Website Privacy Notice

This notice is provided under Article 10 of the Turkish Personal Data Protection Law No. 6698 (the “Law”) and the Communiqué on the Principles and Procedures for Fulfilling the Obligation to Inform, to inform you about the processing of personal data through www.maderaistanbul.com. Our general Privacy Notice applies to our activities outside this website.

1. Data controller

Your personal data is processed by Feriye Turizm İşletmeleri Ticaret A.Ş. (“Madera” or the “Company”) as data controller, within the scope described in this notice. For questions about your personal data, you can write to madera@c-paces.com.

2. Event and private dining quote form

Data processed: Identity (name and surname), contact (e-mail, phone), customer transaction (event type, estimated number of guests, planned date, your message, preferred language) and transaction security (IP address) data.

Purposes: Receiving, assessing and answering your quote request; contacting you; planning the event; preventing misuse of the form and automated submissions.

Legal grounds: Processing of the parties' data where directly related to the establishment of a contract (Art. 5/2-c). For the IP address and security checks, the Company's legitimate interest, provided it does not harm your fundamental rights and freedoms (Art. 5/2-f).

No commercial electronic messages (campaigns, newsletters) are sent through the form. Separate, optional consent is obtained for such messages.

3. Site assistant (AI-powered chat)

Data processed: The messages you write to the assistant and its answers, the page where the chat started, language, date and time. Your IP address and browser information are used only to create an irreversible digest (identifier) and to limit misuse; your raw IP address is not stored in chat records. Any personal data you choose to share in your messages is also recorded, so please do not share ID numbers, card details, health information or similar data.

Purposes: Answering your questions and directing you to reservations, quotes or phone; review of service quality and the assistant's accuracy by authorised staff; preventing misuse.

Legal grounds: The pre-contractual process in a communication you initiate (Art. 5/2-c) and the Company's legitimate interest in ensuring service quality (Art. 5/2-f). The transfer of messages abroad is explained in section 7.

The assistant's answers are generated automatically by AI, are for information only and may contain errors. The assistant does not make any decision about you that has legal effects or significantly affects you. For definitive information and reservations you can contact the Company directly.

4. Cookies and similar technologies

Necessary cookies: Used for the secure operation of the site and to remember your cookie choice. The legal ground is the Company's legitimate interest (Art. 5/2-f); consent is not required.

Analytics and marketing cookies: Used to measure visits and to measure and personalise ads. They run only with your explicit consent (Art. 5/1). Refusing does not prevent you from using the site. You can withdraw consent at any time via “Cookie settings” at the bottom of the page. Details are in the Cookie Policy.

5. Method of collection

Your personal data is collected electronically, partly by automated means, through the form, the site assistant and cookies on the website.

6. Recipients

In line with Articles 8 and 9 of the Law and limited to the purposes above, your personal data may be transferred to:

• The Company's sales and events team and the management of the c-paces group to which it belongs, to answer your request,
• Our service providers (e-mail delivery, AI service provider, security and content delivery network provider; with your consent, analytics and advertising providers), acting as data processors on the Company's instructions,
• Competent public authorities and courts where required by law.

7. Transfers abroad

The servers of the following providers are located abroad. Your data is transferred to them only for the purposes stated in the table.

8. Retention

Your personal data is kept for as long as the purpose of processing requires and is then deleted, destroyed or anonymised.

• Quote requests: for as long as needed to assess the request and for any resulting contract; requests that lead to a contract, for the retention periods required by law.
• Site assistant chat records: for as long as needed to review service quality.
• Cookies: the period stated for each cookie in the Cookie Policy.

9. Your rights

Under Article 11 of the Law you may apply to the Company to:

• Learn whether your personal data is processed and request information if so,
• Learn the purpose of processing and whether it is used accordingly,
• Know the third parties in Türkiye or abroad to whom it is transferred,
• Request correction if it is incomplete or inaccurate,
• Request deletion or destruction under the conditions of Article 7,
• Request that corrections, deletions or destructions be notified to third parties to whom the data was transferred,
• Object to a result against you arising exclusively from automated analysis,
• Claim compensation for damage arising from unlawful processing.

10. How to apply

You can submit your request in line with the Communiqué on the Principles and Procedures for Application to the Data Controller by one of the following:

• From an e-mail address you have previously provided to the Company and that is registered in our systems, to madera@c-paces.com,
• In writing or by registered e-mail (KEP) to the Company.

Requests are concluded free of charge within thirty days at the latest. If the process requires an additional cost, the fee set by the Board may be charged.

Last updated: 13.11.2026