INFORMATION TEXT ON THE PROCESSING OF PERSONAL DATA
A. PURPOSE OF THE PERSONAL DATA PROTECTION AND PROCESSING POLICY:
Contemporary Health Service. Singing. Tic. Inc. As Sandıklı Thermal Park Resort SPA&Conventin Center (“Company”), in accordance with the Personal Data Protection Law No. 6698 (“KVKK”), we hereby inform you with this “Information” letter, which we have prepared as the Data Controller, titled “Information Obligation of the Data Controller” in the KVKK. Within the framework of articles 10 and 11 titled "Rights of the Relevant Person"; We would like to provide information about the purposes for which your personal data will be processed, to whom and for what purpose your processed personal data can be transferred, the method and legal reason for collecting your personal data, and your other rights listed in Article 11 of the KVKK: As Data Controller, we process, record, transfer, share and store your personal data as explained below and within the limits prescribed by official legislation. Our company reserves the right to update this "Information Text on the Protection of Personal Data" at any time within the framework of changes that may be made in the current official legislation.
B. COLLECTION, PROCESSING AND PROCESSING PURPOSES OF PERSONAL DATA:
By our company, which operates in the areas specified in detail in the Company's Articles of Association, due to these activities; Your verbal, written or electronic personal data are collected and processed due to the regulations of the Tourism and Revenue Administration and other relevant institutions and the contracts we have concluded. This personal data of yours will be used to provide services related to our company's fields of activity and to improve the quality of these services, to carry out our company's sales, marketing and other activities, and to comply with information storage, reporting and information obligations. In addition, your personal data may be used within the scope of activities such as improving the quality of service we offer to you and CRM (Customer Relationship Management) applications for sales and marketing activities. Your personal data will not be used for purposes other than those stated above without your explicit consent, and will not be shared or transferred to third parties except for legal obligations and official institutions/organizations. Our company only processes your personal data; Based on the explicit consent of the customers or the legislation we are subject to, especially KVKK art. In other cases stipulated in 5/f.2, we may share this data with our domestic or foreign subsidiaries, direct or indirect subsidiaries and joint ventures, or in accordance with a legal obligation, in order to provide value-added services, opportunities and opportunities to our customers and to increase service quality. It may be shared with public institutions or organizations authorized to request it and, provided that adequate precautions are taken, with institutions, suppliers, authorized dealers/dealers/business partners in the country or abroad that we have agreements with in accordance with our activities. Although your personal data may vary depending on the services, products or commercial activities provided by our Company; It can be collected verbally, in writing or electronically, by automatic or non-automatic methods, through offices, branches, dealers, call center, website, social media channels, mobile applications and similar tools. As long as you benefit from our company's products and services, your personal data may be processed by creating and updating it.
Additionally, with the intention of using our Company's services;
• To meet the requirements of Law No. 6563 on the Regulation of Electronic Commerce when you use our call center or website,
• When you visit our company, website or social media channels,
• Your personal data may be processed when you participate in training, seminars or organizations organized by our company. Your personal data obtained from you with your consent or for other legal compliance reasons stated in the laws of the Republic of Turkey;
(i) Our business units can carry out the necessary work to benefit you from the products and services offered by our company; (ii) Customizing and recommending the products and services offered by our company according to your tastes, usage habits and needs; (iii) Ensuring the legal and commercial security of our Company and the people who have business relations with our Company (administrative operations for communication carried out by our Company, ensuring the physical security and control of the Company's locations, business partner/customer/supplier (officials or employees) evaluation processes, legal compliance process, financial affairs etc.); (iv) Improving the quality of the services offered by our company and improving our quality policy, (v) To be informed and benefit from the general and special campaigns, promotions, promotions, discounts and similar advantages offered by our company; (vi) When you log in with your username and password in order to receive services from the channels offered by our company, to process your personal data, preferences, transactions and browsing time in the relevant channels, as well as the data obtained, in order to provide you with the information and services you have requested; (vii) To make notifications (renewal, termination, etc.) regarding all kinds of loyalty cards issued and/or to be issued by our Company and its related companies/organizations and website memberships of our Company and its related companies/organizations, and all kinds of communication that may be established with you, To inform you about new services and products to be offered, as well as possible changes and innovations in personal data policies and membership conditions, and similar issues; (viii) To inform you about the information, events and services you request from our company; (ix) Determination and implementation of our company's commercial and business strategies; (x) Ensuring that our company's human resources policies are implemented and; (xi) If it is clearly stated in the legislation or if necessary, for the purposes of fulfilling a legal obligation determined by the legislation, our Company and its related companies/organizations and other companies specified in Article (C) below, within the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVK Law. It may be processed by real and/or legal persons.
C. METHOD AND LEGAL REASON FOR COLLECTING PERSONAL DATA:
Your personal data is obtained in all kinds of verbal, written or electronic media, in line with the purposes specified in the above articles, in order to be able to offer our products and services as a Company within the determined legal framework and in this context, to ensure that our Company can fully and accurately fulfill its responsibilities arising from the contract and the law. Your personal data collected for this legal reason is processed, recorded, transferred, shared and stored for the purposes specified in article (B) of this text, within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVK Law.
D. PROCESSING OF SPECIAL DATA:
According to the Personal Data Protection Law, personal data regarding race, ethnic origin, political thought, philosophical belief, religion, sect or other beliefs, appearance and attire, membership of associations, foundations or unions, health, sexual life, criminal convictions and security measures, as well as biometric data. and genetic data are special personal data. Our company also takes adequate measures determined by the Personal Data Protection Board in the processing of special personal data. In order to provide better service, our company will process personal data of individuals only with the consent of the relevant person and only to serve the purpose of collection.
E. TO WHOM AND FOR WHAT PURPOSE PROCESSED PERSONAL DATA CAN BE TRANSFERRED:
Your collected personal data will be transferred to Çağdaş Sağ. to serve the purposes specified in Article (B). Speed. Singing. Tic. Inc. It may be transferred to Sandıklı Thermal Park Resort SPA & Convention Center, as well as to our shareholders, business partners, suppliers, legally authorized public institutions and private persons, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVK Law.
F. TRANSFER OF PERSONAL DATA ABROAD:
Our company has the authority to transfer personal data abroad, within the conditions determined by the Personal Data Protection Board in the KVK Law, in accordance with other conditions in the law and after obtaining the explicit consent of the person for this purpose.
G. RIGHTS OF THE PERSONAL DATA OWNER AS MENTIONED IN ARTICLE 11 OF THE KVK LAW:
Within the scope of the KVK Law, we accept that the relevant person has the right to be informed and obtain approval before the processing, recording, transfer, sharing and storage of his personal data, and that he has the right to determine the fate of his data after the data is processed, recorded, transferred, shared and stored. In this context, if you submit your requests regarding your rights as personal data owners to our Company using the methods set out below in this "Information Text on the Processing of Personal Data", our Company will finalize the request free of charge within thirty days at the latest, depending on the nature of the request.
a) Regarding your requests regarding your rights as personal data owners, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller published by the Personal Data Protection Board
• If your application will be answered in writing, no fee will be charged for up to ten pages. A processing fee of 1 Turkish Lira may be charged for each page over ten pages.
• If the response to the application is given on a recording medium such as a CD or flash memory, the fee that may be requested by our Company as the data controller cannot exceed the cost of the recording medium.
In this context, personal data owners;
• Learning whether personal data is being processed or not,
• Requesting information if personal data has been processed,
• Learning the purpose of processing personal data and whether they are used for their intended purpose,
• Knowing the third parties to whom personal data is transferred at home or abroad,
• Requesting correction of personal data in case of incomplete or incorrect processing and requesting that the action taken in this context be notified to third parties to whom personal data has been transferred,
• Requesting the deletion, destruction or anonymization of personal data within the framework of the conditions stipulated in Article 7 of the KVK Law and requesting that the action taken in this context be notified to third parties to whom personal data has been transferred,
• Objecting to the emergence of a result that is unfavorable to the person by analyzing the processed data exclusively through automatic systems,
• They have the right to demand compensation for the damage if they suffer damage due to illegal processing of personal data. However, individuals do not have any rights regarding anonymized data within the Company. Our company may share personal data with relevant institutions and organizations in accordance with the business and contractual relationship, for the purpose of exercising the legal powers of a judicial duty or state authority.
H. PERIOD OF TIMES WHERE YOUR PERSONAL DATA WILL BE PROCESSED:
In accordance with the KVK Law, your personal data processed for the purposes specified in this "Information Text on the Processing of Personal Data", when the purpose requiring processing in accordance with Article 7/f.1. of the KVK Law no longer exists and/or when we are obliged to process your data in accordance with the legislation. When the expiry period expires, your personal data will be deleted, destroyed or anonymized and will continue to be used by us.
İ. SITUATIONS WHERE OUR COMPANY MAY PROCESS YOUR PERSONAL DATA WITHOUT YOUR EXPRESS CONSENT AS REQUIRED BY LAW:
In accordance with Article 5 of the KVKK, our Company may process your personal data specified above and received in accordance with the law, without your explicit consent, in the following cases:
Situations clearly foreseen in the law;
• If you are unable to express your consent as the data owner due to actual impossibility, or in cases where your consent is not given legal validity, it is necessary to process your personal data in order to protect your life or physical integrity or the life of someone else.
• It is necessary to process personal data of the parties to the contract, provided that it is directly related to the establishment or execution of a contract you have concluded with our company and its related companies/organizations and other natural and/or legal entities specified in Article (C),
• It is mandatory for our company to fulfill a legal obligation,
• Your personal data has been made public by you,
• Data processing is mandatory for the establishment, exercise or protection of a right,
• It is mandatory to process data for the legitimate interests of our Company, provided that it does not harm your fundamental rights and freedoms.
J. TO MAKE A REQUEST PURSUANT TO THE PERSONAL DATA PROTECTION LAW:
In accordance with the 1st paragraph of Article 13 of the KVK Law, you can forward your request to exercise your above-mentioned rights to our Company using the method(s) determined/to be determined by the Personal Data Protection Board. Alternatively, if you wish, you can submit your application to our Company in writing, in accordance with the KVK Law. Law No. 6698, art. To exercise your rights in Article 11, you can always contact us by sending an e-mail to KVKK@sandikliparkhotel.com. In matters related to your personal data, only the KVKK@sandikliparkhotel.com e-mail address should be used, and requests and notifications coming from channels other than this address will not be evaluated. Rights regarding personal data can only be exercised regarding individuals' own data. Requests regarding the data of persons other than the person who filled out the form and has official documents identifying you attached will not be taken into consideration. Forms without official documents identifying your identity will not be taken into consideration. We would like to inform you that even when data deletion requests are fulfilled, we are obliged to share the data with the official authorities if requested by the official authorities.
