: E-Commercial Message Clarification Text

PERSONAL DATA PROTECTION LAW NO. 6698 (PDPL)

E -COMMERCIAL MESSAGE CLARIFICATION TEXT

This Clarification Text has been prepared in order to fulfill the obligation to inform within the scope of the Personal Data Protection Law No. 6698 (KVKK) and other relevant legislation in order to be presented to persons who accept to receive e-commercial messages from İstanbul Turizm ve Otelcilik A.Ş. with the Mersis number 0481-0040-8810-0025 in the capacity of Data Controller located at Osmanlı Sokak No:9 Taksim-Beyoğlu-İstanbul

METHOD OF COLLECTING PERSONAL DATA

Our company obtains e-commercial message approval digitally by providing information verbally and in writing. The personal data obtained are processed partially or completely by automatic means within the scope specified in this Clarification Text or by non-automatic methods provided that they are part of the data recording system

PURPOSES AND LEGAL REASON FOR PROCESSING PERSONAL DATA

Processing is defined in Article 3 of the PDPL as the processes of recording, storing, preserving, changing, reorganizing, disclosing, transferring, taking over, making available and classifying personal data. Your personal data obtained is processed by our Company for the following purposes and legal reasons.

C. TO WHOM AND FOR WHAT PURPOSES PERSONAL DATA MAY BE TRANSFERRED

Our Company pays attention to process your personal data in accordance with the principles of "need to know" and "need to use", by ensuring the necessary data minimization and taking the necessary technical and administrative security measures. Your personal data will be processed within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the PDPL, but will be transferred to the specified 3rd Parties in the following cases.

D. RIGHTS OF THE RELATED PERSON and METHOD OF EXERCISING THEIR RIGHTS

Within the scope of Article 11 of the PDPL No. 6698, everyone has the right to apply to our Company in the following matters in the capacity of data controller:

(1) Everyone has the following rights by applying to the data controller,

a) To learn whether personal data is being processed,

b) To request information if personal data has been processed,

c) To learn the purpose of processing personal data and whether they are used in accordance with their purpose,

ç) To know the third parties to whom personal data are transferred domestically or abroad,

d) To request correction of personal data in case of incomplete or incorrect processing,

e) To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of Law No. 6698,

f) To request notification of the transactions made pursuant to sub-paragraphs (d) and (e) to third parties to whom personal data are transferred,

g) To object to the occurence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,

ğ) To demand compensation for the damage, in case of damage due to unlawful processing of personal data.

Applications for the rights listed above can be made by the following methods in accordance with the relevant legislation:

In writing,
With secure electronic signature,
With the Registered Electronic Mail (REM) address,
With mobile signature,
By using the e-mail address registered in our Company's system as the data controller.

The following points must be included in the application:

Name, Surname and if the application is in writing, signature,
TR ID number for citizens of the Republic of Türkiye, nationality, passport number or ID number, if any, for foreigners,
Residential or workplace address for notification,
Electronic mail address, telephone for notification, if any,
Subject of the request.

Information and documents related to the subject are attached to the application if available. Depending on the nature of the request, your applications will be finalized free of charge as soon as possible and within thirty days at the latest, but if the transaction requires an additional cost, you may be charged a fee according to the tariff to be determined by the Personal Data Protection Board.

Pursuant to Article 4 titled "Right to Apply" of the Communiqué on the Procedures and Principles of Application to the Data Controller, natural persons whose personal data are processed have the right to apply to the data controller. Data subjects may exercise this right by making their applications in Turkish.

Contact Email Address : kvkk@zeyrekcinilihamam.com

Rem Address : istanbulturizmveotelcilikas@hs01.kep.tr