Personal Data Protection
CUSTOMER CLARIFICATION TEXT ON THE PROCESSING OF PERSONAL DATA
Data Officer: İstanbul Turizm ve Otelcilik Aş.
Osmanlı Sokak No: 9 Taksim-Beyoğlu-İstanbul
- İSTANBUL TURİZM VE OTELCİLİK ANONİM ŞİRKETİ which is the operator of The Marmara Hotels and The Marmara Esma Sultan Mansion, with registered office address Osmanlı Sokak No:9 Beyoğlu- İstanbul and the taxpayer to the Büyük Mükellefler Tax Office with number 4810040881, Data Supervisor with Mersis number 0481004088100015 attaches great importance to ensuring the security of your personal information you have provided to them.
- As İstanbul Turizm ve Otelcilik Aş. (“The Marmara Collection”) , we have prepared this disclosure text to inform you, our valued customers, regarding the processing, storage and transfer of your personal data within the framework of the Law No. 6698 on Protection of Personal Data (“KVKK”), EU General Data Protection Regulation (GDPR) and related legislation and legal regulations.
- What personal data is being processed and what are the purposes for which your personal data is being processed?
- Within the scope of our activities, we collect your data below from our customers and process them for the purposes specified.
2. Data Categorization :
Credentials |
Name, surname, TR ID number, date of birth, birthplace, marital status, Passport information, Nationality information, license plate information, Province, county, Volume, Serial No |
Contact Information |
Phone number, e-mail address, address, Kep address, etc. |
Financial Information |
Such as tax identification number, credit card information, Bank IBAN number, bank account number, billing information |
Physical Space Safety Information |
As recorded images with camera recordings |
Gender Data |
Gender |
Family Members and Relatives Information |
Family members and relatives information |
Audio and visual recordings |
Such as photo(s) taken at events and posted on the website |
Legal Process Information |
Such as information found in judicial correspondence with authorized public bodies |
Customer transaction information |
Such as Order Information, request information, Complaint Information |
Marketing Data |
Such as the data obtained by survey work |
Health Data |
Health related data such as Food alergy,Height ,Weight ,Body Mass Index Within the scope of pandemic measures, whether they have a chronic illness, Covid 19 or not and/orwhether they have contact or not |
Travel Data |
Data on whether they had travelled abroad in the last 14 days or not |
3. The Purposes For Which Personal Data Is Processed
Data Category |
Purpose Of Data Processing |
Legal Reason For Data Processing |
||
Physical Location Security Information |
|
Clearly stipulated in the law on the protection of personal data article 5 clause f paragraph 2a |
||
Credentials, Contact Information |
|
The law on the protection of personal data article 5 clause f paragraph 2 c; Establishment and Conclusion of the Contract
|
||
Credentials, Contact Information, Financial Information |
|
The law on the protection of personal data article 5 clause f paragraph 2 c; Establishment and Conclusion of the Contract |
||
Customer Transaction Information |
|
The law on the protection of personal data article 5 clause f paragraph 2 c; Establishment and Conclusion of the Contract |
||
Gender |
|
The law on the protection of personal data article 5 clause f paragraph 2 c; Establishment and Conclusion of the Contract |
||
Family Members and Relatives Information |
|
The law on the protection of personal data article 5 clause f paragraph 2 c; Establishment and Conclusion of the Contract |
||
Audio and visual recordings |
|
The law on the protection of personal data article 5 clause f paragraph 2 c; Establishment and Conclusion of the Contract |
||
Identity, Communication |
|
The Law on the Protection of Personal Data article 5 clause f paragraph 2ç ; Obligation to Fulfill Legal Liability |
||
Physical Location Security Information |
|
The Law on the Protection of Personal Data article 5 clause f paragraph 2ç ; Obligation to Fulfill Legal Liability |
||
Legal Process
|
|
The Law on the Protection of Personal Data article 5 clause f paragraph 2ç ; Obligation to Fulfill Legal Liability |
||
Family Members and Relatives Information, gender |
|
The Law on the Protection of Personal Data article 5 clause f paragraph 2ç ; Obligation to Fulfill Legal Liability |
||
Gender |
|
The law on the protection of personal data article 5 clause f paragraph 2f; Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned. |
||
Physical Location Security Information |
|
The Law on the Protection of Personal Data article 5 clause f paragraph 2f ; the necessity of processing data for the legitimate interests of the data principal
|
||
Audio and visual recordings |
|
The Law on the Protection of Personal Data article 5 clause f paragraph 2f ; the necessity of processing data for the legitimate interests of the data principal |
||
Physical Location Security Information |
|
The Law on the Protection of Personal Data article 5 clause f paragraph 2f ; the necessity of processing data for the legitimate interests of the data principal |
||
Travel Data |
|
The Law on the Protection of Personal Data article 5 clause 1 with your explicit consent, |
||
Healthcare
|
|
The Law on the Protection of Personal Data article 5 clause 1 with your explicit consent, |
||
Healthcare |
|
The Law on the Protection of Personal Data article 5 clause 1 with your explicit consent, |
||
Identity Data, Communication Data |
•Execution Of Advertising / Campaign / Promotion Processes |
The Law on the Protection of Personal Data article 5 clause 1 with your explicit consent, |
||
Identity Data, Communication Data, Marketing |
|
The Law on the Protection of Personal Data article 5 clause 1 with your explicit consent, |
4. To whom and for what purpose personal data may be transferred
Recipient Group |
Transfer Purpose |
Legal Reason For The Transfer |
Authorized public institutions and organizations |
|
The Law on the Protection of Personal Data article 5 clause f paragraph 2ç ; Obligation to Fulfill Legal Liability |
Business Partner (Banks, financial advisors) |
|
The law on the protection of personal data article 5 clause f paragraph 2 c; Establishment and Conclusion of the Contract |
Business partner (financial advisor) |
|
The Law on the Protection of Personal Data article 5 clause f paragraph 2ç ; Obligation to Fulfill Legal Liability |
Business Partner (Broker Insurance Company) |
|
The law on the protection of personal data article 5 clause f paragraph 2 c; Establishment and Conclusion of the Contract |
Supplier (e-mail service supplier) |
|
The Law on the Protection of Personal Data article 5 clause f paragraph 1f ; Explicit Consent |
Supplier (Car Rental Company , tour company, Transport Company ) |
|
The law on the protection of personal data article 5 clause f paragraph 2 c; Establishment and Conclusion of the Contract |
Supplier (Information Systems supplier company) |
|
The law on the protection of personal data article 5 clause f paragraph 2 c; Establishment and Conclusion of the Contract |
Shareholders |
|
The law on the protection of personal data article 5 clause f paragraph 2 c; Establishment and Conclusion of the Contract |
Supplier (Measurement and Evaluation Specialist) |
|
The Law on the Protection of Personal Data article 5 clause 1 Explicit Consent |
Authorized public institutions and organizations |
|
The Law on the Protection of Personal Data article 5 clause 1 Explicit Consent |
In accordance with the communiqué on the procedures and principles of application to the data officer, the person concerned, name, last name in the application, if the application is written signature, T.R. ID number (in case of foreign applicant, passport number), notification mainly residential or business address on the basis of the notification e-mail address, telephone number, and fax number on the topic of demand information should be available.
5. Methods Of Collecting Your Personal Data
Your personal data as set out above ; printed/electronic forms, contracts/agreements, E-Mail, reports, contacts, events, Wi-Fi ,security cameras, car license plate, partners, and face to face interviews depending on the method by means of physical or electronic form will be collected and processed within the purposes specified above, and is transmitted.
6. What are the rights of contacts to their personal data and how they can exercise those rights
-
By applying to us as the person concerned in accordance with the Law on the Protection of Personal Data article 11 you have the rights;
-
To learn whether personal data is processed or not,
-
To request information about personal data if it has been processed,
-
To learn the purpose of processing personal data and whether they are used conforming the purpose,
-
To know the third parties which personal data is transferred domestically or abroad,
-
If your personal data is incomplete or improperly processed, request that they be corrected and that the transaction in this context be notified to third parties that your personal data has been transferred,
-
In the event that the reasons for processing your personal data for consideration within the scope of the purpose, duration and constitutional principles are eliminated, you must request the deletion or destruction of your personal data and request that the transaction carried out in this context be notified to third parties to whom the personal data was transferred, even though it has been processed in accordance with,
-
To object the occurrence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,
-
To claim damages in the event of a corruption due to the processing of personal data in a way that violates the law.
-
By using the Application Form if you wish, your applications and requests regarding your personal data can be:
- By sending a petition with an original signature and a photocopy of identity to the address of Osmanlı Sokak No: 9 Taksim-Beyoğlu-Istanbul,
- By applying to our company's commercial center address, Osmanlı Sokak No: 9 Taksim-Beyoğlu-Istanbul, with a valid ID card.,
- By sending it to our registered e-mail address electronic signature and electronic signature istanbulturizmveotelcilikas@hs01.kep.tr ,
In accordance with the communiqué on the procedures and principles of application to the data officer, the person concerned, name, last name in the application, if the application is written signature, T.R. ID number (in case of foreign applicant, passport number), notification mainly residential or business address on the basis of the notification e-mail address, telephone number, and fax number on the topic of demand information should be available.
The person concerned must clearly and explicitly state their claims in the application, which includes explanations of their rights to exercise the above-mentioned rights. Information and documents regarding the application must be attached to the application.
Although the subject of the request must be related to applicant, if the applicant is acting on behalf of someone else, the applicant must be specially authorized in this regard and this authority must be documented (special power of attorney). In addition, the application must contain identity and address information and documents confirming the identity must be attached to the application.
Requests made by unauthorized third parties on behalf of someone else will not be taken into consideration.
7.How Long Will Your Requests Regarding Processing Your Personal Data Be Answered
Your requests regarding your personal data will be evaluated and answered within 30 days at the latest starting from the date they reach us. If your request is evaluated negatively, the reasons for the rejection are sent to the address you specified in the application via e-mail or mail.