SIFNE THERMAL HOTEL GENERAL LIGHTING TEXT ON THE PROTECTION OF PERSONAL DATA

This lighting text has been prepared by Çeştur Çeşme İmar Turizm Ticaret Ve Teknik Hizmetleri ve Liman İşletmeciliği Anonim Şirketi, as the data controller, within the scope of Article 10. of the Personal Data Protection Law No 6698.

  1. Identity of Data Controller

In accordance with the Law No. 6698 on the Protection of Personal Data (“Law No. 6698”), your personal data; As the data controller, it can be processed by Çeştur Çeşme İmar Turizm Ticaret Ve Teknik Hizmetleri Ve Liman İşletmeciliği Anonim Şirketi (“Şirket”) within the scope described below.

Web Address: www.cestur.com 

Web Address: www.sifnetermalhotel.com

Phone Number: +90 232 723 33 34

E-Mail: [email protected]

Address: Ilıca Neighbourhood 5076 Street No:4/F Çeşme İzmir

  1. Purposes of Processing Personal Data

Within the scope of Article 10 of the KVKK and Article 5 of the Communiqué, the main personal data obtained in accordance with the general principles specified in Article 4 of the KVKK and the processing conditions specified in Article 5, as well as the data categories and explanations are as follows:

 

ID Information:The identity information of the person concerned, the identity information of the accompanying guest/guests, name-surname, nationality, place and date of birth; TR ID, driver’s license and passport numbers (including the date and place of deliver of the passport)

 

Contact Information:Address, phone number, e-mail address

 

Financial Information:Mobile billing information, bank account information, payment card number and other payment information
Loyalty Program Memberships:Information on purchased products or services

 

Guest Review, Feedback and Complaint Data:Special preferences in accommodation, marketing and communication; reviews, opinions or complaints about brands and facilities
Transaction Security

 

Wi-fi Login Information
Health Information

 

Allergy Information
Physical Space Security

 

Camera recordings
Other:Information on reservations, travel history; Participation in contests, lotteries or marketing programs, information about the vehicles used for transportation to the facility; booked hotel, airline and rental car packages; groups with which it is connected to stay at the facilities, frequent flyer or Travel Partnership Program memberships and member numbers, information given in membership and account applications, Smoking Information, Vehicle Plate Information, etc.

 

 

These data can be processed for the following purposes:

  • Managing pre-stay reservation processes,
  • Segmentation by processing data related to reservation history, travel preferences and services received in order to manage marketing activities correctly,
  • Managing the reservations of our guests regarding the services they will make at the facility,
  • Completion of entrance and exit procedures to the facility,
  • To manage the Guest Loyalty Program,
  • Answering guests’ questions about the Loyalty Program, card scales, transition to the next card and similar issues,
  • Managing claims/complaints about our facilities and services received on review portals, complaint pages, social media channels,
  • Keeping the personal information data of the guests up to date and combining them with data from third-party sources for analytical purposes,
  • Conducting surveys with the aim of measuring the services provided,
  • Communicating with guests for marketing purposes in line with the communication permissions granted within the framework of other laws,
  • During your stay at the hotel; Making internal correspondence regarding the guests who behave outside the regulations, facilities and general etiquette rules, and preparing a list in line with this information,
  • Guests’ social media, blog, review portals, etc. recording the comments in the fields in the system in order to analyze the return of the service provided,
  • To carry out sales and marketing activities in order to provide a personalized holiday experience by processing the data of the services offered to the guests,
  • Ensuring physical space security,
  • Issuing e-invoice and e-archive invoices,
  • Execution of legal compliance processes,
  • Management of operations,
  • Fulfillment of fiscal and financial affairs,
  • Determining and fulfilling commercial and business strategies,
  • Depending on the service contract; fulfillment of service obligations,
  • Fulfillment of employer responsibilities,
  • Ensuring occupational safety, management, inspection and performance of the job,
  • Receiving and evaluating suggestions for improvement of business processes,
  • To inform about the changes that may occur in our terms of service,
  • Arranging all records and documents that will be the basis of the transaction in electronic (internet / mobile etc.) or physical environment,
  • Providing information to public officials on matters related to public safety upon request and in accordance with the legislation,
  • Fulfilling legal obligations and exercising the rights arising from the current legislation,
  • Fulfilling the legal obligation, if the relevant authority requests it within the scope of judicial and administrative investigations and if it is necessary to respond,
  • Execution of product policy,
  • Execution of marketing processes of products / services,
  • Foreign personnel work and residence permit procedures,
  • Providing information to authorized persons, institutions and organizations,
  • Execution of management activities,
  • Execution of storage and archiving activities.

 

  1. Method of Personal Data Collection and Legal Reason

Your personal data;

  • Information provided by you during the reservation process,
  • Various contracts you have signed with our company and e-mails, faxes and letters you have sent to our company,
  • Verbal statement of the data owner,
  • Scanning the website, social media, call center, e-mail, digital or printed questionnaire, printed form, forensic records,
  • Social networks that allow you to login to our websites during membership or login,
  • Contact forms on our websites or third-party websites that you fill in to contact us,
  • Cookies used for online applications and those who want to access these applications, our mobile applications,
  • Membership form that you fill in electronically or physically,
  • Faxes and letters that process data on behalf of our company or support our company at any stage that requires the operation of the company,
  • Our customer service channels, including our employees, digital marketing and call center,
  • Social media channels, Google etc. use of search engines,
  • Tenancy agreements and other agreements, campaigns, applications, forms, offers,
  • It is collected through the channels through which our company communicates with you.

This personal data; “It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract” in clause (c) of the second paragraph of Article 5 of the KVKK; It is processed on the basis of the legal grounds of “data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject” in subparagraph (f).

  1. Transfer of Personal Data

Your collected personal data; In line with the realization of the above-mentioned Objectives;

  • General Directorate of Security and other law enforcement agencies,
  • judicial authorities,
  • Your authorized legal representatives,
  • Service providers and consulting offices/companies (personal data collectors through devices, database and server service providers, site application usage monitoring service providers, e-mail server service providers, e-invoice and e-archive billing service providers, electronic message tool service providers, banks and electronic payment institutions),
  • To the banks with which we have agreements within the scope of payment services,
  • Third parties we consult, including lawyers, tax consultants and auditors we work with,
  • Our suppliers, whose services we benefit from or cooperate with,
  • It can be transferred to legally authorized public institutions and legally authorized private persons within the scope of its expressly stipulated in the laws and fulfillment of our legal obligations.

 

  1. Rights of the Relevant Person

The relevant persons have the following rights in accordance with Article 11 of the Law:

  • Learning whether personal data is processed or not,
  • If personal data has been processed, requesting information about it,
  • Learning the purpose of processing personal data and whether they are used in accordance with its purpose,
  • Knowing the third parties to whom personal data is transferred at home or abroad,
  • Requesting correction of personal data in case of incomplete or incorrect processing and requesting notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,
  • Requesting the deletion or destruction of personal data in the event that the reasons requiring its processing disappear, although it has been processed in accordance with the provisions of the KVKK and other relevant laws, and requesting the notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,
  • Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
  • To request the compensation of the damage in case of loss due to unlawful processing of personal data.

The person concerned may submit their requests regarding these rights to the Data Controller in accordance with the Communiqué on Application Procedures and Principles. In order to exercise your above-mentioned rights, you can personally deliver your request with the necessary information identifying your identity, send it through a notary public or other methods determined by the Personal Data Protection Board.

The requests of the person concerned will be evaluated and decided free of charge as soon as possible and ultimately within thirty (30) days at the latest. If the evaluation and decision-making process requires an additional cost, the fee in the price list determined by the Personal Data Protection Board will be taken as basis.

For detailed information, the Protection and Processing of Personal Data at www.cestur.com

You can review our policy.