Privacy Notice on the Protection of Personal Data

1. Data controller

The data controller is Hazel Turizm ve Gıda Ticaret Ltd. Şti., which operates the Beatus Spa brand. MERSİS no. 0460048869900001. Address: Ergenekon Mah. Halaskargazi Cad. No:63 D:101, 34373 Şişli / İstanbul. Email: info@beatusspa.com.tr.

2. Scope of this notice

This notice covers the personal data processed when you visit beatusspa.com.tr, send a booking request on WhatsApp through the booking form, call one of our locations or email us. Data processed while you receive a treatment at a location is covered by a separate notice given at the location.

3. Categories of personal data

• Identity: your name and surname, as written in your booking message.
• Contact: your phone number, your WhatsApp profile name and, if you email us, your email address.
• Customer transaction: the location, treatment, date, time of day and number of guests you choose, and the content of your message.
• Transaction security: server logs made up of IP address, browser type, page visited, date and time.
• Marketing: only if you consent, cookie identifiers and your interactions with our website and ads (see the cookie policy).

4. How we collect it

Your personal data is collected automatically through cookies and server logs, and partly automatically or non-automatically through WhatsApp messages, phone calls and email. What you type into the booking form is not stored on our website: the form only opens a ready-made message in WhatsApp, and you decide whether to send it.

5. Purposes and legal bases

• Receiving your booking request, telling you about availability and prices, and making or changing your appointment: necessary for entering into or performing a contract (Law Art. 5(2)(c)).
• Answering your questions, suggestions and complaints: our legitimate interest, provided it does not harm your fundamental rights and freedoms (Art. 5(2)(f)).
• Keeping the website secure and running, and preventing misuse: legitimate interest (Art. 5(2)(f)).
• Responding to requests from competent public authorities and meeting legal obligations: expressly provided for by law and legal obligation (Art. 5(2)(a) and 5(2)(ç)).
• Establishing, exercising or defending legal claims: Art. 5(2)(e).
• Measuring website use, measuring the results of our ads and showing ads based on your interests: your explicit consent (Art. 5(1)). Without your consent this does not happen, and you can withdraw your consent at any time.

6. Who we share it with

Your personal data may be shared, only for the purposes above, with:

• the Beatus Spa location that answers your request and its staff;
• our service providers: Hostinger, which hosts the website and runs its content delivery network (CDN); WhatsApp (Meta Platforms) for messaging; and, if you consent, Google and Meta Platforms for measurement and advertising;
• competent public authorities and courts, when they request it.

Transfers abroad: servers used by Google, Meta Platforms and Hostinger may be located outside Türkiye. These transfers are made in line with the conditions in Article 9 of the Law. Messaging on WhatsApp is a channel you choose and is directly related to making your booking (Art. 9(6)(b)); if you prefer not to use WhatsApp, you can call the location.

7. How long we keep it

Your personal data is kept for as long as the purpose requires and for the retention and limitation periods set by law. After that it is erased, destroyed or anonymised in line with the Regulation on the Erasure, Destruction or Anonymisation of Personal Data. Cookie retention periods are listed in the cookie policy.

8. Health information

Please do not include health information (pregnancy, surgery, chronic conditions and the like) in your booking message. Under Article 6 of the Law this is a special category of personal data. Any information needed before your treatment is collected at the location, with a separate notice.

9. Your rights

Under Article 11 of the Law you can apply to the data controller to:

• find out whether your personal data is processed;
• request information about it if it is;
• find out the purpose of processing and whether it is used for that purpose;
• know the third parties in Türkiye or abroad to whom it is transferred;
• ask for it to be corrected if it is incomplete or inaccurate;
• ask for it to be erased or destroyed under the conditions in Article 7 of the Law;
• ask for corrections, erasure or destruction to be notified to the third parties it was transferred to;
• object to a result against you arising solely from automated analysis;
• claim compensation if you suffer damage because of unlawful processing.

You can withdraw your cookie consent at any time through the "Cookie preferences" link at the bottom of the website.

10. How to apply

Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you can apply in writing: by a signed letter delivered in person or through a notary to Ergenekon Mah. Halaskargazi Cad. No:63 D:101, 34373 Şişli / İstanbul; by email to info@beatusspa.com.tr signed with a secure electronic signature or mobile signature; or by email to info@beatusspa.com.tr from an email address you have previously given us and that is registered in our records.

Your application should include your name and surname, signature, Turkish ID number (or, if you are not a Turkish citizen, your nationality and passport or ID number), postal address, email address and phone number if any, and what you are asking for.

We will reply free of charge within 30 days at the latest; if the request involves an additional cost, the fee set by the Board may be charged. If your application is refused, you find the answer insufficient or we do not reply in time, you can complain to the Personal Data Protection Board (Law Art. 14).

11. Updates

We update this notice when needed; the current version is always on this page. Last updated: 7 October 2026.