Protection of Personal Data
GÜLÜMSERHATUN SITE YÖNETİMİ and KÜTAHYA TERMAL ÖZEL SAĞLIK HİZMETLERİ
TURİZM TİCARET VE SANAYİ ANONİM ŞİRKETİ, in accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”), with this “Information” letter prepared by us as the Data Controller, within the framework of Article 10 titled “Information Obligation of the Data Controller” and Article 11 titled “Rights of the Relevant Person” in the KVKK; We would like to provide information regarding the purpose for which your personal data will be processed, to whom and for what purpose your processed personal data may be transferred, the method and legal reason for collecting your personal data, and your other rights listed in Article 11 of the KVKK: As the Data Controller, we process, record, transfer, share and store your personal data as explained below and within the limits stipulated by official legislation.
Our company reserves the right to update this “Information Text on the Protection of Personal Data” at any time within the framework of changes that may be made to the current official legislation.
B. COLLECTION, PROCESSING AND PURPOSES OF PROCESSING PERSONAL DATA:
Your verbal, written or electronic personal data is collected and processed by our company, which operates in the areas specified in detail in the Company's Articles of Association, due to the regulations of the Tourism and Revenue Administration and other relevant institutions and the contracts we have concluded. This personal data will be used to provide services related to the fields of activity of our company and to increase the quality of these services, to carry out our company's sales, marketing and other activities, and to comply with information storage, reporting and information obligations. In addition, your personal data may be used within the scope of studies such as CRM (Customer Relations Management) applications to be carried out for sales and marketing activities and to increase the quality of the service we provide to you. Your personal data will not be used for purposes other than those specified above without your explicit consent, and will not be shared or transferred to third parties except for legal obligations and official institutions/organizations. Our Company may only share your personal data in question with our domestic or foreign subsidiaries and direct or indirect affiliated companies and joint ventures or public institutions or organizations authorized to request such data due to a legal obligation, and with institutions, suppliers, authorized dealers/resellers/business partners with whom we have agreements due to our activities, provided that sufficient measures are taken, in accordance with the explicit consent of the customers or in other cases stipulated in Article 5/f.2 of the KVKK, primarily the legislation we are subject to, in order to provide value-added services, opportunities and facilities to you, our customers, and to increase the quality of service.
Your personal data may vary depending on the services, products or commercial activities provided by our Company; however, it may be collected verbally, in writing or electronically through automatic or non-automatic methods, offices, branches, dealers, call center, website, social media channels, mobile applications and similar tools. As long as you benefit from our Company's products and services, your personal data may be processed by creating and updating them.
In addition, with the intention of using our Company's services;
When you use our call center or website,
When you visit our Company, website or social media channels/media,
When you participate in training, seminars or organizations organized by our Company, your personal data may be processed. Your personal data obtained from you with your consent or due to other legal compliance reasons stated in the laws of the Republic of Turkey; (i) In order for our business units to carry out the necessary work to make you benefit from the products and services offered by our Company; (ii) To customize the products and services offered by our Company according to your tastes, usage habits and needs and to recommend them to you; (iii) To ensure the legal and commercial security of our Company and the people who have a business relationship with our Company (administrative operations for communication carried out by our Company, ensuring the physical security and control of the Company's locations, business partner/customer/supplier (authorized persons or employees) evaluation processes, legal compliance process, financial affairs etc.); (iv) To improve the quality of the services offered by our Company and to develop our quality policy, (v) To inform you and make you benefit from the general and special campaigns, promotions, advertisements, discounts and similar advantages offered by our Company; (vi) To process the data obtained together with your personal data, preferences, transactions and browsing time in the relevant channels when you log in with your user name and password in order to receive services from the channels offered by our Company in order to provide you with the information and services you have requested; (vii) To be able to make notifications (renewal, expiration, etc.) regarding all kinds of loyalty cards issued and/or to be issued by our Company and its affiliated companies/organizations and website memberships of our Company and its affiliated companies/organizations, to inform you about all kinds of communication that may be established with you, new services and products to be offered and changes, innovations and similar issues in personal data policies and membership conditions; (viii) To inform you about the information, events and services that you will request from our Company; (ix) To determine and implement our Company's commercial and business strategies; (x) To ensure the execution of our Company's human resources policies and; (xi) In case it is clearly stated in the legislation or if necessary, to fulfill a legal obligation determined by the legislation, it may be processed by our Company and its affiliated companies/organizations and other real and/or legal persons specified in Article (C) below, within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Personal Data Protection Law.
C. METHOD AND LEGAL REASON FOR COLLECTING PERSONAL DATA:
Your personal data is obtained in all kinds of verbal, written or electronic media, in line with the purposes specified in the above articles, in order to provide our products and services as a Company within the determined legal framework and to fulfill our Company's responsibilities arising from the contract and the law completely and correctly. Your personal data collected for this legal reason is processed, recorded, transferred, shared and stored within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Personal Data Protection Law, for the purposes specified in Article (B) of this text.
D. PROCESSING OF SPECIAL DATA:
According to the Personal Data Protection Law, data regarding the race, ethnicity, political opinion, philosophical belief, religion, sect or other belief, appearance and dress, association, foundation or union membership, health, sexual life, criminal conviction and security measures of individuals, as well as biometric and genetic data are special personal data. Our company also takes the measures determined by the Personal Data Protection Board at an adequate level in the processing of special personal data. In order to provide better service, our company will process special data of individuals only with the consent of the relevant person and only to serve the purpose of collection.
E. TO WHOM AND FOR WHAT PURPOSE CAN THE PROCESSED PERSONAL DATA BE TRANSFERRED:
Your collected personal data may be transferred to Gülümserhatun site management and Kütahya thermal private health services tourism tic and san a. as well as our shareholders, business partners, suppliers, legally authorized public institutions and private persons in order to serve the purposes specified in Article (B), within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Personal Data Protection Law.
F. TRANSFER OF PERSONAL DATA ABROAD:
Our company has the authority to transfer personal data abroad within the conditions determined by the Personal Data Protection Board in the Personal Data Protection Law, in accordance with other conditions in the law and after obtaining the express consent of the person for this purpose.
G. RIGHTS OF THE PERSONAL DATA OWNER STATED IN ARTICLE 11 OF THE PDPL:
Within the scope of the PDPL, we accept that the relevant person has the right to be informed and to obtain approval before the processing, recording, transfer, sharing and storage of his/her personal data, and that he/she has the right to determine the fate of his/her data after the processing, recording, transfer, sharing and storage of the data. Within this framework, if you submit your requests regarding your rights as personal data owners to our Company through the methods set forth below in this “Information Text Regarding the Processing of Personal Data”, our Company will finalize the request free of charge within thirty days at the latest, depending on the nature of the request.
a) In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller published by the Personal Data Protection Board, regarding your requests regarding your rights as personal data owners,
If your application will be answered in writing, no fee will be charged for up to ten pages. A processing fee of 1 Turkish Lira may be charged for each page over ten pages.
If the response to the application is given on a recording medium such as a CD or flash memory, the fee that may be requested by our Company as the data controller cannot exceed the cost of the recording medium.
In this context, personal data owners;
To learn whether personal data is processed,
To request information about personal data if it has been processed,
To learn the purpose of processing personal data and whether it is used in accordance with its purpose,
To know the third parties to whom personal data is transferred domestically or abroad,
To request correction of personal data if it is processed incompletely or incorrectly and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
To request deletion, destruction or anonymization of personal data within the framework of the conditions stipulated in Article 7 of the Personal Data Protection Law and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
To object to the emergence of a result against the person by exclusively analyzing the processed data through automated systems,
To request compensation for the damages in case of damages due to the processing of personal data in violation of the law,
b) The person has the right. However, individuals do not have any right regarding anonymized data within the Company. Our company may share personal data with relevant institutions and organizations in accordance with the business and contractual relationship, for the purpose of a judicial duty or state authority exercising its legal powers.
H. PERIOD FOR WHICH YOUR PERSONAL DATA WILL BE PROCESSED:
In accordance with the PDP Law, your personal data processed for the purposes specified in this “Information Text on the Processing of Personal Data” will be deleted, destroyed or anonymized and will continue to be used by us when the purpose requiring processing is eliminated according to Article 7/f.1 of the PDP Law and/or when the limitation periods required by us to process your data in accordance with the legislation expire.
I. CASES WHERE OUR COMPANY MAY PROCESS YOUR PERSONAL DATA WITHOUT YOUR EXPRESS CONSENT AS REQUIRED BY LAW:
According to Article 5 of the KVKK, our Company may process your personal data, which it has received in accordance with the law and specified above, without your explicit consent in the following cases:
In cases where it is explicitly provided for in the laws;
If you are unable to express your consent as a data owner due to a de facto impossibility or
if your consent is not legally valid, the processing of your personal data is mandatory for the protection of your life or physical integrity or that of another person,
If it is directly related to the establishment or performance of a contract you have made with our Company and its affiliated companies/organizations, other real and/or legal persons specified in Article (C), the processing of personal data belonging to the parties to the contract is necessary,
If it is mandatory for our Company to fulfill a legal obligation,
If your personal data has been made public by you,
If data processing is mandatory for the establishment, exercise or protection of a right,
If data processing is mandatory for the legitimate interests of our Company, provided that it does not harm your fundamental rights and freedoms.
J. TO MAKE A REQUEST IN ACCORDANCE WITH THE PERSONAL DATA PROTECTION LAW:
In accordance with Article 13, paragraph 1 of the PDP Law, you may submit your request to exercise your rights specified above to our Company through the method(s) determined/to be determined by the Personal Data Protection Board. Alternatively, if you wish, you may submit your application in writing to our Company in accordance with the PDP Law. You may always contact us by sending an e-mail to KVKK@kütahyatermal.com to exercise these rights stipulated in Article 11 of Law No. 6698. Only the e-mail address kvkk@kutahya klima.com.tr must be used for matters related to your personal data, and requests and notifications received from channels other than this address will not be taken into consideration. Rights regarding personal data may only be exercised regarding the data belonging to individuals. Requests for data from persons other than the person who filled out the form and has official documents proving your identity attached to them will not be taken into consideration. Forms without official documents proving your identity will not be taken into consideration.