Miramare Hotels - Personal Data Protection Law

CLARIFICATION TEXT ABOUT THE PROTECTION OF PERSONAL DATA

As the Miramare Hotels family (Miramare Beach Hotel- Miramare Queen Hotel), we are aware of the importance of the personal data of our esteemed guests; therefore, we take high security measures to protect your personal data from unauthorized access. We process your personal data within the framework of the limits ordered by the Personal Data Protection Law No. 6698 and secondary regulations issued in accordance with this law, the Identity Notification Law No. 1774, the Tax Procedure Law No. 213, the Turkish Commercial Code No. 6102 and other relevant legislations related to your personal data in order to protect your fundamental rights and freedoms, especially the privacy of private life, as explained below.
Identity of the data controller;
In accordance with the Law on the Protection of Personal Data No. 6698, ZAFER TURIZM OTELCILIK VE INŞAAT A.Sh. he has the title of ”data controller".
Within the scope of the “Obligation of the Data Controller to Inform” contained in article 10 of the KVKK and the “Rights of the Relevant Person” contained in article 11 of the KVKK; for what purpose your personal data will be processed, to whom and for what purpose your processed personal data can be transferred, the method and legal reason for collecting your personal data, and your rights, ZAFER TURIZM OTELCILIK VE INŞAAT A.Sh. we would like to inform you with this “Clarification and Consent Text about the Protection of Personal Data”, which has been prepared with the aim of fulfilling our obligation to inform our guests, visitors, business partners and the natural or legal persons we communicate with in our capacity as data controller.
Our institution reserves the right to revise this “Clarification Text on the Protection of Personal Data" at any time within the framework of changes that may occur in the current situation.
Your personal data that we process;
Your identity information (such as first and last name, Turkish identity number )
Your contact information (such as e-mail address, phone number),
Your location information (such as address),
Information about your children (such as age - date of birth) ,
Your financial information (information about your pay transactions),
Your wishes, complaints or comments while staying in our hotels or after your stay.
** In accordance with the limited number policy regarding minors under the age of 18 with you, we can also obtain name, surname, nationality information and date of birth information through you.
Moments of collection of your personal data;
Your personal data, within the framework of the services we offer, your personal data that you provide personally or indirectly to our institution are collected in all kinds of oral, written or electronic media.
During hotel activities;
Your personal data may be collected during the execution of the room reservation process, the establishment of dialogues with tour operators and travel agencies, the stages of paying and checking in to the hotel, the notification of your requests and complaints, the filling of customer satisfaction and survey forms, participation in training, seminars or organizations organized by the hotel for any purpose and during your visit to our Internet website.
The method of collection of personal data and its legal reason;
Your personal data can be processed in the following cases, which are included in Article 5 of the Personal Data Protection Law No. 6698;
1. Finding explicit consent,
2. To be clearly stipulated in the laws.
3. The fact that a person who is unable to disclose his consent due to actual impossibility or whose consent is not given legal validity is mandatory for the protection of the life or body integrity of himself or someone else.
4. It is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract.
5. It is mandatory for the data controller to fulfill his/her legal obligation.
6. The fact that the relevant person has been publicly identified by himself.
7. The data processing is mandatory for the establishment, use or protection of a right.
8. It is mandatory to process data for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
Your health data, which is included in the category of special personal data, may be processed depending on the provision of the conditions set out in Article 6 of the Personal Data Protection Law No. 6698 or on your explicit consent.
Processing of your personal data of a special nature
These are the data that may lead to victimization of the person in case of disclosure of personal data of a special nature. The race, ethnic origin, political thought, philosophical belief, religious sect or other beliefs, clothing and clothing, association - foundation or trade union membership, health, sexual life, criminal conviction and security measures related data and biometric and genetic data of these Persons are special personal data. As a rule, personal data of a special nature can only be processed with the consent of the person concerned.
Your personal data as stated in article 6 of the Personal Data Protection Law No. 6698,
Personal data other than health and sexual life may be processed without seeking the explicit consent of the person concerned in the cases stipulated by the laws. Blood type, allergen information, information about transmitted diseases and personal data related to health and sexual life from your private personal data may only be processed by persons or authorized institutions and organizations under the obligation to keep secrets for the purpose of protecting public health, preventive medicine, medical diagnosis, treatment and maintenance services, planning and management of health services and financing, without seeking the explicit consent of the relevant person.
It is essential that adequate measures determined by the board are taken in the processing of personal data of a special nature.
The purposes of processing your personal data;
To perform the room reservation procedures.
Fulfillment of legal and regulatory requirements,
Ensuring the management of guest relations,
Determination and implementation of commercial business and strategies,
Execution of marketing and sales transactions,
Performing routine inspections,
Execution and supervision of transactions of financial origin,
Planning, supervision and execution of information security processes,
Ability to prevent misconduct and unauthorized transactions that may arise from employees,
Evaluating, responding to suggestions, requests, complaints that will be transmitted by customers through all kinds of channels and performing improvement works in accordance with the notifications.
Duration of storage of personal data
In cases where the purpose requiring processing disappears, or when the data processing time-out periods are completed in accordance with the relevant legislation, your personal data will be deleted, destroyed, or anonymized and continued to be used.
Rights of the personal data owner
Everyone concerned can request the following rights about himself/herself by contacting the data controller;
I. To learn whether personal data is processed or not,
II. If your personal data has been processed, do not request information about it,
III. To learn the purpose of the processing of personal data and whether they are used in accordance with their purpose,
IV. To know the third parties to whom personal data are transferred at home or abroad, (in order for this request to be fulfilled, the legal purpose of processing personal data must have disappeared, the legal retention periods must have expired, or the relevant statute of limitations must have expired. Your request for deletion will not be provided before these periods expire.)
V. To request correction of personal data in case of incomplete or incorrect processing,
VI. requesting deletion or destruction of personal data within the framework of the conditions stipulated in article 7,
VII. V. and VI. to request that the transactions carried out in accordance with the articles be notified to the third parties to whom the personal data are transferred,
VIII. Objecting to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems,
IX. To request compensation of the damage in case of damage due to unlawful processing of personal data.