Personel Data Protection Policy

DISCLOSURE STATEMENT PURSUANT TO LAW NO.6698 REGARDING PROTECTION OF PERSONAL DATA 

 

a)      Purpose

 

This disclosure statement explains how your personal data gathered and processed, what kind of data is collected, how these personal data used, what your rights are on your personal data which processed by our Company in the scope of Law on the Protection of Personal Data No. 6698 (“LPPD”) regarding to the services offered and presented to you by “Kılıçbey Turizm Isletmeleri Insaat Sanayi ve Ticaret Anonim Sirketi” (“Company”) as a Data Controller.

  1. Processed Personal Data

The scope of the personal data which you share with us upon your own consent includes, but not limited to your full name, date of birth, ID information, mobile number, e-mail, sex, address, profession, education, marital status, accommodation and expense details, social media accounts, shopping details and all transaction details.

Your personal data may vary depending on the service, product or business activity provided by our Company and it may be also collected automatic or non-automatic methods, written, verbal or electronically by means of offices, branches, agents, call centers, internet sites, social media circles, mobile applications etc. Your personal data will be processed and updated as long as you benefit from our Company’s products and services.

In addition, your personal data may be processed when you use our call center or internet site with the intention of using Company’s services or when you visit our Company or our internet site, and when you attend training, seminars or organizations organized by our Company.

Your personal data mentioned shall be processed as per to Articles 5 and 6 of the LPPD, in order to but not limited to; carry out necessary operational activities within our company to ensure that products and services provided by our company are offered to you; perform necessary operations with relevant business units and business associates to provide you with products and services suited to your consumption and purchase habits; ensure the rights of natural persons through carrying out human resources management by our Company; take necessary actions to make, implement, and execute commercial decisions by our Company; ensure the legal security of the natural persons our Company is associated with, and of our Company, arising from these associations and for similar purposes 

Furthermore, pursuant to Article 5 of the LPPD, your personal data shall be processed by our Company acting its capacity as the Data Controller without further seeking your express consent in the event that:

  • It is expressly permitted by any law;
  • It is necessary for the protection of life or bodily integrity of a person himself/herself, or of someone else, who is unable to express his/her consent due to actual impossibility or whose consent is not legally recognized.
  • It is necessary to process the personal data of parties of a contract, provided that the processing is directly related to the execution or performance of the contract;
  • It is necessary for compliance with a legal obligation which the data controller is subject to;
  • The relevant information is revealed to the public by the data subject herself/himself;
  • It is necessary for the institution, usage, or protection of a right;
  • It is necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed.
  1. Scope of Use and Transfer of Personal Data

Your personal data is collected in order to provide better services to you; to share the products and services offered by our Company; to ensure legal and commercial security of those who are in business relationship by us and our Company; to continuity of our Company policy by customizing these personal data according to your interests and needs.

Your personal data shall be transferred to business associates, suppliers, shareholders of our Company; legally authorized public bodies and natural person for the purposes of; customizing and recommending products and services provided by our Company according to your likes, usage habits and needs; ensuring legal and commercial security of our Company and persons in business relationship with our Company; enabling necessary operations carried out by our business units in order to make you benefit from products and services offered by our Company; ensuring to continuity of our Company policy. within the scope of personal data processing conditions and purposes pursuant to the Articles 8 and 9 of the LPPD 

  1. The Rights of the Personal Data Owners

According to Article 11 of the LPPD, personal data owners have a right to;

  • Learn whether her/his personal data is being processed;
  • Request information as to processing if her/his data have been processed,
  • Learn the purpose of processing personal data and whether processed data are used in accordance with its purpose,
  • Know the third parties to whom personal data are being transferred within the country or abroad,
  • Request rectification in case personal data are processed incompletely or inaccurately and request that the process carried out in this context to be notified to the third parties to whom the personal data had been transferred,
  • Pursuant to Article 7 of the LPPD, request the deletion or destruction of personal data in the event that the reasons for its processing are no longer present, despite having been processed in accordance with the provisions of the LPPD and other related laws, and request that the process carried out in this context to be notified to the third parties to whom the personal data had been transferred,
  • Object to the occurrence of a result to the detriment of the person himself/herself, by means of analyzing the processed data exclusively through automated systems,
  • Request compensation for the damages in case the person incurs damages due to unlawful processing of personal data.

In accordance with the article 13, paragraph 1 of the LPPD, you can submit your requests to our Company regarding the exercise of your aforementioned rights in written form or by means of any other methods determined by the Personal Data Protection Board. Because of the fact that the Personal Data Protection Board has not determined a method at this stage, you must submit your applications to our Company in written form, in pursuance of the LPPD. Within this framework, channels and methods through which you will submit your application in written form to our Company, within the scope of the Article 11 of the LPPD, are specified below:

In order to exercise your above-mentioned rights, you can submit your request to which includes your necessary identification information and your explanations regarding the specific right you request to exercise among the rights set forth in the Article 11 of the LPPD; by filling in the form and delivering a signed copy of the form to the “Basın Ekspres Yolu Yavuz Sultan Selim Cad.
No.1-3 Günesli, 34212 Istanbul, Turkey” address with your identity documents personally, via notary public, through other methods set out in the LPPD.

Applications made in within this scope will be finalized within the shortest possible time frame and in maximum of thirty (30) days. These applications are currently free of charge. However, if the transaction requires an extra cost, a fee may be charged at the rate specified by the Personal Data Protection Board.

  1. Duration, Deletion, Destruction and Anonymization of the Personal Data

Your personal data will be kept for the periods stipulated in the legislation.

According to Article 7/1 of the LPPD, in the event that the reasons for the processing of your personal data have been disappeared, personal data shall be deleted, destroyed or anonymized by the Data Controller himself or upon the request of the person concerned.

Personal data owners have the right to withdraw their direct consent upon processing and utilization of their personal data. This consent may be withdrawn by sending your request to info@wyndhamistanbuleurope.com address.

  1. Alteration on Protection of Personal Data Policy

Our Company always make an alteration on this Protection of Personal Data Policy document. These alterations become valid as soon as the new Protection of Personal Data Policy published on “wyndhamgrandistanbuleurope.com” website. You will be informed about the alterations on Protection of Personal Data Policy.

  1. Final Provisions

User(s) irrevocably agree, represent and undertake that they have read the Privacy/Personal Data Protection Policy above before they visit the web site; that they will comply with all the requirements listed above; that the contents of the web site as well as all our electronic media and computer records shall constitute conclusive evidence pursuant to Article 193 of the Code of Civil Procedures.

Pursuant to the Law No. 6698 Regarding Protection of Personal Data, I hereby give consent to your Company for collecting, recording, processing, storing, using my personal data within legal limits and in accordance with the above-stated principles, and transferring to/sharing my personal data with third parties for the same purposes.

KILICBEY TURIZM ISLETMELERI SAN. VE TIC. A.S. (“COMPANY”)

INFORMATION REQUEST FORM PURSUANT TO LAW NO. 6698 REGARDING

PROTECTION OF PERSONAL DATA 

OVERVIEW 

Personal data owners (hereinafter referred to as “Applicant”), who are described as the relevant person in the Law No. 6698 Regarding Protection of Personal Data (“LPPD”), are given the right to submit certain requests regarding the processing of personal data in the Article 11 of the LPPD.

According to the sub-article one of the Article 13 of the LPPD; applications made to our data controller Company regarding these rights must be delivered to us in written form or by other means determined by the Protection of Personal Data Board (“Board”). Within this framework, application made to our Company “in written form” can be delivered, with a printout of the form herein, by means of;

  • Personal application of the Applicant,
  • Notary public,
  • Return Receipt Requested

. 

Your applications that are delivered to us will be replied within thirty days starting from the date it was received by us, depending on the nature of the request, in pursuance of the sub-article 2 of the article 13 of the LPPD. Our replies will be delivered to you in written form or through electronic media, in accordance with the article 13 of the LPPD. 

  1. Applicant contact information: 
Name: 
Surname: 
Identification Number: 
Phone number: 
E-mail: 
Address:
B. Your relationship with our Company: (Customer, business partner, job applicant, former employee, third party company employee, shareholder, etc.) 

☐ Customer 

☐ Visitor ☐ Business partner

☐ Other:

Your contact in our company Unit:………………….……………………………………

Topic:……………………………………..…………..

☐ I am a former employee. I worked during

Years: …………………

Other: …………………

 ☐ I made a job application/shared my CV

Date: …………… 

☐ I am a third party company employee 

Company/Position: …………………

C. Applicant Request Details: 

Please state your request within the context of Law No. 6698 Regarding Protection of Personal Data (“LPPD”) in detail:

…………………..…………….……………………………….……………………………….………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………………..

Request No Request Topic Your Choice
1 I wish to know whether my personal data has been processed by your Company. [Article 11/1 (a) of the LPPD] □
2 If my personal data is being processed by your Company, I request information about these data processing activities. [Article 11/1 (b) of the LPPD] □
3 If my personal data is being processed by your Company, I wish to know the purpose of processing of these data and whether it is used in accordance with its purpose.  [Article 11/1 (c) of the LPPD] □
4 If my personal data has been transferred to third parties within the country or abroad, I wish to know the third parties to whom my personal data has been transferred. [Article 11/1 (ç) of the LPPD] □
5 I think my personal data are processed incompletely or inaccurately and I request rectification. Write the personal data you wish to be corrected in the “Your Choice” area and send documents which indicate correct and complementary information as attachments. (Copy of identity card, certificate of residence, etc.). [Article 11/1 (d) of the LPPD] □

Data to be corrected;
6 I think the reasons underlying the processing of my personal data are no longer present, despite having been processed in accordance with the law and other relevant provisions, and within this framework, I request my personal data to be; a) Deleted. b) Anonymized. [Article 11/1 (e) of the LPPD]  Check one box only;

a)□

b)□
7 I wish the correction of the data which is in the possession of the third parties to whom it was transferred to that I think is processed incompletely or inaccurately (Request No 5).  Write the personal data you wish to be corrected in the “Your Choice” area and send documents which indicate correct and complementary information as attachments. (Copy of identity card, certificate of residence, etc.). [Article 11/1 (f) of the LPPD] □

Data to be corrected;
8 I think the reasons underlying the processing of my personal data are no longer present, despite having been processed in accordance with the law and other relevant provisions (Request No 6), and within this framework, I request my personal data in the possession of the third parties to whom it was transferred to be; a) Deleted. b) Anonymized. [Article 11/1 (f) of the LPPD] Check one box only;

a)□

b)□
9 I think that my personal data which has been processed by your Company has been analyzed by exclusively automated systems and that a result to my detriment has occurred. I object to this result. Write the analysis result that you think is to your detriment in the “Your Choice” area and send documents supporting your objection as attachments. [Article 11/1 (g) of the LPPD] □

Data Generated by the Analysis;
10 I have incurred damages as a result of unlawful processing of my personal data. I request compensation for my damages. Write the issue subject to unlawfulness in the “Your Choice” area and send documents as attachments. (Court order, Board’s decision, Documents indicating the amount of pecuniary damages, etc.)  [Article 11/1 (ğ) of the LPPD] □

Issue Subject to Unlawfulness;

D. Select the method of delivery of our reply to you regarding your application:

☐ a) I want it to be delivered to my address. 

☐ b) I want it to be sent to my e-mail address.

☐ c) I want to receive it in person. 

 

Application form herein is issued in order to be able to respond to your related application correctly and within the legal period by determining your relationship with our Company, and wholly identifying your personal data processed by our Company, if it exists. Our Company reserves its right to demand additional documents and information (Copy of identification card or driver’s license etc.) for purposes of identification and authority detection in order to eliminate legal risks that may arise from unlawful and unjustified sharing of data and to ensure the security of your personal data in particular. In the event that information regarding your request that you are communicating through the form is not accurate or up-to-date or an unauthorized application is made, our Company cannot be held liable for such requests related to incorrect information or unauthorized applications 

Applicant (Personal Data Owner) 

Name, Surname: 

Application Date: 

Signature: