PERSONAL DATA PROTECTION DISCLOSURE STATEMENT
As KürşatTurizm Ve Ticaret Anonim Şirketi – TelatiyeResort Hotel (“TELATİYE”), we believe that the protection and confidentiality of personal data of our employees, job candidates, guests, visitors, business contacts and third parties who have any legal relationship with TELATİYE is a fundamental right and we work to ensure your security. Therefore, we would like to inform you about your rights regarding the use and protection of your personal data within the scope of the applicable legislation.
1. Data Controller Status
Within the scope of the Personal Data Protection Law No. 6698 (“LPPD”), TELATİYE has the status of data controller as the legal entity responsible for determining the purposes and means of processing personal data and establishing and managing the data recording system. As the data controller, TELATIYE has the obligation to inform the persons whose personal data it processes, to prevent unlawful processing of these data or unlawful access to the data, and to ensure the preservation of the data.
2. Legal Basis for Collection of Personal Data by TELATIYE
All personal data held by TELATIYE is processed in accordance with the provisions of the Constitution of the Republic of Turkey, KVKK, Turkish Penal Code and relevant legislation.
Your personal data will be processed in line with the principles set out in Article 4 of the KVKK;
-In accordance with the law and the rules of integrity,
-Accurate and updated when necessary
-For specific, clear and legitimate purposes,
-In connection with the purposes for which they are processed, in a limited and proportionate manner,
-They are processed to be kept for the period required for the purpose stipulated in the relevant legislation and for the purpose for which they are processed.
3. What Personal Data Do We Process?
TELATIYE may collect, process the following personal data of our employees, prospective employees, guests, visitors, business contacts and third parties who have any legal relationship with TELATIYE, within the limits set forth in the Law and relevant legislation and for the purposes explained in the next section of this Information Text. can be shared:
- Personal data including identification information such as name, surname, Turkish Republic identity number, passport number, nationality, place and date of birth, photograph, gender, vehicle license plate information, marital status, and data included in identification documents such as identity cards, passports, and driver's licenses, in cases where identification is required,
- Personal data including contact information such as telephone number, home address, e-mail address, fax number,
- Personal data regarding employment processes such as profession/job, CV, education and work history, educational status, military service status, reference information and personnel information,
- Personal data such as camera recordings and documents taken upon entering the physical location and during the stay in the physical location;
- Data intending to complaint and request records and their evaluation,
- Financial data such as bank account number, IBAN number, credit card information, invoice information.
4. For What Do We Use Your Personal Data?
Personal data collected by TELATİ in accordance with the law and this Information Text can be processed and shared within the limits set forth in KVKK and relevant legislation and for the purposes explained as below:
a)Fulfillment of legal and practical requirements and a contractual obligation in order to establish a lawful accommodation contract or employment contract between the parties,
b) Ensuring the security of TELATIYE's physical space and guests,
c)To ensure that authorized persons can fulfill their duties in the inspections to be carried out for the purpose of auditing TELATİYE arising from public institutions and organizations and laws,
d)Preparing, creating, updating and managing TELATİYE's website and mobile applications,
e)Providing a quality and peaceful accommodation environment to our guests and carrying out tourism and hotel management activities in line with TELATİYE's operating principles and determining quality and business policies,
f)ulfilling notification obligations to administrative authorities in the manner stipulated in the relevant legislation, especially the Identity Notification Law No. 1774, the Labor Law No. 4857 and the Social Insurance and General Health Insurance Law No. 5510, and for the reasons required by the legislation.
g)Storing account information and other information registered in the system in a safe environment within the scope of payments made by TELATİYE to the bank accounts of our employees and other relevant persons,
h)Carrying out joint events and projects with real or legal persons with whom TELATIYE cooperates,
ı) To inform our guests and visitors about our advertisements, discounts, campaigns and promotions,
i) Managing the application, selection, placement and employment processes of our employee candidates and creating their personnel files,
j) Ensuring the legal and commercial security of people who have a business relationship with TELATİYE,
k)Determination and implementation of TELATİYE's commercial and business strategies,
l)To be able to carry out the necessary work by our business units to benefit you from the products and services offered by TELATİYE,
m)Recommending and presenting the products and services offered by TELATİYE to our guests and visitors by customizing them according to the tastes, usage habits and needs of our guests and visitors,
n) Creating a guest portfolio and determining commercial and operational policies.
You can update and withdraw your consent to the processing of your personal data at any time. The processing of your personal data will be stopped as soon as we receive your declaration regarding revocation.
5. Collection of Your Personal Data
For your personal data, other than the data that is legally required to be collected in order to fulfill TELATIYE's legal obligations, in line with your explicit consent, job application forms, interview conversations, accommodation documents filled out by the front office staff at the hotel or on TELATIYE's websites, over the internet or physically delivered to us. It is collected from written or electronic media through mobile applications, stand works and events.
6. With whom and why is your personal data shared?
As a rule, personal data belonging to our guests, employees, prospective employees, visitors, business contacts and other persons whose data is processed are not transferred to third parties without the explicit consent of the data owners.
In addition, in order to fulfill legal obligations, financial planning and calculations are carried out with authorized public institutions and organizations, including the Gendarmerie General Command and the Social Security Institution, determination of commercial, operational and quality policies, and execution of operational activities in accordance with the legislation, in Turkey and/or Personal data can be transferred to third parties and organizations resident abroad and to TELATİYE's agencies, online reservation services, suppliers or third parties and organizations with whom it has a business relationship, within the limits set by the legislation and the contractual business relationship.
7. Circumstances in which TELATIYE May Process Your Personal Data Without Your Explicit Consent in accordance with KVKK
According to Article 5 of the KVKK (Personal Data Protection Law), TELATİYE can process your personal data without your explicit consent under the following conditions:
a) When explicitly provided by laws,
b) When you are unable to give consent due to physical impossibility or when consent is not legally valid, and processing your personal data is necessary to protect your life, bodily integrity, or the life or bodily integrity of another person
c) When the processing of personal data is necessary for the establishment or performance of a contract and is directly related to the parties involved in the contract,
d) When the processing of personal data is mandatory for the data controller to fulfill their legal obligations,
e) When your personal data has been made public by you,
f) When processing personal data is necessary for the establishment, exercise, or protection of a legal right,
g) When processing personal data is necessary for the legitimate interests of the data controller, provided that it does not harm your fundamental rights and freedoms.
8. Rights Arising from the Personal Data Protection Law
Under the Personal Data Protection Law (KVKK), your personal data:
a) To learn whether your personal data is being processed,
b) To request information if your personal data has been processed,
c) To learn the purpose of processing and whether your personal data is being used in accordance with that purpose,
d) To know the third parties to whom your personal data has been transferred, both domestically and internationally,
e) To request correction if your personal data has been processed incompletely or inaccurately,
f)To request the deletion or destruction of your personal data under the conditions specified in Article 7 of the KVKK,
g)To request notification of the actions taken in accordance with the above-mentioned (e) and (f) items to the third parties to whom your data has been transferred,
h) To object to a result that is produced against you solely based on automated processing of your personal data,
i)To remind you that you have the right to request compensation for damages if you suffer harm due to the unlawful processing of your personal data under the KVKK
We would like to remind you that your applications will be responded to by us within a maximum of 30 days. If you do not receive a response within this timeframe, or if you are dissatisfied with the response, you have the right to apply to the Personal Data Protection Authority within 30 days from receiving our response. According to the first paragraph of Article 13 of the KVKK, applications to TELATİYE regarding these rights must be submitted in writing or through other methods determined by the Personal Data Protection Board.
In this context, applications to TELATİYE can be submitted in writing through one of the following methods: In Person: Delivered directly to TELATİYE. By Notary: Sent through a notary. By Email: Sent to the email addresses muhasebe@telatiyeresort.com and info@telatiyeresort.com. These methods ensure that your request is properly received and processed.