İkbal Thermal Hotel & Spa PERSONAL DATA PROTECTION LAW - INFORMATION TEXT

1. INTRODUCTION

Our company attaches great importance to the protection of personal data it has obtained or will obtain due to its activities. In this context, we have prepared this policy in order to determine the principles to be applied and the measures to be taken regarding the processing, protection, storage, destruction of personal data and informing data owners, and our company carries out its activities regarding personal data within the scope of both the Personal Data Protection Policy and the Personal Data Protection Law No. 6698.

2. PURPOSE

Our company may process personal data for the purposes of carrying out its activities, providing better service to its customers, exercising rights arising from contracts and fulfilling obligations, executing duties and responsibilities arising from the law, renting or selling real estate belonging to our customers under the most favorable conditions, and ensuring that our customers invest and rent real estate under the most favorable conditions. . The purpose of the Personal Data Protection Policy is to determine the principles and rules to be followed during the personal data processing activity carried out by our Company in line with the purposes stated above, to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, in the processing of personal data and to provide the necessary transparency by informing data owners about this activity. .

3. SCOPE

Personal Data Protection Policy covers activities related to personal data falling within the scope of Law No. 6698.

4. BASIS

Personal Data Protection Policy is based on Law No. 6698 and the regulations issued/to be issued within the scope of this Law. In this regard, the Personal Data Protection Policy will be applied as long as it complies with the legislation in force.

5. PERSONAL DATA

Personal data refers to any information regarding an identified or identifiable natural person. In general, data such as real persons' name, surname, date of birth, TR Identity Number, mobile phone number and e-mail address are included in the scope of personal data. However, in order for such data to be considered personal data, it must be associated with a real person, in other words, personal data must enable the identification of the real person. This type of personal data is described as general personal data in the personal data protection policy. In Law No. 6698, it is accepted that some sensitive data are private personal data. Therefore, all kinds of personal data that are not within the scope of special personal data are considered general personal data by our company. Special personal data are as follows; “data regarding race, ethnic origin, political thought, philosophical belief, religion, sect or other beliefs, appearance and clothing, association, foundation or union membership, health, sexual life, criminal conviction and security measures, and biometric and genetic data” Hotel In order to ensure the security of common areas, camera systems monitor and record 24 hours a day, 7 days a week.

6. CONDITIONS FOR PROCESSING PERSONAL DATA

During our company's processing of personal data; - to first act in accordance with the legislation in force, then the personal data processing policy and the rules of honesty - to ensure that the personal data processed are accurate and up-to-date - to process personal data for the purposes explained in this policy and to act in a limited and limited manner for this purpose - to keep personal data in accordance with the legislation shall take the necessary precautions to ensure that it is stored for periods appropriate to the intended or processing purpose. As a rule, our company does not process personal data without the explicit consent of the data owner. However, in the following cases, the explicit consent of the data owner is not required; - It is clearly foreseen by law - It is necessary to process personal data of the parties to the contract, provided that it is directly related to the establishment or execution of a contract - It is mandatory for our company to fulfill its legal obligation - It has been made public by the relevant person himself - Data is required for the establishment, use or protection of a right Processing is mandatory - Data processing is mandatory for the legitimate interests of our company, provided that it does not harm the fundamental rights and freedoms of the data owner. Special categories of personal data are processed only without the express consent of the relevant person or, in cases stipulated by law, without the express consent of the relevant person.

7. PURPOSES OF PROCESSING PERSONAL DATA

Our company personal data, - Fulfillment of obligations arising from the law, protection of our company's legal interests and legal rights - Realization of contract negotiations, conclusion and execution of contracts, follow-up and termination of contract processes - Providing better service to customers, determining suitable projects and services for customers - Providing products and services - Management, execution and supervision of the company's activities - Providing products and services in line with customer preferences - Following up and fulfilling customer demands and complaints, measuring customer satisfaction - Supplying the materials and services needed by the company - Promotion, announcement of the company's activities, execution of sales and marketing activities - Providing, planning, managing and auditing the human resources needed by the company, ensuring their personal rights - Ensuring the necessary coordination and cooperation within the company, with group companies and suppliers - Protecting our company's rights arising from contracts and laws. Processing of personal data, obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available, classifying by fully or partially automatic or non-automatic means provided that it is part of any data recording system. It refers to any action performed on data, such as preventing its use or use. As a rule, our company processes personal data for its own activities. In this context, our company takes the necessary security measures in line with the legal personal data processing purposes and transfers the personal data and sensitive personal data of the personal data owner to third parties (Group Companies, business partners, shareholders, affiliates, insurance companies, public institutions and/or organizations and for the same purposes). may be transferred to third parties). Our company stores personal data for the period specified in this legislation, if stipulated in the relevant legislation. If a period is not regulated in the legislation regarding how long personal data should be stored, personal data is processed for the period required to be processed in accordance with our Company's practices and commercial practices, depending on the activity carried out by our Company while processing that data. If you request that your personal data be deleted or destroyed or anonymized, this request may be fulfilled by our Company at the end of the period determined by legal regulations; However, during this period, your personal data will not be processed by our Company and will not be shared with third parties except for obligations arising from national and international laws, regulations and contracts. In addition, it can be shared with our shareholders in order to determine strategies regarding our company's activities and to carry out audit activities. Our company will be able to transfer personal data abroad, provided that there is adequate protection in accordance with this policy, and if there is not sufficient protection, the data controllers in Turkey and the relevant foreign country undertake to provide adequate protection in writing and the Board has permission.

8. STORAGE PERIOD OF PERSONAL DATA

Personal data will be stored for the period stipulated in the relevant legislation or for the period required for the purpose for which it is processed.

9. MEASURES TAKEN REGARDING THE PROTECTION OF PERSONAL DATA

It attaches importance to the confidentiality and security of Personal Data and takes legal, technical and administrative measures to protect Personal Data to the extent stipulated by the Law and relevant legislation. Our company takes technical, legal and administrative measures to prevent the unlawful processing of personal data it has obtained or will obtain, to prevent unlawful access to personal data, and to ensure the preservation of personal data. Our company not only provides the necessary information to its employees on this issue, but also takes special precautions in the contracts it has concluded or will conclude with its employees and other third parties. Although our company takes the necessary precautions, if the processed personal data is obtained by third parties through illegal means, our company will notify you and the Personal Data Protection Board as soon as possible.

10. DELETION, DESTRUCTION AND ANONYMIZATION OF PERSONAL DATA

If all the conditions for processing personal data are eliminated, personal data will be destroyed by our company or upon the request of the data owner. Destruction of personal data will be carried out by applying one of the methods of deletion, destruction or anonymization. Deletion of personal data is the process of making personal data inaccessible and unusable for the relevant users in any way. Destruction of personal data is the process of making personal data inaccessible, irretrievable and unusable by anyone. Anonymization of personal data means making it impossible to associate personal data with an identified or identifiable natural person in any way, even if it is matched with other data. Our company records all transactions regarding the deletion, destruction and anonymization of personal data, and these records are kept for at least three years. Which of the personal data destruction methods will be applied will be determined by our company upon request, provided that the reason is explained to the data owner. Our company's periodic destruction period is 6 (six) months.

11. DATA SUBJECT'S RIGHTS

The data owner has the right to be informed during the collection of personal data. Accordingly, during the collection of personal data, our company is informed about - the title of our company and the identity of its representative, - the purpose for which personal data will be processed, - to whom and for what purpose the processed personal data can be transferred, - the method and legal reason for collecting personal data. In addition, the data owner has the right to: - To learn whether personal data has been processed - To request information if personal data has been processed - To learn the purpose of processing of personal data and whether they are used for their intended purpose - To know the third parties to whom personal data are transferred at home or abroad - To know whether personal data has been processed incompletely or incorrectly - Requesting the destruction of personal data in case the conditions requiring processing of personal data disappear - - Requesting that the transactions made in case of correction or destruction of personal data be notified to third parties to whom the personal data has been transferred, - The data owner himself/herself by analyzing the processed data exclusively through automatic systems He has the right to object to the emergence of a result against him, - To request compensation for the damage in case he suffers damage due to unlawful processing of personal data. The data owner can submit his requests to the full address, telephone number or e-mail address below, provided that he certifies his identity;
Title İkbal Fuel Oil and Recreation Facilities Inc.
Address Dörtyol Mah. Kütahya Yolu Boulevard N.2/A Afyonkarahisar
E-mail kvk@ikbalsistem.com
Telephone 90 272 252 56 00
The data owner's requests are fulfilled within a maximum of 30 (thirty) days, and the data owner is provided with the necessary information free of charge. However, if the transaction requires an additional cost, the fee in the tariff determined by the Board may be charged.
Share by: