PERSONAL DATA PROTECTION AND PRIVACY POLICY

How to use and protect the information we obtain about you and the services you request while you visit this website and benefit from the services we provide through this site are subject to the conditions set forth in this “Privacy Policy”. By visiting this website and requesting to benefit from the services we offer through this website, you accept the terms set forth in this “Privacy Policy”.

 

PURPOSE OF PERSONAL DATA PROTECTION AND PROCESSING POLICY

Until today, KARTUĞ TURİZM İNŞAAT TAŞIMACILIK SAN. TRADE. Inc. (“Kartuğ Turizm”), due to the sensitivity of the work we deal with, the data received from our guests or guest candidates are kept confidential and never shared with third parties. Protection of personal data is the basic policy of our company. Even before there was any legal regulation, our companies and affiliates attached great importance to the privacy of personal data and adopted this as a working principle and gave their employees working instructions in line with this principle. As “Kartuğ Turizm”, we undertake to comply with all the responsibilities brought by the Law on the Protection of Personal Data. The principles of our companies regarding the protection of personal data also cover our subsidiaries.

 

SCOPE AND CHANGE OF PERSONAL DATA PROTECTION AND PROCESSING POLICY

This Policy, prepared by our company, has been prepared in accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”). The law has entered into force with all its provisions as of today. The data obtained from you with your consent or in accordance with other laws listed in the Law will be used to improve the quality of the services we provide, to improve the services offered to you and our quality policy. Again, some of the data we have is depersonalized and anonymized. These data are data used for statistical purposes and are not subject to Law enforcement and our Policy. “Kartuğ Turizm’s Personal Data Protection and Processing Policy”, our guests, guest candidates, It aims to protect the automatically obtained data of our employees, guests and employees of companies working in solution partnership with us, or other persons, and includes regulations regarding these. Our company has the right to change our policy and our Regulations, provided that they comply with the law and that personal data is better protected.

 

DATA PROCESSING PURPOSE

The collection and processing of personal data by “Kartuğ Turizm” will be carried out in line with the purposes specified in the clarification text. The data is collected and processed for the purpose of establishing the contract and providing better service to the guests.

 

BASIC RULES ON THE PROCESSING OF PERSONAL DATA

  1. a) Compliance with the law and the rules of honesty: “Kartuğ Turizm” questions the source of the data it collects or receives from other companies and attaches importance to obtaining them in accordance with the law and within the framework of honesty rules. In this context, it makes necessary warnings and notifications to third parties (agencies and other intermediary institutions) that sell the services offered by “Kartuğ Turizm” in order to protect personal data.
    b) Being accurate and up-to-date when necessary: ​​“Kartuğ Turizm” attaches importance to the fact that all data within the institution are correct, do not contain false information, and finally, if there is a change in personal data, they are updated if they are communicated to it.
    c) Processing for specific, clear and legitimate purposes: “Kartuğ Turizm” processes data only for the purposes it offers and for which it receives approval from individuals during the service. It does not process, use and make use of data other than for business purposes.
    d) Being connected, limited and measured for the purpose for which they are processed: “Kartuğ Turizm” only uses the data for the purpose for which it is processed and to the extent required by the service.
    e) Retention for the period stipulated in the relevant legislation or required for the purpose for which they are processed: “Kartuğ Turizm” keeps the contractual data within its body as long as the conflict periods of the Law and the requirements of the commercial and tax law. However, when these purposes cease to exist, it deletes or anonymizes the data. The data reaching “Kartuğ Turizm” is only processed into the system as necessary. Therefore, what data we collect is determined by the purpose. Unnecessary data is not collected. Other data transmitted to our company are transferred to company information systems in the same way. Redundant information is not recorded in the system, deleted or anonymized. These data can be used for statistical purposes.

 

 

                                       DELETING PERSONAL DATA

Personal data is deleted, destroyed or anonymized by our company, automatically or upon the request of the person concerned, when the periods required by law to be kept, the completion of the judicial processes or other requirements are eliminated.
As a rule, the data within the body of “Kartuğ Turizm” are processed as declared by the relevant persons. “Kartuğ Turizm” does not have to investigate the accuracy of the data declared by the guests or the people who come into contact with “Kartuğ Turizm”, and this is not done legally and due to our working principles. The declared data is considered correct. The principle of accuracy and timeliness of personal data has also been adopted by “Kartuğ Turizm”. It updates the personal data that our company has processed from the official documents it receives or upon the request of the person concerned. It takes the necessary measures for this.
The Company is obliged to keep your personal data accurate and up-to-date in accordance with the Law.
If your data is inaccurate or changed in any way, we ask you to update it by contacting us via the email you shared with the hotel.

Application e-mail address:
(If your e-mail address is not registered in our system, no response  will be given in accordance with the law . In this case, please fill out the application form on our website.)

PRIVACY AND DATA SECURITY

Personal data is confidential and “Kartuğ Turizm” also respects this confidentiality. Only authorized persons can access personal data within the company. All necessary technical and administrative measures are taken to protect the personal data collected by “Kartuğ Turizm”, to prevent it from falling into the hands of unauthorized persons and to prevent our guests and guest candidates from being victims. In this context, it is ensured that the software complies with the standards, that the third parties are carefully selected and that the data protection policy is complied with within the company.

 

GUEST, POSSIBLE GUEST AND BUSINESS AND SOLUTION PARTNERS DATA

As “Kartuğ Turizm”, we process your personal data as a data controller within the scope of the Personal Data Protection Law No. 6698 and other relevant legislation.
The categories and explanations of personal data to be processed in this context are as follows:

– Identity Information: Name-surname, name-surname of accompanying guest/guests, nationality, place and date of birth; TR ID, driver’s license and passport numbers (including the date and place of issue).
– Contact Information: Address, phone number, e-mail address.
– Financial Information: Mobile billing information, bank account information, payment card number and other payment information,
– Loyalty Program memberships, information about purchased products or services.
– Guest comments, feedback and complaints data: Special preferences in accommodation, marketing and communication; reviews, opinions or complaints about brands and facilities.

– Other: Information on reservations, travel history; participation in contests, lotteries or marketing programs, information on vehicles used to reach the facility; booked hotel, airline and rental car packages; groups to which it is affiliated to stay at the facilities, frequent flyer or Travel Partnership Program memberships and member numbers, information given in membership and account applications.

Collection and processing of data for the contractual relationship
If a contractual relationship is established with our guests and prospective guests, the collected personal data can be used without the consent of the guest. However, this use takes place in accordance with the purpose of the contract. The data is used to the extent of better execution of the contract and the requirements of the service and updated by contacting the guests when necessary. On the other hand, the data left by our guest candidates (prospective guests) to us are processed in order to provide them with an easier and higher quality service afterwards. If this data has not turned into a contractual relationship upon request, it will be deleted.

Business and Business Partners Data

”Kartuğ Turizm” adopts the principle of acting in accordance with the law while sharing data with both business and solution partners. Data is shared with business and solution partners with the commitment of data confidentiality and only as much as the service requires, and these parties are compelled to take measures to ensure data security.

Survey submission and the data processed with this form
Survey submissions are sent within the framework of the commercial electronic message sending condition ARTICLE 6 – (1) of the Law No. 6563 on the Regulation of Electronic Commerce.
Your valuable opinions will be processed in order to increase our existing service quality, to collect plans and insights regarding new services, and to enable facility officials to evaluate the services they provide from your perspective. Your information, limited only to the e-mail address, will be shared with …………..Software companies in order to send the survey.

In addition, our guests accept and undertake that they write their comments according to their own experience, that they have a sincere opinion about the hotel, that they have no personal or commercial ties to the facility, and that no material/moral incentive or payment is offered to write the review.

E-invoice & E-archive Invoice

Within the scope of this program; The guest is automatically registered in the system and an invoice is sent via e-mail to the facility. It is the guest’s responsibility to ensure that the e-mail address given at the entrance to the facility or updated by applying afterwards is correct and is the preferred e-mail address for this communication. If a reservation is made for another family member or persons using this e-mail address, the e-invoice of the relevant invoice will be sent to the e-mail owner’s address.
e-Invoice; Invoices prepared electronically, not printed on paper and forwarded to the buyer and/or seller by the servers. The Tax Procedure Law of the Republic of Turkey has been put into practice as of March 5, 2010, with the Communiqué of VUK numbered 397.
As per the VUK, e-Invoice contains all the information that should be included in an invoice, while the mutual invoice transmission between the buyer and the seller takes place electronically.
The e-Archive Invoice is an application that allows the invoice, which has to be prepared, preserved and presented in paper form in accordance with the Tax Procedure Law, to be prepared electronically in accordance with the conditions in the General Communiqué of the Tax Procedure Law no. All invoices in the e-Archive Invoice, except the invoices created for the taxpayers registered in the e-Invoice Application, are called e-Archive Invoice.

Advertising data processing

In accordance with the Law No. 6563 on the Regulation of Electronic Commerce and the Regulation on Commercial Electronic Messages, e-mails for advertising purposes are sent to our guests who have received prior approval. “Kartuğ Turizm” complies with the details of the approval determined in accordance with the legislation. Communication approval can be obtained in writing, in the physical environment or through any electronic communication. Some and/or all of the Name, Surname, Event, Agency, Loyalty card information, City, Country and Email information are shared with the service provider in accordance with the Law on the Protection of Personal Data No. 6698.

Personal data may be processed without obtaining separate approval for the purpose of expressly stating the processing in the relevant legislation or fulfilling a legal obligation determined by the legislation. The type and scope of data processing must be necessary for legally permitted data processing and must comply with relevant legal provisions.
In this context, the e-mail sending permission given to us by our guests during their stay in our facilities, in accordance with the Regulation No. 30998 published in the Official Gazette dated 4 January 2020, allows Service Providers to store and manage different types of message permissions such as call, message and e-mail, and the permissions given by the recipients. It will be shared with İYS, which is the national database system where users can view and remove permissions, complain about unauthorized submissions, the public can view the message complaints and the status of the permission subject to the complaint, serve over the website, text message number and call center, record all permissions with time stamp and store them securely. . If you wish, for more detailed information on the subject  https://iys.org.tr You can visit the IYS website.

 

Processing of special data

“Kartuğ Turizm” can only process data of special nature for the purpose for which it was collected, with the consent of individuals, in order to provide better services. Our facilities may request some personal data, including special quality personal data such as health data of you and your relatives, in accordance with the circular and legal regulations issued within the scope of Covid-19. This personal data can be shared with official authorities and health institutions when necessary.
According to the Law, data related to the race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, disguise and dress, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data is personal data of special nature. “Kartuğ Turizm” also takes adequate measures determined by the Board in the processing of special quality personal data. “Kartuğ Turizm” can only process data of special nature for the purpose for which it was collected, with the consent of individuals, in order to provide better services.

Purposes of Collection and Processing of Security Data in Facilities
As “Kartuğ Turizm”, which has the title of data controller within the scope of the law numbered 6698, your security camera images obtained due to your visit are collected in order to ensure the safety of both our company and you, and our company to provide you with safe service. Your personal data is not used for purposes other than those listed; The legitimate interest of the data controller regulated in Article 5/2 (f) of the KVKK is processed based on the legal reason. As a rule, your collected personal data is not shared with any third party or institution. However, it may be shared in order to meet the demands of legally authorized public institutions and organizations in order to fulfill the legal obligations set forth in article 5/2(ç) of the law. After the purpose of collection is over, your data is destroyed.
.

 

DOMESTIC AND EXTERNAL TRANSFER OF PERSONAL DATA

Personal data may be shared with business and solution partners and affiliates in order for “Kartuğ Turizm” to see the service.

”Kartuğ Turizm” will be able to transfer personal data to the following persons and institutions for certain purposes;
» To the business partners of “‘Kartuğ Turizm” limited to ensure the fulfillment of the purposes of the establishment of the
business partnership, ‘s suppliers,
» Solution partners of “Kartuğ Turizm”, limited to ensuring that the commercial activities of our company that require the participation of affiliates are carried out,

“Kartuğ Turizm” has the authority to transfer personal data within the scope of the conditions determined by the Board in the law, in accordance with the other conditions in the Law and subject to the approval of the person, within the country and abroad.

 

RIGHTS OF THE RELATED PERSON

”Kartuğ Turizm” accepts that, within the scope of the Law, the data subject has the right to obtain consent before the data is processed, and that it has the right to determine the fate of the data after the data is processed.

Regarding personal data, by applying to our related person announced on our website by “Kartuğ Turizm”;
a) Learning whether personal data is being processed,
b) Requesting information if personal data has been processed,
c) Learning the purpose of processing personal data and whether they are used in accordance with its purpose,
ç) Knowing third parties in the country or abroad to whom personal data is transferred,
d) Personal data Requesting correction of the data in case of incomplete or incorrect processing of the data,
e) Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7,
f) Requesting the notification of the transactions made in accordance with subparagraphs (d) and (e) to the third parties to whom the personal data has been transferred,
g) Objecting to the emergence of a result against the person by analyzing the processed data exclusively through automated systems
, However, individuals do not have a right to anonymized data within the Company. “Kartuğ Turizm” may share personal data with relevant institutions and organizations in order to exercise the legal powers of a judicial duty or state authority in accordance with the business and contractual relationship.

Personal data owners can submit their requests regarding the above-mentioned rights to the Company’s official website …………. They will be able to send the application form, which can be found at the address below, by filling in completely and signing it with wet signature, to the contact address specified below, by registered letter with return receipt and by sending it with photocopies of identity card (only the front side copy of the identity card). Your applications will be answered as soon as possible depending on the content of your application or within 30 days at the latest after it reaches our company. You must submit your applications by registered letter with return receipt requested. In addition, only the part of your application will be answered, and an application about your spouse, relative or friend will not be accepted. ”Kartuğ Turizm” may request other relevant information and documents from the applicants.

 

PRIVACY POLICY

The data of employees or other persons in “Kartuğ Turizm” is confidential. No one can use, copy, reproduce, transfer to others, use this data for any other purpose, except for business purposes, without contract or compliance with the law.

PROCESS SECURITY

All necessary technical and administrative measures are taken to protect the personal data collected by “Kartuğ Turizm”, to prevent it from falling into the hands of unauthorized persons and to prevent our guests and guest candidates from being victims. In this context, it is ensured that the software complies with the standards, that the third parties are carefully selected and that the data protection policy is complied with within the company. Safety measures are constantly being renewed and improved.

 

AUDIT

”Kartuğ Turizm” carries out the necessary internal and external audits regarding the protection of personal data.

NOTIFICATION OF VIOLATIONS

When “Kartuğ Turizm” is notified of any violation of personal data, it immediately takes action to remedy the violation. It minimizes the harm of the concerned and compensates the damage. When personal data is obtained by unauthorized persons, it immediately notifies the Personal Data Protection Board.

Regarding requests made in accordance with the Law on Protection of Personal Data

All applications will be processed if the form on the page is filled in and a copy of the ID is attached to it, and sent to the address on the form by registered letter with return receipt, as announced on the pages of …………….

Rights regarding personal data can only be exercised about personal data. Requests regarding the data of people other than the person who filled out the form and whose ID photocopy is attached will not be considered. Forms without an ID photocopy will not be considered. Even when data deletion requests are fulfilled, we inform you that we are obliged to share the data with the official authorities if requested by the official authorities.

Click for application form

 

VERBIS (DATA SPEAKER INFORMATION)

The Data Controller Information notified to the Personal Data Protection Authority by “Kartuğ Turizm” can be accessed via the following shortcuts.

 

CHANGES THAT CAN BE MADE IN THE PROTECTION OF PERSONAL DATA AND PRIVACY POLICY:

”Kartuğ Turizm” reserves the right to make changes on the statements on this page.
On the main page of the website, there is a link that provides access to the current “Personal Data Protection and Privacy Policy”.
The last time the policy was updated and the update number are indicated at the end of this text.
Any change to the policy will become effective upon posting of the amended statement on the site.
Using the site or any of our products and services following such changes indicates your acceptance of the then-current amended policy.
Policy update post date : 11.06.2022

 

COMMUNICATION

For questions about the confidentiality agreement, you can contact us using the contact information below.

KARTUĞ TURİZM OTELCİLİK FOOD TRANSPORTATION IND. TRADE. LTD. STI.

SARPINO MOUNTAIN HOTEL