Processing of Personal Data

Clarification Text On Processing Personal Data

SHİMALL TOURISM and HOTEL MANAGEMENT CONSTRUCTION TRADE and IND. CORP.

CLARIFICATION TEXT ON PROCESSING PERSONAL DATA

Personal Data Officer's

Title                              : SHİMALL TOURISM and HOTEL MANAGEMENT CONSTRUCTION TRADE and IND. CORP.

Adress                         : Mücahitler Mah. Mahmut Ersoy Cad. No: 6 27090 Şehitkamil Gaziantep Trade Registry No: Gaziantep – 46741

Central Registration System Number : 0769073783800019

 

As SHİMALL TOURISM and HOTEL MANAGEMENT CONSTRUCTION TRADE and IND. CORP. (SHİMALL HOTEL) we process your personal data within the scope of Personal Data Protection Law No. 6698("KVKK") and related legal regulations and in the capacity of personal data officer as described below. RELATED CLARIFICATION TEXT is also available at www.shimallhotel.com/en/kvkk.php

Our Company reserves the right to update this “Clarification Text on the Protection of Personal Data" at any time within the framework of amendments to the applicable official legislation.

 

SHİMALL TOURISM and HOTEL MANAGEMENT CONSTRUCTION TRADE and IND. CORP. According to Clarification Text on the Processing of Personal Data("Clarification Text") is given to our esteemed guests in accordance with the “Data Officer's Clarification Obligation in Article 10 of KVKK"; This Clarification Text has been arranged to inform you in the most transparent way about the identity of the data officer, the method of collecting your personal data and the legal reason, the purpose of this data, to whom and for what purpose that the data will be transferred, data processing time and about your rights listed in Article 11 of the KVKK. The explanations made for your “Personal Data” in the clarification text also include your “Sensitive Personal Data”

1. Method of Collecting Your Personal Data and Legal Reason :

Although your personal data may vary depending on your relationship with our Company; and can be collected orally or in writing or electronically by means of human resources, data processing unit, call center, etc. Your personal data can be processed and updated as long as your relationship with our Company continues and kept in both digital and physical environment. Your personal data may be processed and transmitted for the purposes of the second article below and within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law No. 6698.

1. Purposes of Processing Your Personal Data: Your collected personal data will be processed for the purposes as decribed below within the personal data processing conditions and purposes specified in Law No.6698 Article 5 and 6.

• To be able to carry out the necessary works by the relevant business units in order to benefit from the products and services of the Headquarters and units of our Company and/or the real and/or legal third party institutions and organizations that have relations with our Company and especially the Presidency of Tourism and Revenue Administration, saving these transactions to the system and in cases the necessary contracts are concluded with these individuals and institutions, the cases that can be entered into the contract,
• To provide life and property safety and legal, commercial and occupational health security,
•  Law No.4857 Labour Law, Law No.6102 Turkish Commercial Code, Law No. 6098 Turkish Code of Obligations, Law No. 6502 Consumer Protection Law, Law No.3308 Vocational Training Law, Law No.6331 Occupational Health and Safety Law, Law No.6698 Protection of Personal Data Law, Law No.213 Tax Procedure Law, Law No.5510 Social Security and General Health Insurance Law  -  Fulfilling the legal and regulatory requirements arising from mentioned laws and secondary regulations and taking necessary measures in this context,
• Carrying out supervision and/or regulation duties to be carried out by authorized public institutions and and professional organizations that acknowledged as public institutions,
• Fulfillment of requests for informations and documents requested by judicial bodies and/or administrative authorities,
• Keeping records of complaints, objections, requests, suggestions and satisfaction in our notification management system in order to serve our guests better,
• Recording of camera images at the location of our Company for security reasons and our obligations arising from the law,
• To list regarding the usage of the products and services proffered by our Company and all headquarters and units affiliated to our company, to report and make verification analysis work and produce statistical and scientifical information, accordingly improve our product and services, to increase satisfaction with our products and services and to make customizations regarding the user,
•   To able to contact you directly through the communication channels shared with our Company,
• Carrying out all Human Resources processes and policies of our Company,
• Protection of public order and health,
• To plan and manage the finance of all the services provided and invoicing,
• Fulfillment of participation in organizations requests like training, seminar etc..
• In scope of data security, taking all technical and administrative measures regarding to system and applications,

 

Your personal data will not be used for purposes other than those stated above without your express consent and will not be shared or transmitted with third parties except legal obligations and goverment agencies.

 

1. To whom and for what purpose your personal data can be transferred

 

Regarding the express consent of our customers or within the scope of Law No. 6698 on Protection of Personal Data(KVKK) and related legislation, limited to the purposes set out in Article 2 of this "Clarification Text", "Purposes of Processing of Your Personal Data", and processed in accordance with the "General Principles" set forth in Article 4 of the KVKK, the "Conditions of Processing of Personal Data" specified in Article 5 and the "Processing Conditions of Specially Qualified Personal Data" specified in Article 6, where necessary, in scope of personal data processing conditions and purposes which is described in KVK Law Article 8 and 9, may be transferred to the headquarters and/or units of our Company, to legally authorized real and/or legal third party institutions and organizations, to business partners, to subcontractors, to suppliers, to legally authorized real and/or legal third party institutions and organizations in domestic or abroad for cooperation due to carry out its products and services as contractual, for processing,

1. Data Processing Period:

Your personal data, limited to the purposes set out in Article 2 of this Clarification Text; it shall be processed in accordance with the data processing and statute of limitations specified in all other relevant laws and other legal regulations by our Company and its headquarters and units which are also bind to mentioned law. In addition, your personal data will be processed or shared with 3rd. parties in the matter mentioned in this clarification text. Your data may be stored for up to 10 years, taking into account the maximum periods stipulated by law. In case of changes in laws regarding data processing periods, new periods will be applied.

1. Processing of Private Sensitive Personal Data:

According to the KVK Law, biometrics and data related to race, ethnic origin, political thought, philosophical belief, religion, sect or other beliefs, disguise and dress, association, foundation or union membership, health, sexual life, criminal conviction and security measures and genetic data is personal data of Private Sensitive quality. Our Company takes the measures determined by the Personal Data Protection Board in a sufficient level for the processing of personal data of sensitive quality. In order to provide better service, our company will process the private data of the individuals only with the consent of the person concerned and only for the purpose of collection.

       6-   Rights of the Personal Data Holder, as enumerated in Article 11 of the KVKK: 

Without prejudice to conditions stipulated in Article 28 titled "Exceptions", by applying to our Company with the scope of Article 11 of the Law, you have the rights to;

1. Learn whether your personal data is processed or not
2. Request information if it has been processed
3. Learn the purpose of processing and whether it is used in accordance with this purpose,
4. Know the third parties who are transferred in Turkey or abroad,
5. Request correction if missing or incorrectly processed,
6. Request the deletion or destruction of your personal data in accordance with the provisions of Article 7 of the Law
7. Request that transactions be notified to third parties to whom the personal data have been transmitte, in accordance with paragraphs (e) and (f),
8. Object to the occurance of a result against you, as it is exclusively analyzed by automated systems,
9. Request that the damage be remedied, if you suffer damage due to unlawful processing,  

In case of a written request;

Data Owner may send a wet-ink signatured copy of an Application Form with a document that identifies you or personally or  to our Company's Human Resources Directorate personally send it to ‘Mücahitler Mah. Mahmut Ersoy Cad. No: 6 27090 Şehitkamil Gaziantep” address, or under Article 11 you may submit a notarized power of attorney showing that you are authorized to apply for the rights, or via notary public. via a notary public.

If requested electronically;

Data Owner may send the Data Owner Application Form to “Registered Electronic Mail (KEP) “[email protected]” by signing electronically as defined in Electronic Signature Law No. 5070  or with a mobile signature you may submit an application form which is available on the Company’s website www.shimallhotel.com/kvkk.php that you have previously informed to our Company. You may send them by e-mail or in case of a software or application developed by our Company for the purpose of application.  The requests you submit to our company will be replied in writing or electronically as soon as possible according to the nature of your request and within thirty days at least, in return for the transaction fee specified in Article 7 of the Communique on the Procedures and Principles of Application to the Data Officer.