Privacy & Cookie Policy

1. Who we are

Mavi Konak Hotel is a boutique accommodation business operating in Beşiktaş, Istanbul. For the purposes of this demo site, the data controller is Cooqee Bilişim Teknolojileri, the operator of the Cooqee CMP platform.

Contact: contact@cooqee.com.tr

2. What data we collect

When you visit this site, we may process the following categories of personal data, each one gated behind your explicit consent via the Cooqee banner:

• Strictly necessary cookies — session continuity, security tokens, consent state. These are always set and cannot be disabled.
• Analytics cookies — Google Analytics 4 (page views, visit duration, geographic region, device type). Only loaded when you grant Analytics consent.
• Marketing cookies — Google Ads conversion pixels, remarketing tags. Only loaded when you grant Marketing consent.
• Preferences cookies — remembered language and currency choices.

3. Cookie policy

This site uses the Cooqee Consent Management Platform to collect and record your cookie preferences. On your first visit, you will see a consent banner with three primary actions:

• Accept All — grants consent for every category.
• Reject All — denies consent for every optional category; strictly necessary cookies still load.
• Customize — opens the preference centre where you can toggle each category individually, and (for EEA/UK visitors) each of the 11 IAB TCF v2.2 purposes and ~1,200 vendors.

You can change your preferences at any time via the Manage Cookies link in the footer.

Google Consent Mode v2

This site uses Google Consent Mode v2 to communicate your consent choices to every Google product (Google Analytics 4, Google Ads, Floodlight). Four signals are set:

• ad_storage — storage of advertising-related cookies.
• analytics_storage — storage of analytics-related cookies.
• ad_user_data — sending user data to Google for ad purposes.
• ad_personalization — using data for personalised advertising.

Each signal defaults to denied on page load and is updated the moment you make a choice on the banner.

IAB TCF v2.2 (for EEA/UK visitors)

Visitors in the European Economic Area and the United Kingdom additionally receive a full IAB Transparency and Consent Framework v2.2 signal. This encodes consent across 11 standardised purposes and the ~1,200 vendors on the IAB Global Vendor List. The signal is written to the euconsent-v2 cookie and exposed via the window.__tcfapi() JavaScript API.

Additional Consent (AC) v2

For Google-specific ad-technology providers not on the IAB list, Cooqee also publishes an Additional Consent v2 string to the addtl_consent cookie.

4. Your rights (KVKK / GDPR)

Under KVKK (Turkey) and GDPR (EU/UK), you have the right to:

• Access your personal data we hold.
• Rectify inaccurate data.
• Request erasure ("right to be forgotten").
• Restrict or object to processing.
• Request data portability.
• Withdraw consent at any time (via the Manage Cookies link).
• Lodge a complaint with the Turkish Personal Data Protection Authority (KVKK) or your local EU supervisory authority.

5. Data retention

• Consent records: kept for 395 days (one year + 30-day re-ask window) in the Cooqee ConsentRecord database.
• Analytics data: retained in Google Analytics 4 for the standard 14 months.
• Reservation requests: processed in-session only; this demo form does not store submissions.

6. Security

All data transmission is TLS 1.2+. Consent records are stored in an encrypted-at-rest SQL Server instance operated by Cooqee. Access is restricted to authorised personnel on need-to-know basis.

7. Changes to this policy

We may update this policy from time to time. Material changes trigger a fresh consent re-ask via the Cooqee banner.

8. Contact

For privacy questions, data subject requests, or complaints: privacy@cooqee.com.tr