PERSONAL DATA PROTECTION LAW NO. 6698 (PDPL)
CUSTOMER (MEMBER ) CLARIFICATION TEXT
This Clarification Text has been prepared by İstanbul Turizm ve Otelcilik A.Ş. ("Data Controller/Company") with the Mersis number 0481-0040-8810-0025 in the capacity of Data Controller, located at Osmanlı Sokak No:9 Taksim-Beyoğlu-İstanbul, in order to enlighten the final consumers who shop at https://zeyrekcinilihamam.com/tr within the scope of the Law No. 6698 on the Protection of Personal Data (KVKK) and other relevant legislation.
- METHOD OF COLLECTING PERSONAL DATA
In the capacity of Data Controller, our Company obtains personal data digitally from real persons who purchase products and services through our Company's website https://zeyrekcinilihamam.com/tr. These personal data obtained are processed partially or completely by automatic means within the scope specified in this Clarification Text or by non-automatic methods provided that they are part of the data recording system.
- PURPOSES AND LEGAL REASON FOR PROCESSING PERSONAL DATA
Processing is defined in Article 3 of the PDPL as the processes of recording, storing, preserving, changing, reorganizing, disclosing, transferring, taking over, making available and classifying personal data. Your personal data obtained is processed by our Company for the following purposes and legal reasons.
|
Legal Reason |
Data Category |
Personal Data |
Purpose of Processing |
|
PDPL 5/2.c - It is directly related to the establishment or execution of a contract |
Contact Data |
Address, E-Mail Address, Phone Number |
Execution of Communication Activities, Execution of Goods Service /Sales Activities |
|
PDPL 5/2.c - It is directly related to the establishment or execution of a contract |
Identity Data |
Name-Surname, TR ID Number/PASSPORT NO |
Execution of Finance and Accounting Affairs, Execution of Goods Service /Sales Activities, Execution of Contract Processes
|
|
PDPL 5/2.c - It is directly related to the establishment or execution of a contract |
Finance Data |
Payment information |
Execution of Finance and Accounting Affairs ,Execution of Contract Processes |
|
PDPL 5/2.ç- It is mandatory for the data controller to fulfill its legal obligation. |
Contact Data |
Address, E-Mail Address, Phone Number |
Providing information to Authorized Persons |
|
PDPL 5/2.ç- It is mandatory for the data controller to fulfill its legal obligation. |
Finance Data
|
Payment information |
Providing information to Authorized Persons |
|
PDPL 5/2.ç- It is mandatory for the data controller to fulfill its legal obligation. |
Identity Data |
Name-Surname, TR ID Number/PASSPORT NO |
Providing information to Authorized Persons |
|
PDPL 5/2.e - Data processing is mandatory for the establishment, exercise or protection of a right. |
Contact Data |
Address, E-Mail Address, Phone Number |
Follow-up and Execution of Legal Affairs |
|
PDPL 5/2.e - Data processing is mandatory for the establishment, exercise or protection of a right. |
Identity Data |
Name-Surname, TR ID Number/PASSPORT NO |
Follow-up and Execution of Legal Affairs |
|
PDPL 5/2.e - Data processing is mandatory for the establishment, exercise or protection of a right. |
Finance Data |
Payment information |
Follow-up and Execution of Legal Affairs |
C. TO WHOM AND FOR WHAT PURPOSES PERSONAL DATA MAY BE TRANSFERRED
Our Company pays attention to process your personal data in accordance with the principles of "need to know" and "need to use", by ensuring the necessary data minimization and taking the necessary technical and administrative security measures. Your personal data will be processed within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the PDPL, but will be transferred to the specified 3rd Parties in the following cases.
|
Buyer / Buyer Groups |
Reason for Transfer |
Transferred Data |
|
Judicial and Administrative Jurisdictions, Authorized Lawyers |
Monitoring and Execution of Legal Affairs |
Contact Data (Address, E-Mail Address, Phone Number), Identity Data (Name-Surname, TR ID Number/Passport Number) |
|
Contracted Cargo company |
Execution of Goods Service /Sales Activities |
Contact Data (Address, Phone Number), Identity Data (Name-Surname |
|
Payment Institution |
Execution of Goods Service /Sales Activities |
Finance Data |
|
Authorized Persons, Public Institutions and Organizations, Judicial and Administrative Authorities |
Providing information to Authorized Persons, |
Contact Data (Address, E-Mail Address, Phone Number), Identity Data (Name-Surname, TR ID Number/Passport Number), Finance Data |
D. RIGHTS OF THE RELATED PERSON and METHOD OF EXERCISING THEIR RIGHTS
Within the scope of Article 11 of the PDPL No. 6698, everyone has the right to apply to our Company in the following matters in the capacity of data controller:
(1) Everyone has the following rights by applying to the data controller,
a) To learn whether personal data is being processed,
b) To request information if personal data has been processed,
c) To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
ç) To know the third parties to whom personal data are transferred domestically or abroad,
d) To request correction of personal data in case of incomplete or incorrect processing,
e) To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of Law No. 6698,
f) To request notification of the transactions made pursuant to sub-paragraphs (d) and (e) to third parties to whom personal data are transferred,
g) To object to the occurence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,
ğ) To demand compensation for the damage, in case of damage due to unlawful processing of personal data.
- In writing,
- With secure electronic signature,
- With the Registered Electronic Mail (REM) address,
- With mobile signature,
- By using the e-mail address registered in our Company's system as the data controller.
The following points must be included in the application:
- Name, Surname and if the application is in writing, signature,
- TR ID number for citizens of the Republic of Türkiye, nationality, passport number or ID number, if any, for foreigners,
- Residential or workplace address for notification,
- Electronic mail address, telephone number for notification, if any,
- Subject of the request.
Information and documents related to the subject are attached to the application if available. Depending on the nature of the request, your applications will be finalized free of charge as soon as possible and within thirty days at the latest, but if the transaction requires an additional cost, you may be charged a fee according to the tariff to be determined by the Personal Data Protection Board.
Pursuant to Article 4 titled "Right to Apply" of the Communiqué on the Procedures and Principles of Application to the Data Controller, natural persons whose personal data are processed have the right to apply to the data controller. Data subjects may exercise this right by making their applications in Turkish.
Contact Email Address : kvkk@zeyrekcinilihamam.com
Rem Address : istanbulturizmveotelcilikas@hs01.kep.tr
FOLLOW US