Patalya Turizm Otelcilik Ticaret A.Ş. (“Company”) takes security measures to ensure that all personal data belonging to all persons related to the Company are collected, stored and shared in accordance with the Personal Data Protection Law No. 6698. and to protect the confidentiality of personal data. Our aim is to inform transparently about the way personal data is collected, the purposes of processing, legal reasons, and rights in accordance with Article 10. of the Law on the Protection of Personal Data No. 6698.
In the capacity of Data Controller, we process, record, transfer, share and store your personal data as explained below and within the framework of official legislation.
Our company reserves the right to update this “Clarification Text on the Protection of Personal Data” at any time within the framework of the changes that can be made in the current official legislation.

B. PURPOSES OF PERSONAL DATA COLLECTION, PROCESSING AND PROCESSING:

Due to the said activities by our company, which operates in the fields specified in detail in the Company's Articles of Association; Your personal data is collected and processed verbally, in writing or electronically due to the regulations of other tourism related institutions and the contracts we have concluded. Your personal data will be used to provide services related to the activities of our company and to increase the quality of these services, to comply with information storage, reporting and information obligations. Your personal data will not be used for purposes other than the above-mentioned purposes without your explicit consent and will not be shared or transferred to third parties, except for legal obligations and official institutions / organizations.

Our company will only be able to share your personal data in question based on the expressed consent of the customers or in other cases stipulated in Article 5/f.2 of the Personal Data Protection Law (KVKK), especially the legislation we are subject to, in order to provide value-added services, opportunities and possibilities to our customers and to increase the quality of service. Our company may also share your personal data with our domestic or foreign subsidiaries and direct or indirect subsidiaries and joint ventures, or with public institutions or organizations authorized to request such data as required by a legal obligation, or with domestic or foreign institutions, suppliers, authorized correspondents, dealers, business partners with which we have a contract due to our activities.
Your personal data, though the services provided by our company may vary depending on the products or commercial activities, can be collected verbally, in writing or electronically through automatic or non-automatic methods, offices, branches, dealers, call center, website, social media channels, mobile applications and similar means. As long as you benefit from our company’s products and services, your personal data can be processed through generating and updating. In addition, with the intention of using the services of our Company;

• When you use our call center or website,
• When you visit our company, our website,
• Your personal data may be processed when you attend trainings, seminars or organizations organized by our company.

Your personal data obtained from you with your consent or due to other legal compliance reasons stated in the laws of the Republic of Turkey can be processed when;

a) The necessary action can be taken by our units in order to benefit you from the products and services offered by our company;
b) Suggesting the products and services offered by our company to you by customizing them according to your tastes, usage habits and needs;
c) Ensuring the legal and commercial security of our company and the people who have a business relationship with our company (Administrative operations for communication carried out by our company, ensuring the physical security and control of the locations of the Company, business partner/customer/supplier (authorized or employees) evaluation processes, legal compliance process, financial affairs etc.);
d) Improving the services offered by our company and improving our quality policy,
e) You are informed about and benefit from the general and special campaigns, promotions, promotions, discounts and similar advantages offered by our company;
f) To be able to process the data obtained together with your personal data, preferences, transactions and browsing time in the relevant channels when you log in with your user name and password in order to receive services from the channels offered by our company, and to provide you with the information and services you have requested;
g) To inform you about the information, events and services you will request from our company;
h) Determination and implementation of our company’s commercial and business strategies;
i) In case it is clearly stated in the legislation or if necessary, in order to fulfill a legal obligation determined by the legislation, within the personal data processing conditions and purposes specified in Articles 5. and 6. of the Personal Data Protection Law (KVKK), our Company and its related companies / organizations and other real persons and / or legal entities specified in article (C) below.

C. METHOD AND LEGAL REASON FOR COLLECTING PERSONAL DATA:

Your personal data is obtained in all kinds of verbal, written or electronic media, in line with the purposes specified in the above articles, in order to present our products and services as a Company within the determined legal framework, and in this context, for our Company to fulfill its contractual and legal responsibilities completely and accurately. Your personal data collected for this legal reason are processed, recorded, transferred, shared and stored for the purposes specified in article (B) of this text within the scope of the personal data processing conditions and purposes specified in Articles 5. and 6. of the Personal Data Protection Law (KVKK).

 D. PROCESSING OF SENSITIVE PRIVATE DATA:

According to the Personal Data Protection Law, information about the race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures are called sensitive private data. Our company takes adequate precautions in the processing of private data of special nature, determined by the Personal Data Protection Board. In order to provide better service, our company will process the private data of individuals only with the consent of the relevant person and only to serve the purpose of collection.

E. TO WHOM AND FOR WHAT PURPOSES THE PROCESSED PERSONAL DATA MAY BE TRANSFERRED:

Your collected personal data is sent to Patalya Turizm Otelcilik Ticaret A.Ş. to serve the purposes specified in Article (B), in addition to our shareholders, business partners, suppliers, legally authorized public institutions and private persons, within the framework of the personal data processing conditions and purposes specified in Articles 8. and 9. of the Personal Data Protection Law.

 F. TRANSFERRING PERSONAL DATA ABROAD:

Our company has the authority to transfer personal data abroad within the conditions determined by the Personal Data Protection Board in the Personal Data Protection Law, in accordance with the other conditions in the law and after obtaining the explicit consent of the person for this purpose.

G. RIGHTS OF THE PERSONAL DATA OWNER STATED IN ARTICLE 11 OF THE PERSONAL DATA PROTECTION LAW:

Within the scope of the Personal Data Protection Law (KVKK), we accept that the data Subject has the right to be informed and approved before the processing, recording, transfer, sharing and storage of his / her personal data, and that s/he has the right to determine the fate of the data after the data is processed, recorded, transferred, shared and stored. In this framework, if you submit the requests regarding their rights as personal data owners to our Company through the methods set out below in the “Clarification Text on the Processing of Personal Data”, our Company will conclude the request free of charge within thirty days at the latest, depending on the nature of the request.

1) In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller published by the Personal Data Protection Board, regarding your requests regarding your rights as personal data owners.

a) If your application will be answered in writing, up to ten pages will not be charged. A transaction fee of 1 Turkish Lira may be charged for each page over ten pages.

In this context, personal data owners can;
• Learn whether personal data is processed or not,
• If personal data has been processed, and request information about it,
• Learn the purpose of processing personal data and whether they are used in accordance with the purpose,
• Ask to know the third parties to whom personal data is transferred in the country or abroad,
• Request correction of personal data in case of incomplete or incorrect processing and requesting notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,
• Request the deletion, destruction, or anonymization of personal data within the framework of the conditions stipulated in Article 7. of the Personal Data Protection Law and requesting the notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,
• Object to the emergence of a result against the person herself / himself by analyzing the processed data through automatic systems,
• Have the right to demand the compensation of the damage in case of loss due to unlawful processing of personal data.
However, individuals do not have a right to anonymized data within the Company. Our company may share personal data with relevant institutions and organizations in order to exercise the legal powers of a judicial duty or state authority in accordance with the business and contractual relationship.

H. TIMES THAT YOUR PERSONAL DATA WILL BE PROCESSED:

In accordance with the Personal Data Protection Law (KVKK), when your personal data that has been processed for the purposes specified in this “Clarification Text on the Processing of Personal Data” ceases to be processed in accordance with Article 7/f.1.e of the Personal Data Protection Law (KVKK) and / or when the time-out periods for which we are required to process your data in accordance with the legislation expire, Your personal data will be deleted, destroyed or anonymized by us and then will continue to be used.

I. SITUATIONS WHERE OUR COMPANY CAN PROCESS YOUR PERSONAL DATA WITHOUT YOUR EXPRESS CONSENT, ACCORDING TO THE LAW:

Pursuant to Article 5. of the Personal Data Protection Law (KVKK), our Company may process your personal data, which it has received in accordance with the law, without your explicit consent, in the following cases:

Circumstances expressly stipulated in the laws;

• If you, as the data owner, are unable to express your consent due to actual impossibility, or in cases where your consent is not legally valid, it is necessary to process your personal data in order to protect your or someone else's life or physical integrity,
• If it is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract you have concluded with our company and its related companies/organizations, other real and/or legal persons specified in article (C),
• If it is compulsory for our company to fulfill a legal obligation,
• If your personal data has been made public by you,
• If data processing is mandatory for the establishment, exercise or protection of a right,
• If data processing is mandatory for the legitimate interests of our Company, provided that it does not harm your fundamental rights and freedoms.

J. TO MAKE A REQUEST UNDER THE PERSONAL DATA PROTECTION LAW (KVKK):

Pursuant to paragraph 1 of Article 13. of the Personal Data Protection Law (KVKK), you may submit your request regarding the exercise of your above-mentioned rights to our Company through the method(s) determined/to be determined by the Personal Data Protection Board. Alternatively, if you wish, you can submit your application in writing to our Company in accordance with the Personal Data Protection Law (KVKK). Law No. 6698. You can always contact us by sending an e-mail to info@patalyahotel.com.tr in order to exercise your rights set forth in article 11. Only the info@patalyahotel.com.tr e-mail address should be used for matters related to your personal data, and requests and notifications from channels other than this address will not be evaluated.

Rights regarding personal data can only be exercised about personal data. Requests for the data of people other than the person who filled out the form and whose official documents are attached to it will not be considered. Forms without official documents identifying your identity will not be considered. Even when data deletion requests are fulfilled, we inform you that we are obliged to share the data with the official authorities, if requested by the official authorities.

CLICK HERE FOR THE APPLICATION FORM.