Cookie Policy

COOKIE PRIVACY NOTICE

At NG PHASELIS TURİZM A.Ş. ("the Company", "we"), we act as the "Data Controller" under the Turkish Personal Data Protection Law No. 6698 ("the Law"). This notice explains how we process your personal data through cookies and similar technologies used on our website.

1. DATA CONTROLLER

Trade Name	NG PHASELIS TURİZM A.Ş.
Brand / Facility	NG Phaselis Bay
Address	Göynük Mah. 3160. Sok. No: 31 Kemer / ANTALYA, Türkiye
Trade Registry No.	145138
MERSIS No.	0631211031400002
Tax Office / No.	Çinili Tax Office — 631 211 03 14
KEP Address (Registered Electronic Mail)	[email protected]
Phone	+90 242 824 07 07
Email	[email protected]
Website	www.ngphaselisbay.com

2. WHAT IS A COOKIE?

A cookie is a small text file that is stored on your device when you visit a website. In this notice, the word "cookie" also includes pixels, local storage (localStorage, sessionStorage) and similar technologies.

3. MANAGING YOUR COOKIE CHOICES

Our website uses a Cookie Consent Management Platform.

• When you first visit the site, a cookie notice appears. Cookies other than the necessary ones depend on your consent. If you do not give consent, these cookies do not run.
• You can choose "Accept All", "Reject All" or "Manage Settings". Rejecting is as easy as accepting. If you reject, the basic functions of the site keep working.
• You can withdraw your consent at any time. Just open the panel again with the "Cookie Settings" link at the bottom of the page. Withdrawing consent does not affect the lawfulness of processing that took place before the date you withdrew it.
• You can also delete or block cookies in your browser's privacy settings. In this case, your choice applies only to that browser, and some functions of the site may not work.

4. COOKIE CATEGORIES AND LEGAL REASONS

Category	Purpose	Legal Reason	Consent
Necessary	Running the site, session management, security, sending forms, running the reservation engine, remembering your cookie choices	Processing the personal data of the parties to a contract is necessary, as long as it is directly related to making or carrying out that contract; and processing is necessary for the legitimate interests of the data controller, as long as it does not harm the fundamental rights and freedoms of the data subject	Not required
Functional	Remembering your language, currency and display choices, personalization on the site	Your explicit consent, if you give it	Required
Analytics / performance	Measuring how the site is used, understanding which pages are visited, improving the experience	Your explicit consent, if you give it	Required
Marketing / targeting	Showing ads that match your interests, remarketing, measuring campaign performance	Your explicit consent, if you give it	Required

5. COOKIES USED ON OUR WEBSITE

This list is valid as of 17.09.2026. The periods shown are the maximum values that the providers use. The current list is always in the "Cookie Settings" panel at the bottom of the page. It updates automatically when cookies change. If you see a difference with this section, the panel is the source to follow.

5.1. Necessary cookies — no consent needed

Cookie	Provider	Party	Duration	Purpose
UMB-XSRF-TOKEN	Umbraco (site platform)	First party	Session	Protection against forgery (CSRF) when you send forms
UMB_MCULTURE	Umbraco (site platform)	First party	Session	Keeping the language you chose
efl-saved-consent (local storage)	Efilli (CMP)	First party	Until you delete it	Storing your cookie choices and proof of consent
_crs_be_sessions	Reservation engine provider (based abroad)	Third party	Session	Continuing the reservation steps — only on the reservation subdomain

 

5.2. Functional cookies — consent required

Cookie	Provider	Party	Duration	Purpose
gtm-session-start	Google Tag Manager	First party	Session	Tracking the start of a session in tag management
domain_sid	Site platform	First party	Session	Linking the visit session
The Hotels Network cookies	The Hotels Network S.L.	Third party	Up to 12 months	Price comparison and personalization on the site

 

5.3. Analytics / performance cookies — consent required

Cookie	Provider	Party	Duration	Purpose
_ga, _ga_<property ID>	Google Analytics 4 (Google Ireland Ltd.)	First party	24 months	Measuring visitors and sessions
_gid	Google Analytics	First party	24 hours	Telling visitors apart
_clck, _clsk	Microsoft Clarity (Microsoft Ireland)	First party	12 months / 1 day	Usage analysis, heatmaps and session recording
_ym_d, _ym_uid, _ym_isad, _ym_visorc	Yandex Metrica	First party	Up to 12 months	Visitor measurement and behavior analysis
__utmzzses, FirstTrafficSource	Site analytics platform	First party	Session / up to 12 months	Linking the first traffic source

 

5.4. Marketing / targeting cookies — consent required

Cookie	Provider	Party	Duration	Purpose
_gcl_au	Google Ads	First party	90 days	Measuring ad conversions
Floodlight / DV360 cookies	Google Marketing Platform	Third party	Up to 13 months	Campaign measurement and remarketing
cto_bundle	Criteo SA	First party	13 months	Remarketing and personalized ads
_fbp, _fbc	Meta Platforms Ireland	First party	90 days	Meta ad measurement and remarketing
tmr_lvid, tmr_lvidTS, tmr_detect	VK / myTarget (top.mail.ru)	First party	Up to 12 months	Ad targeting and measurement
_rnk_vid	Rankie	First party	Up to 12 months	Channel attribution tracking
mdd	RelatedDigital	First party	24 hours	Campaign and communication automation
Hybrid, Adhood, TheADX cookies	Hybrid · Adhood · TheADX	Third party	Up to 12 months	Programmatic ad display and measurement
Setrow cookies	Setrow	Third party	Up to 12 months	Email marketing measurement

 

5.5. Parties that collect data without using cookies

With your consent, the services below load a script or pixel on the page. Even if they do not set cookies, your IP address and browser information reach these parties:

Google (Analytics, Ads, DoubleClick/DV360) · Meta · Microsoft Clarity · Yandex · VK / myTarget · Criteo · The Hotels Network · Hybrid · Adhood · TheADX · RelatedDigital · Setrow · Rankie · Cloudflare · YouTube

6. PERSONAL DATA WE PROCESS AND HOW WE COLLECT IT

Through cookies, we process your IP address, device and browser information, operating system, the pages you visit and how long you stay, how you reached the site, your language and currency choices, and your reservation search criteria. We collect this data automatically through your browser while you visit our website.

7. SHARING YOUR DATA

We may share the data we get through cookies with the groups of recipients below. We do this under the conditions in Articles 8 and 9 of the Law, and within the limits of your consent.

• Recipient: Hosting, security and content delivery service providers — Our legal reasons: the law clearly says so, and it is necessary for the data controller to meet a legal duty.
• Recipient: Measurement and analytics service providers — We share data only if you consent to analytics cookies. Our legal reason: your explicit consent.
• Recipient: Advertising, remarketing and programmatic advertising partners — We share data only if you consent to marketing cookies. Our legal reason: your explicit consent.
• Recipient: Reservation infrastructure and on-site personalization service providers — We share data on the basis of your explicit consent.

Transfer abroad. Some of these providers are based outside Türkiye. The data we get through cookies may be transferred to the providers' servers abroad. We do this under the conditions in Article 9 of the Law. If you do not give consent, functional, analytics and marketing cookies do not run, and no transfer abroad takes place for them.

8. RELATED NOTICES

• Website Visitor Privacy Notice
• Reservation and Accommodation Privacy Notice

9. YOUR RIGHTS AND HOW TO APPLY

Under Article 11 of the Law, you have the right to:

• find out whether your personal data is processed;
• ask for information if it has been processed;
• find out why it is processed and whether it is used for that purpose;
• know the third parties it is shared with, in Türkiye or abroad;
• ask for correction if it is incomplete or wrong;
• ask for deletion or destruction when the conditions are met;
• ask us to tell the third parties about corrections and deletions;
• object if an analysis made only by automated systems gives a result against you;
• ask for compensation if you suffer a loss because of unlawful processing.

Please fill in the Data Subject Application Form and send your request in one of these ways:

• In writing: Göynük Mah. 3160. Sok. No: 31 Kemer / ANTALYA, Türkiye (in person or through a notary)
• From your KEP address: [email protected]
• With a secure electronic signature or mobile signature: [email protected]
• From the email address registered in our system: [email protected]

We answer your request free of charge, as soon as possible and within thirty days at the latest, depending on the type of request. If our answer contains personal data, we send it after we verify your identity. We send it to your KEP address, to your email address registered in our system, or by registered mail with return receipt.

NG PHASELIS TURİZM A.Ş. (NG Phaselis Bay)

Göynük Mah. 3160. Sok. No: 31 Kemer / ANTALYA, Türkiye · +90 242 824 07 07 · [email protected]

 

Version history

Version	Date	Description
v2.0	26.09.2026	The text was fully renewed; the cookie inventory, legal reasons, transfer abroad and consent management sections were added.
v1.0	—	First publication.