Privacy Notice Regarding Personal Data Processed In The Accommodation Registration Form
Privacy Notice Regarding Personal Data Processed In The Accommodation Registration Form
Pursuant to the Turkish Personal Data Protection Law No. 6698 (“Law”), ŞAŞMAZ EMLAK KUYUM İNŞAAT TAAHHÜT GIDA TURİZM TİCARET LİMİTED ŞİRKET (hereinafter referred to as “SUNTHALİA HOTELS”) is defined as the data controller as it processes personal data relating to you. Pursuant to Article 10 of the Law, entitled “Data Controller’s Obligation to Inform”, data controllers are obliged to inform natural persons whose personal data they process about certain matters.
This Privacy Notice has been prepared by SUNTHALIA HOTELS both to ensure compliance with applicable legislation and to maintain transparency and accountability.
DEFINITIONS
Pursuant to the Turkish Personal Data Protection Law No. 6698:
• Obligation to Inform: The obligation of the data controller or the person authorized by the data controller, at the time personal data is obtained, to inform data subjects about the identity of the data controller, the purposes for which personal data will be processed, to whom and for what purposes the processed personal data may be transferred, the method and legal grounds for collecting personal data, and the other rights set forth in Article 11 of the Law;
• Data Subject: The natural person whose personal data is processed;
• Personal Data: Any information relating to an identified or identifiable natural person;
• Processing of Personal Data: Any operation performed on personal data, such as obtaining, recording, storing, retaining, altering, reorganizing, disclosing, transferring, acquiring, making available, classifying or preventing the use of personal data, whether wholly or partly by automated means or by non-automated means provided that the process forms part of a data recording system;
• Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.
• Data Subject: As our valued guest staying at our hotel, whose certain personal data is processed in the accommodation registration form due to your stay, you are defined as the data subject under the Law.
• Data Controller: SUNTHALIA HOTELS is the data controller responsible for determining the purposes and means of processing your personal data and for the establishment and management of the data recording system.
PERSONAL DATA PROCESSED ACCORDING TO PROCESSES, PURPOSES OF PROCESSING AND LEGAL GROUNDS
| PROCESS | DESCRIPTION / DETAILS |
|---|---|
| We Process the Following Personal Data: | Contact Information: Address, Mobile Phone Number, E-mail Address. Identity Information: First Name, Date of Birth, Identification Number, Surname, Nationality. Customer Transaction Information: Agency Information, Vehicle Registration Plate, Check-in/Check-out Date, Room Number, Voucher Number. Health Information: Allergy Information. |
| Our Processing Activities Regarding the Personal Data Specified Above, the Purposes of Such Activities and the Relevant Legal Grounds: | For the purpose of Conducting Customer Relationship Management Processes (obtaining information regarding the guest’s accommodation process and organizing the room to be allocated to the guest), personal data is processed pursuant to Article 5/2(c) of the Law: “Processing of personal data belonging to the parties to a contract is necessary, provided that it is directly related to the establishment or performance of the contract.” Health information is obtained pursuant to Article 6/3(d) of the Law: “Processing is necessary for the establishment, exercise or protection of a right.” For Conducting Storage and Archiving Activities (retaining the Accommodation Registration Form), personal data is retained pursuant to Article 5/2(e) of the Law: “Processing of data is necessary for the establishment, exercise or protection of a right.” For Conducting / Supervising Business Activities (conducting business activities through the Hotel Management Software), personal data is transferred pursuant to Article 5/2(f) of the Law: “Processing of data is necessary for the legitimate interests pursued by the data controller, provided that such processing does not violate the fundamental rights and freedoms of the data subject.” |
| How We Collect the Personal Data Specified Above: | Your personal data is collected by non-automated means through the completion of a document in paper form. |
| Circumstances in Which Your Personal Data Is Shared / Transferred to Third Parties: | Within the scope of Article 28/1 of the Law, your personal data may, where requested, be transferred to the relevant authorities without an obligation to inform you and without obtaining your explicit consent. In addition, in unforeseen circumstances, where expressly stipulated by law and upon request, your personal data may be transferred to public institutions specified by law (such as ministries and other administrative authorities), within the purposes and limitations prescribed by applicable legislation. Apart from our statutory obligations that do not require an obligation to inform or your explicit consent, pursuant to the reference made in Article 8 of the Law, for the purpose of Conducting / Supervising Business Activities (conducting business activities through the Hotel Management Software), your personal data is transferred, based on Article 5/2(f) of the Law, to the server of the hotel software program (PMS), whose data center is located in Türkiye. |
YOUR RIGHTS REGARDING YOUR PERSONAL DATA
Data subjects are required to submit their requests concerning their personal data primarily to the data controller. Pursuant to the Law, you may exercise the following rights:
a) To learn whether your personal data is being processed;
b) To request information if your personal data has been processed;
c) To learn the purpose of processing your personal data and whether it is being used in accordance with such purpose;
ç) To know the third parties in Türkiye or abroad to whom your personal data has been transferred;
d) To request the rectification of your personal data if it has been processed incompletely or inaccurately;
e) To request the deletion or destruction of your personal data where the reasons requiring its processing no longer exist;
f) To request that the operations carried out pursuant to paragraphs (d) and (e) be notified to third parties to whom your personal data has been transferred;
g) To object to any result arising against you as a result of the analysis of your processed personal data exclusively through automated systems;
ğ) To request compensation for damages if you suffer damage due to the unlawful processing of your personal data.
APPLICATION METHOD
You may submit your application:
• In writing to Çolaklı Mahallesi 2227 Sokak No:2 Manavgat/Antalya;
• To sasmaz.emlak@hs01.kep.tr using a secure electronic signature or mobile signature;
• If your e-mail address is registered in our systems, by sending an e-mail from the same registered e-mail address to info@sunthaliahotels.com.
Your application must include:
• Your name, surname and, if the application is submitted in writing, your signature;
• Your Turkish Republic identification number if you are a Turkish citizen; or, if you are a foreign national, your nationality, passport number or identification number, if applicable;
• Your residential or business address for notification purposes;
• Your e-mail address, telephone and fax number for notification purposes, if applicable;
• The subject matter of your request.
Any information and documents relating to your request, if available, must also be attached to your application.
SUNTHALIA HOTELS reserves the right to verify your identity.
For the procedural rules applicable to applications and further information, please refer to the “Communiqué on the Procedures and Principles of Application to the Data Controller” issued by the Turkish Personal Data Protection Authority.
