may be collected while you use the Site:

3.1.Data You Provide

This covers the name and surname, telephone, e-mail, date of birth (for age verification), date/time preference, number of guests, seating preference and the notes you write in free-text fields that you enter into the reservation, contact and careers forms.

3.2.Automatically Collected Data

Technical data such as IP address, browser type and version, operating system, language preference, date and duration of visit, referring page, links clicked and device type may be collected automatically through cookies, web beacons and similar technologies.

3.3.Data Obtained from Third Parties

If you contact us through social media channels, this covers the profile information and message content shared with us within the framework of the relevant platform's policies.

4.Purposes of Processing

The personal data collected is processed for the following purposes:

Creating, confirming and following up the reservation.
Assessing requests, questions and complaints.
Ensuring the operability and security of the Site.
Measuring and improving the user experience.
Producing statistics and trend analysis (anonymised).
Fulfilling legal obligations.
Where you give your explicit consent, carrying out commercial communication and personalised marketing activities.

5.Legal Basis for Processing

Your personal data is processed on the legal grounds set out in Article 5 of the KVKK: the conclusion and performance of a contract, the fulfilment of a legal obligation, the establishment/exercise/protection of a right, and the legitimate interests of the data controller. Activities such as sending commercial electronic messages are carried out only within the scope of your explicit consent.

6.Transfer of Data

6.1.Service Providers

Data is transferred to the suppliers we cooperate with on matters such as providing the Site's technical infrastructure, sending e-mail and managing customer relations, only in respect of the data required by the relevant service and to the extent necessary. As no fee or advance payment is taken in the reservation processes, no data is transferred to payment-infrastructure providers.

6.2.Transfer within the Framework of Legal Obligations

Where authorised public institutions and organisations so request within the framework of the legislation, your personal data may be transferred to the relevant authority.

6.3.Transfer Abroad

Should we have cloud-based infrastructure providers, your personal data may be transferred abroad — within the framework of Article 9 of the KVKK and the Board's decisions — to countries where adequate protection exists or to data controllers that undertake adequate protection in writing; otherwise only with your explicit consent.

7.Retention Periods

Your personal data is retained for whichever is longer: the period required by the purpose of processing or the minimum periods foreseen in the relevant legislation. Reservation records are kept for at least five (5) years, financial and commercial records for ten (10) years pursuant to the Turkish Commercial Code, and log records for two (2) years pursuant to the relevant legislation.

8.Data Security

Yeni Hisar takes reasonable and appropriate technical and administrative measures — such as SSL/TLS encryption, access control, password policies, penetration testing, periodic backups and staff awareness training — in order to prevent the unlawful processing of your personal data and unauthorised access to it.

9.Children's Privacy

The Site and our venue are not intended for persons under the age of 18. We do not knowingly collect personal data from persons under 18. We destroy without delay the data of any user we determine to be under 18.

10.Third-Party Links

The Site may contain links to websites belonging to third parties. The privacy practices of these sites are not the responsibility of Yeni Hisar; you are advised to review the privacy policy of the relevant site before visiting it.

11.Cookies

For detailed information about the cookies used on the Site, their types and purposes, and how to manage your preferences, please see our Cookie Policy.

12.Rights of the Data Subject

Pursuant to Article 11 of the KVKK, you have the following rights:

To learn whether your data is being processed.
To request information if it has been processed.
To learn the purpose of processing and whether it is used accordingly.
To learn the third parties to whom it is transferred.
To request correction if it has been processed incompletely or incorrectly.
To request its deletion or destruction where the legal conditions arise.
To object to analyses carried out by automated systems.
To request compensation for damage suffered due to unlawful processing.

13.Application Method

To exercise the rights listed above, you may apply to Yeni Hisar in writing or via registered electronic mail (KEP), in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Your application is concluded within thirty (30) days at the latest. Where the process requires a separate cost, a fee may be charged according to the tariff determined by the Board.

14.Changes to the Policy

Yeni Hisar reserves the right to make changes to this Privacy Policy from time to time. Significant changes are published on this page; they take effect from the date of publication, and your continued use of the Site means that you accept the current policy.