Information Notice in accordance with the Turkish Personal Data Protection Law No. 6698 (KVKK)
Pursuant to the Law on the Protection of Personal Data No. 6698, any information relating to an identified or identifiable natural person is defined as “personal data.” Akyol Gıda Turizm Otel İnşaat Petrol Tic. Ltd. Şti. (hereinafter referred to as the “Data Controller”) aims to fulfill its obligation to inform in order to process the personal data obtained from our valued guests and customers in compliance with the applicable Personal Data Protection legislation. In this context, we hereby present the following information regarding the processing, storage, transfer, and disposal of your personal data by the Data Controller.
1. DATA CONTROLLER
Akyol Gıda Turizm Otel İnşaat Petrol Tic. Ltd. Şti. processes your personal data as the Data Controller in accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”) and the relevant applicable legislation.
2. PROCESSED PERSONAL DATA
In compliance with KVKK and relevant legislation, the categories of personal data processed within the scope of the purposes and legal grounds specified in this Information Notice are as follows:
a. Identity Information: Full name, place and date of birth, nationality, Turkish ID number, accompanying guest’s full name, place and date of birth
b. Contact Information: Address, phone number, email address
c. Financial Information: Bank account details
d. Special Categories of Personal Data: Photograph, health status, and medication information
e. Other Personal Data: Room number, vehicle license plate information, smoking preference, allergen information, customer preferences, entrusted property information
3. PURPOSES OF PROCESSING PERSONAL DATA
Your personal data is processed for the purposes of carrying out processes related to accommodation services; recording such data in online software systems used for the execution of the Data Controller’s sales and marketing policies; performing necessary activities by our relevant business units to enable you to benefit from the products and services offered by the Data Controller; measuring and improving customer satisfaction; collecting and evaluating complaints and suggestions regarding products and services; recommending the products and services offered by the Data Controller; planning and/or executing market research activities within the scope of sales and marketing; ensuring the legal, technical, and commercial safety of relevant persons in business relationships; conducting and managing legal affairs; and carrying out financial and/or accounting processes.
Your personal data is processed based on the legal grounds set forth under Article 5/2 of the KVKK, including: “(a) explicitly stipulated by law”, “(c) being directly related to the establishment or performance of a contract, provided that it is necessary to process personal data belonging to the parties of the contract”, “(ç) being mandatory for the Data Controller to fulfill its legal obligations”, and “(e) being necessary for the establishment, exercise, or protection of a right.”
In addition, your personal data may be processed, subject to your explicit consent, in accordance with the KVKK and the Law on Electronic Commerce, for the purpose of informing you about campaigns, updates, and innovations related to the services provided by the Data Controller.
Your special categories of personal data will be processed based on your explicit consent, in accordance with Article 6/2 of the KVKK, for the purpose of verifying the identity of the individual to whom the service will be provided.
4. TO WHOM AND FOR WHAT PURPOSES PERSONAL DATA MAY BE TRANSFERRED
Your personal data may be transferred without seeking explicit consent, in accordance with Article 8/2(a) of the KVKK, for the following purposes:
· To fulfill legal obligations arising from applicable legislation, your data may be shared with the General Directorate of Security.
· For the collection of payments related to products and services and the execution of financial/accounting processes, your data may be shared, when necessary, with notaries, enforcement offices, and/or courts.
· To comply with legal obligations, your data may be shared with relevant public institutions and organizations when required or upon request.
· For the delivery of items left or forgotten at the hotel, your data may be shared with contracted courier service providers.
· For the conduct and follow-up of legal processes, your data may be shared with our lawyers to the extent necessary, within the scope of confidentiality obligations.
5. METHODS AND LEGAL GROUNDS FOR COLLECTING PERSONAL DATA
Your personal data is collected, in accordance with the legal grounds specified under Articles 5/2 and 6/2 of the KVKK, through automatic or non-automatic means, either verbally, in writing, or electronically, for the purposes set out in Section (3) of this notice.
In this context, your personal data may be collected through the following methods:
· Filling out forms by the data subject,
· Sending emails,
· Contacting us via telephone,
· Visiting our website,
· Communicating through social media platforms,
· Through online sales platforms, tourism agencies, and event organizations,
· Sharing business cards at fairs, seminars, and similar events,
· Through partner institutions and organizations.
6. YOUR RIGHTS UNDER ARTICLE 11 OF THE KVKK
Pursuant to Article 11 of the KVKK, you, as the data subject, have certain rights. You may submit your requests regarding these rights by completing the Data Subject Application Form in full, in accordance with Article 11 and Article 13/1 of the KVKK, as well as the Communiqué on the Principles and Procedures for Application to the Data Controller.
You may submit your requests through the following methods:
· By applying in person to our Company address at Cumhuriyet Mahallesi Adnan Menderes Boulevard No: 313, Atakum / Samsun, Turkey,
· Via our Registered Electronic Mail (KEP) address: akyol.venn@hs02.kep.tr,
· By sending a written request through a notary public or via registered mail with return receipt, for identity verification purposes,
· By sending an email to bilgi@vennbutikotel.com using a secure electronic signature, mobile signature, or the email address previously registered in our systems,
· Or through other methods that may be determined by the Personal Data Protection Board in the future.
7. RETENTION PERIOD OF PERSONAL DATA
The Data Controller retains personal data for as long as necessary to fulfill the purposes of processing and in accordance with the retention periods stipulated by applicable legislation. Once these purposes cease to exist and the mandatory retention periods expire, personal data is deleted, destroyed, disposed of, or anonymized.
8. AMENDMENTS AND UPDATES
This Information Notice has been prepared in accordance with the Law on the Protection of Personal Data No. 6698 and the relevant applicable legislation. Necessary amendments may be made to this notice in line with changes in the applicable legal regulations and/or in the Data Controller’s personal data processing purposes and policies.
You can access the most up-to-date version of this Information Notice and detailed information at www.vennbutikotel.com.
Akyol Gıda Turizm Otel İnşaat Petrol Tic. Ltd. Şti.