Pre-season compliance checklist for seasonal hotels in Türkiye

A seasonal hotel's pre-opening compliance check covers the duties every stay in Türkiye involves: a payment, a fiscal document, a guest identity notification (KBS) and personal data (KVKK), plus reporting to the central tourism database. Give each line one named owner and a deputy, and leave dates, scope and penalties to your accountant and legal adviser.

In the first week of the season the terrace bar reopens, four people join the front desk, and the cash register comes back from the storeroom. Every duty that depends on a handoff between people is at its weakest point of the year, and the first guests arrive anyway. This article is a seasonal hotel opening checklist for compliance: what to check before the first check-in, who should own each line, and what to close down when the season ends.

Why do the first weeks of a season carry the most compliance risk?#

Because a seasonal property restarts as a set of handoffs: new staff, reactivated accounts, stored devices and last year's notices. Nothing is broken on opening day; several things are simply unowned.

The duties do not pause between seasons. In Türkiye every stay involves a payment, a fiscal document (an invoice or e-document), a guest identity notification (KBS) and personal data (KVKK), and that is true from the first check-in. The failures that follow are usually people failures: the person who held the KBS password left in October, the integrator contact is a former accountant, the device was stored without its last daily closing, and the privacy notice still names last year's spa operator.

A long policy document does not survive a season break. One named owner and one deputy per line does, because a name can be asked a question at 23:00. Separate what the hotel controls from what an outside party controls: your accountant controls fiscal scope, your integrator controls document access, your software provider controls the reporting route, and the hotel controls who is trained and who approves.

Rehearse on paper, never in a live system. A sent notification and an issued document are real events; a walkthrough with a printed sample is not. Write the open questions on one page before opening: which outlets need a device, which rate applies to a foreign-currency invoice, how long records are kept. Each has an owner outside the hotel.

Is your KBS setup ready before the first guest arrives?#

Only if the facility's authorized person can still log in, every shift has a trained person, and the web service credentials match the network the property is now using.

The duty is statutory, not procedural. Law No. 1774 requires the responsible operator of every hotel, motel, pension, holiday village, campsite and similar lodging place to keep identity and arrival and departure records of everyone staying, local or foreign, day by day, and bars accommodating anyone who cannot prove identity with an identity card or another officially valid document. The same law lets the operator delegate these duties to a manager, and in that case both are jointly responsible. Delegation moves the work, not the liability. Confirm the current scope, deadlines and penalties for your own case with a legal adviser.

KBS is a web application the facility's authorized person enters through e-Devlet, and that person can give other staff their own logins scoped to guests only, staff only or both, per the Gendarmerie's KBS information document (14 November 2018). The web service module is where seasons break: each authorized user registers the hotel's fixed IP address and a KBS password, and the identity number, password and IP are checked together on every call. A changed internet line or provider silently stops notifications.

The guest data itself has rules worth rehearsing, from the same guide: a T.C. identity number is checked against the population register, a foreign guest without a foreigner identity number is entered with full identity details and the passport serial number, and an error in a field that cannot be updated is corrected by deleting and re-entering the record. Check-out is recorded with a reason and a date and time, confirmed reservations such as tour groups can be notified in advance, and the notification archive lets the authorized person verify that entries were made correctly and on time. Which law enforcement body receives your notifications, and its current procedures, should be confirmed with the authority; the fixed-IP rule above comes from a 2018 guide and may have changed.

For the front desk detail on guest identity at check-in, see KBS at check-in: a front desk checklist for guest identity.

Who confirms your e-Fatura and e-Arşiv setup before the season?#

Your accountant confirms the scope and the dates, and a named person at the hotel approves each document before it leaves the building.

Under VUK General Communiqué No. 509, as GİB explains on its eBelge site (opens in a new tab), taxpayers in the e-Arşiv application issue e-Fatura to buyers registered for e-Fatura and e-Arşiv Fatura to taxpayers not registered for e-Fatura and to people who are not taxpayers. An e-Arşiv invoice is delivered on paper or electronically as the buyer requests, so the front desk and the accounting office need the same answer about what a guest actually receives at check-out.

Private integration (özel entegratörlük, introduced by Communiqué No. 421) lets taxpayers without sufficient IT infrastructure use the application through an integrator, which is why the integrator contract and its user list are seasonal items, not permanent ones. Three things to verify with the accountant: the contract is still valid, the users for the new season are created, and it is written down who may issue and who may approve.

Human review before sending is good practice, and it is also the last point at which a mistake is cheap. Whether the property is in scope, and from which date, is a question about the taxpayer, not about the hotel's size or star rating; GİB publishes a transition calendar, and your accountant reads it for your file. The rate that applies to a foreign-currency invoice, and which day's rate, is also an accountant question: which rate applies, and to which day, is decided for your file by your accountant, not by a general checklist.

What has to be settled for ÖKC in each outlet?#

Each outlet's device, its receipt routine and the path a room charge takes must be agreed with the device provider and the accountant before that outlet opens.

Law No. 3100 requires first- and second-class merchants who sell goods to, or serve, people other than resellers to use payment recording devices (ödeme kaydedici cihaz, ÖKC) such as electronic cash registers. The receipts these devices issue document sales for which no invoice is required and take the place of an invoice, and each device must give a receipt for every sale and a daily closing receipt and record totals in a fiscal memory.

Which of your outlets needs a device, and whether e-Adisyon rules reach a hotel restaurant or bar, is a question for your accountant and the local tax office. Do not settle it by copying the hotel across the road. The room charge is the seasonal trap: a guest signing a meal to the room is a different event from a walk-in paying at the counter, and how the outlet documents it should be written down once, agreed with the accountant, and taught to every new waiter.

Devices returning from storage need a physical check before service: fiscal memory, seal, service records and the last daily closing from the previous season. Agree the night audit check: who confirms that every outlet closed its day, and what happens at 23:00 when one has not. Do not ring a sale on a live device to test it: a fiscal receipt cannot be deleted. For the fuller treatment, see ÖKC in hotel outlets: fiscal devices, room charges and invoices.

Outlet register (template, for example):

Are your KVKK notices, consent forms and staff accounts current?#

Only if each notice matches what the property actually does this season, and last season's staff accounts were closed when people left.

The Personal Data Protection Authority's communiqué on the duty to inform (Official Gazette, 10 March 2018, No. 30356) requires the privacy notice in every case of processing whatever the legal basis, does not depend on the person's request, and must be provable by the controller. It must be given separately by each department that processes data for a different purpose, and where processing relies on explicit consent it must be carried out separately from obtaining that consent.

That departmental rule is what a season breaks. Front desk, spa, cameras, Wi-Fi, transfers and any guest-facing app each need a notice that describes this season's reality, including any operator or service that changed over the winter. When data is not obtained from the person, the communiqué requires informing them within a reasonable time, at the start of communication, or at the latest when the data is transferred, which is the situation behind a group arrival booked by a tour operator.

Access is the second seasonal item: create role-based accounts for new staff on day one, give the least access the job needs, and close accounts on the day a person leaves rather than at the end of the season. How long records are kept, whether the property must register in a public registry, and the exact route and timing for a breach notification are questions for your legal adviser. For the account side, see PMS user roles and permissions: a setup checklist for hotels.

Which route does your property use to report to the central tourism database?#

The route your software provider operates, with a named person at the hotel who checks it. Confirm the cadence with TGA or the provider, and record the answer in writing: the original circular page was not read, so scope and cadence should be confirmed.

Ministry circular 2026/1 (16 April 2026), as reported by alomaliye.com on 6 May 2026 and by Dünya on 18 May 2026, obliges accommodation facilities and their software providers to send data to the central tourism database through a web-service API: daily if automatic, monthly by the 15th if manual. The cadence is the open question: confirm with TGA or your software provider whether your setup counts as automatic or manual, and record the answer in writing.

Whether a facility licensed only by a municipality falls under the circular, beyond its stated aim of covering all accommodation facilities, was not confirmed in the sources read; ask TGA directly. The sources read state no penalty for not sending, and that is not the same as no penalty existing, so treat the question as open and put it to your adviser.

Practically, three facts belong on the ownership page: which route the property uses (automatic through the software, or manual), who at the hotel checks that the data arrived, and who at the provider is called when it does not. Do this before opening, not in the first week of July, because the person who configured it last year may not be the person answering the phone this year. For the background, see Circular 2026/1: reporting to Türkiye's central tourism database.

What has to be closed down at the end of the season?#

Everything that was opened for the season: notifications, documents, devices, accounts and access, each closed by the person who owns that line.

Notifications: the last departures are recorded with a reason and a date and time, and the archive is checked for entries that were late or missing during the season. Documents: nothing is left sitting in a queue; outstanding e-invoices are approved or cancelled with the accountant before the books for the period are closed. Devices: each outlet takes its daily closing on the last trading day, the closing records are kept, and the device is stored as the provider instructs rather than as the storeroom prefers.

Accounts: staff logins, integrator users, PMS users and any delegated e-Devlet users are closed on the day, not left dormant until next spring. Data: what is kept, where and for how long is decided with your legal adviser; export what you need before the accounts that hold it are switched off. Handover: one page for next season's opener, naming each line, its owner, the outside contact and the open questions that were never answered.

What to do next#

Copy the five lines onto one page, write an owner and a deputy next to each, and list the questions that belong to your accountant, your integrator, your device provider, your software provider and your legal adviser. The season does not fail on knowledge; it fails on handoffs, and a named person is the cheapest fix available before opening day.