PERSONAL DATA PROCESSING DISCLOSURE STATEMENT
Data Controller: AKFEN TURİZM YATIRIMLARI VE İŞLETMECİLİK ANONİM ŞİRKETİ
(“Company”)
(Address: Kazım Özalp Mahallesi, Koza Caddesi No:22, Çankaya / Ankara)
This disclosure statement has been prepared in accordance with Article 10 of the Law No. 6698 on the Protection of Personal Data (“Law”) in order to inform you about the processing of your personal data.
FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?
Article 5 of the Law regulates the conditions for processing personal data, and Article 6 regulates the conditions for processing special categories of personal data.
Accordingly, personal data that are not of special nature may be processed under the following conditions:
Explicit consent of the data subject
Explicitly stipulated in the laws
Where it is necessary to protect the life or physical integrity of the data subject or another person who is unable to express consent due to actual impossibility or whose consent is not legally valid
Processing is necessary for the establishment or performance of a contract
Processing is mandatory for the data controller to fulfill its legal obligations
The personal data has been made public by the data subject
Processing is mandatory for the establishment, exercise or protection of a right
Processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject
Special categories of personal data include race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, clothing, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, biometric and genetic data. The processing conditions for such data are regulated under Article 6 of the Law.
Special categories of personal data may be processed:
With the explicit consent of the data subject
For data other than health and sexual life, where processing is stipulated by law
For health and sexual life data, only for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, and planning and management of healthcare services and financing, by persons or authorized institutions under confidentiality obligations
PURPOSES AND LEGAL GROUNDS FOR PROCESSING PERSONAL DATA
Pursuant to Article 5 of the Law, personal data may be processed under the following legal grounds:
1. Performance of a Contract (KVKK Art. 5/2-c)
Our website does not accept reservations. Reservations made via telephone are processed for managing and completing reservation processes and providing post-reservation support services. In this context, identity, contact, and customer transaction data may be processed.
2. Legal Obligation (KVKK Art. 5/2-a, ç)
For fulfilling legal obligations, complying with retention obligations stipulated by legislation, responding to official requests, carrying out official correspondence, and responding to applications made by data subjects, identity, contact, customer transaction, and transaction security data may be processed.
3. Establishment, Exercise, or Protection of a Right (KVKK Art. 5/2-e)
For handling complaints and requests, and for keeping records for potential disputes within statutory limitation periods, identity, contact, customer transaction, and transaction security data may be processed.
4. Legitimate Interest (KVKK Art. 5/2-f)
Provided that fundamental rights and freedoms are not harmed, personal data may be processed for purposes such as:
Conducting commercial activities
Business planning and operational processes
Ensuring website and information security
Customer relationship management
Personalized marketing activities
Corporate communication activities
Offering products and services suitable to customer preferences
Sales and marketing activities
Ensuring corporate, legal, technical, and commercial security
Handling requests, complaints, and improvement processes
5. Explicit Consent (KVKK Art. 5/1)
With explicit consent, personal data may be processed for marketing, profiling, promotion, advertising, and campaign communications, and may be shared with group companies, business partners, suppliers, and authorized institutions.
PROCESSING OF PERSONAL DATA OF THIRD PARTIES
Personal data of third parties may be processed for the following purposes:
Planning and execution of press and media activities
Information security processes
IT infrastructure management
Event management
Financial and accounting operations
Legal compliance
Website management
Business operations planning and execution
Occupational health and safety
Business continuity
Transaction security
Corporate communication
Corporate governance
Physical premises security
Customer relations management
Customer communication updates
Handling complaints and requests
Fulfillment of financial obligations
Risk management
After-sales support
Sponsorship and donation processes
Contract management
Supply chain management
Strategic planning
Production and operational planning
Customer loyalty activities
Sales and marketing activities
Providing information to authorized institutions
HOW DO WE STORE YOUR PERSONAL DATA?
Your personal data are collected through websites, social media platforms, mobile applications, marketing activities, events, security cameras, customer forms, call centers, and company records, either verbally, in writing, or electronically.
Data are stored securely in electronic and physical environments, including secure servers, protected systems, restricted-access environments, and locked cabinets.
WITH WHOM DO WE SHARE YOUR PERSONAL DATA?
Personal data may be shared under the conditions specified above with:
Group companies
Business partners
Suppliers
Authorized public institutions and organizations
Legally authorized private entities
No personal data is transferred abroad.
FOR WHAT PURPOSES CAN YOUR PERSONAL DATA BE TRANSFERRED?
Personal data may be transferred for:
Providing products and services
Conducting operational and business processes
Marketing and promotional activities
Analyzing preferences and habits
Ensuring legal, physical, and commercial security
Fulfilling legal obligations
YOUR RIGHTS REGARDING YOUR PERSONAL DATA
Pursuant to Article 11 of the Law, you have the right to:
Learn whether your personal data is processed
Request information if your data has been processed
Learn the purpose of processing and whether it is used accordingly
Know the third parties to whom personal data is transferred domestically or abroad
Request correction of incomplete or incorrect data
Request deletion or destruction of personal data under legal conditions
Request notification of these actions to third parties
Object to outcomes resulting from automated processing
Request compensation for damages caused by unlawful processing
HOW CAN YOU EXERCISE YOUR RIGHTS?
You may submit your requests by:
Sending an email from your registered email address to turizm@hs03.kep.tr
Applying in person with a valid ID
Sending a signed written request to:
Kazım Özalp Mahallesi, Koza Caddesi No:22, Çankaya / AnkaraSending a digitally signed or mobile-signed email to turizm@hs03.kep.tr
Applications must include identity information and details of the request. Applications made on behalf of another person require a notarized power of attorney. Unauthorized applications will not be processed.
