Processing of Personal Data and Clarification Text
INFORMATION ABOUT THE LAW ON THE PROTECTION OF PERSONAL DATA NUMBER 6698
The purpose of the legal regulation:
Article 1 of Law No. 6698 states, "The purpose of this Law is to protect the fundamental rights and freedoms of individuals, particularly the privacy of private life, in the processing of personal data, and to regulate the obligations of natural and legal persons who process personal data, and the procedures and principles to be followed."
Legal basis of disclosure:
Article 10 of Law No. 6698:
(1) During the acquisition of personal data, the data controller or the person authorized by him, to the relevant persons;
a) Identity of the data controller and its representative, if any,
b) For what purpose personal data will be processed,
c) To whom and for what purpose the processed personal data can be transferred,
ç) Method and legal reason for personal data collection,
d) He is obliged to provide information about his other rights listed in Article 11.
This disclosure is made in terms of legal obligation and transparency.
ÖZBEK TOURISM INDUSTRY AND TRADE INC. It keeps the system infrastructure and internet servers at the most reliable level in order to protect the confidentiality of the personal information it receives from its guests-customers.
What does the processing of personal data mean:
Article 2 of Law No. 6698 e. Processing of personal data: Obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, obtaining personal data in whole or in part by automatic or non-automatic means provided that it is a part of any data recording system. It is defined as any kind of operation performed on data such as making it accessible, classifying or preventing its use.
Principles considered in the processing of personal data:
Personal data may be processed with the express consent of the person concerned, in accordance with the law and honesty, for true and up-to-date, specific, clear and legitimate purposes, in connection with the purpose for which they are processed, limited and measured, provided that they are kept for the period required by the relevant legislation or for the purpose for which they are processed. .
Purpose of processing personal data:
We process the identity data of our guests and all persons who log in and out of our establishment on a daily basis, in order to fulfill our obligations in accordance with the legislation we are subject to, the contractual relationship we have established with our guests, the purposes of ensuring the safety of our guests, and similar guests, public and institutional interests.
We record the identity data of our employees in accordance with the labor and social security legislation.
To evaluate the identity data of our employee candidates and their job applications;
We process the data of visitors, suppliers, contractors and similar people with whom we have business relations for commercial necessity and to ensure the safety of our guests and our establishment.
Collection of personal data and legal reason:
As a necessity within the scope of obligations arising from the legislation,
To be decisive in legal disputes in accordance with the contract we have made with our guests,
Ensuring that our guests are informed about forgotten belongings and similar cases,
We record identity, address, telephone, payment information when necessary and other necessary information in order to provide our guests with all kinds of information about our establishment and to offer the requested products and services.
Sharing and transferring personal data abroad:
As stated in Article 8 of Law No. 6698, personal data cannot be transferred without the explicit consent of the person concerned. It can be shared in the form and conditions specified in the law in exceptional cases.
As stated in Article 9 of Law No. 6698, personal data cannot be transferred abroad without the explicit consent of the person concerned. In exceptional cases specified in the laws, it can be transferred abroad in the form and conditions specified in the law.
Data controller – Representative:
ÖZBEK TOURISM INDUSTRY AND TRADE INC. Within the scope of the Law No. 6698, it is the Data Controller as the data controller.
ÖZBEK TOURISM INDUSTRY AND TRADE INC. The Data Controller representative to be appointed by KVKK will be announced in the Data Controllers Registry when the legal infrastructure is provided in accordance with the 16th and related articles of the KVKK.
Sharing and transferring personal data abroad:
As stated in Article 8 of Law No. 6698, personal data cannot be transferred without the explicit consent of the person concerned. It can be shared in the form and conditions specified in the law in exceptional cases.
As stated in Article 9 of Law No. 6698, personal data cannot be transferred abroad without the explicit consent of the person concerned. In exceptional cases specified in the laws, it can be transferred abroad in the form and conditions specified in the law.
Rights of the person concerned:
Pursuant to Article 11 of Law No. 6698 (1) Everyone can apply to the data controller and
a) Learning whether personal data is processed,
b) Requesting information on personal data if it has been processed,
c) Learning the purpose of processing personal data and whether they are used in accordance with its purpose,
ç) To know the third parties to whom personal data is transferred in the country or abroad,
d) Requesting correction of personal data in case of incomplete or incorrect processing,
e) Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7,
f) To request that the transactions made pursuant to subparagraphs (d) and (e) be notified to third parties to whom personal data has been transferred,
g) Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
ğ) In case of loss due to unlawful processing of personal data, it has the right to demand the compensation of the damage. It includes the provision.
Application address:
Within the scope of KVKK Law No. 6698, your rights regarding your personal data, documents explaining your identity and your petition containing your request, can be sent to Göynük Mah Ahu-Ünal Aysal Cad No:43, 07994 Kemer / Antalya in writing or to ''www.kimeroshotels.com.''
Application to the data controller:
Pursuant to Article 11 of Law No. 6698:
(1) The data subject submits his requests regarding the implementation of this Law to the data controller in writing or by other methods determined by the Board.
(2) The data controller concludes the requests in the application free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, the fee in the tariff determined by the Board may be charged.
(3) The data controller accepts the request or rejects it by explaining its reason and notifies the relevant person in writing or electronically. In case the request in the application is accepted, the data controller fulfills its requirements. In case the application is caused by the fault of the data controller, the fee is returned to the relevant person.''
In cases where the application to the Data Controller is rejected, the answer is found to be insufficient, and no answer is given, a complaint can be made to the Personal Data Protection Board in Ankara within 30 days from the date of learning and in any case within 60 days from the date of application.
Storage of personal data:
Pursuant to Article 7 of Law No. 6698 and relevant legal regulations:
Your personal data can be stored for the periods required by legal obligations and for the purposes of processing. In the event that the obligations arising from the legal regulations and Contracts disappear, your personal data, the purpose of which is eliminated, is deleted or destroyed by the data controller ex officio or upon the request of the data subject. Other legal regulations on this subject are reserved.
