PROCESSING OF YOUR PERSONAL DATA

GENERAL INFORMATION

In accordance with the Personal Data Protection Law No. 6698 (‘KVKK’) and related legislation, your personal data may be processed by our company, OZERA TURİZM İŞLETMECİLİK VE TİCARET A.Ş. / SOLİVİA HOTEL, and authorised data processors, in verbal, written or electronic environments, for the purposes and services specified below, within the legal framework defined for the provision of our services and to fulfil our legal obligations, in compliance with the relevant laws and regulations. as the data controller, by our company OZERA TURİZM İŞLETMECİLİK VE TİCARET A.Ş. / SOLİVİA HOTEL and authorised data processors. Except for the exceptions provided for by the relevant legislation, your personal data will not be processed for any purpose other than the specified purpose, and the necessary technical and administrative measures will be taken by OZERA TURİZM İŞLETMECİLİK VE TİCARET A.Ş. / SOLİVİA HOTEL to prevent the loss of data stored, recorded, or processed within this scope, to prevent unauthorised persons from accessing such data, and to prevent unlawful use of such data. / SOLİVİA HOTEL.

OZERA TURİZM İŞLETMECİLİK VE TİCARET A.Ş. / SOLİVİA HOTEL will hereinafter be referred to as ‘THE COMPANY’ in this information notice.

YOUR PERSONAL DATA PROCESSED AND PURPOSES OF PROCESSING

When you use our products and services;

· Your name and surname, for the purposes of identifying you, entering into a contract, fulfilling our contractual obligations and communicating with you.

· Your date of birth, for the purposes of applying age-based campaigns, determining prices for children, entering into contracts, and fulfilling our contractual obligations.

· Your nationality, for the purposes of determining the language of communication, providing you with the best possible service, and conducting market analysis.

· Your phone number and email address are collected for the purposes of contacting you, providing post-service support, billing, sending commercial mail or electronic communications, sending thank you, best wishes and congratulations messages, and, with your explicit consent, informing you about new services, general and special campaigns, discounts, promotions, etc.

· In order to provide our services in accordance with your requirements; your disability status.

· For the purposes of fulfilling our contractual obligations, completing pre-service preparations, providing transfer services, making your hotel reservation, etc.; your flight, transfer and tour information and your accommodation dates,

· For the purposes of monitoring transfer operations, following up complaints and resolving disputes, and responding immediately to technical malfunctions and possible accidents; during your transfer, information about the vehicle providing the transfer; images from the vehicle’s internal/external security cameras and real-time vehicle location information obtained through the global positioning system (GPS).

*** In order to provide you with our products and/or services in a manner suitable for you and/or to fulfil our contractual obligations and manage processes such as complaints/claims, the personal data you provide when requesting a product or service will be linked to this data.

When You Request a Product or Service;

· Your first name and surname, for the purpose of identifying you and addressing you.

· Your date of birth, for the purpose of implementing age-based campaigns and determining prices for children.

· To provide you with the necessary information, to inform you about new services, general and special campaigns, discounts, promotions, etc., and to send you commercial electronic communications with your consent; your phone number and email address.

· Other details related to the products and/or services you have requested (sea view room, private transfer, etc.) for the purpose of fulfilling your special requests and demands.

If you make a reservation through a tour operator:

· For the purpose of verifying your identity, your first name, last name, and reservation number provided by your tour operator.

· For the purpose of checking age-based campaign prices, accommodation prices for children, and detecting contract violations, your date of birth provided by your tour operator.

· For the purposes of fulfilling our contractual obligations, completing pre-service preparations, providing transfer services, securing your hotel reservation, etc., your flight and transfer information, accommodation dates, and tour operator information provided by your tour operator.

WHEN YOU ARE PHYSICALLY PRESENT AT OUR FACILITIES/OFFICES;

· For the purpose of ensuring physical security; images obtained from security cameras located on the facades of buildings.

WHEN YOU ENTER OUR FACILITIES/OFFICES OR VISIT OUR OFFICES;

· For the purpose of detecting entry and exit to the premises and ensuring physical security; your name and surname, images obtained from security cameras located at entrance doors, building facades, car parks, floor corridors, bars, discos and restaurants.

· In the event of infectious diseases, virus outbreaks, etc., in order to fulfil our obligations under the relevant laws and regulations and/or to ensure that health conditions are appropriate, your health information such as your current body temperature and relevant test results may be collected when necessary.

· If you use the car park, your vehicle registration number, name, surname, and phone number for the purpose of car park management, vehicle security, and to contact you when necessary.

When you use our Internet Access Lines;

· For the purpose of fulfilling our obligations clearly stated and/or anticipated in the relevant laws and regulations; Your Internet traffic information, the web pages you access, the date and time of access, your device’s network card address (Media Access Control) and your local IP address. For the purpose of verifying your identity; your date of birth and room number or your Turkish ID number/passport number or mobile phone number.

When it comes to payment, refund, debt/receivable tracking, etc.;

· For the purpose of identifying you, your first and last name, your Turkish ID number/passport number

· To contact you and send you messages, invoices, receipts, notices, etc., we may use your phone number, email address, and residential address.

· To process the relevant payment, we may use your bank account IBAN information.

When invoicing is carried out on your behalf:

· In order to fulfil our obligations clearly stated and/or anticipated in the relevant laws and regulations, your first name, last name, Turkish ID number/tax ID number, home/work address

· In order to send you your electronic invoice; your email address

If you apply for a job;

· Your name and surname for the purpose of identifying you and addressing you.

· Your telephone number and e-mail address for the purpose of providing feedback.

· For the purpose of determining the appropriate career and job position; your CV and job application form, including your education information, work experience, foreign language skills, driver’s licence information, references, health status, criminal record and conviction information, date of birth, your passport photo, and personal data obtained from various human resources companies.

If you start or request an internship;

· In order to fulfil our obligations clearly stated and/or anticipated in the relevant laws and regulations; Your first name, last name, ID copy, phone number, email address, residence address, bank account information, health report, transcript information, and personal data related to your guardian.

· For the purpose of meeting uniform requirements; your height, weight, and body measurements.

If you become our employee;

· For the purpose of signing a contract, assigning you appropriate duties, completing your employment procedures, and fulfilling our obligations clearly stated and/or anticipated in the relevant laws and regulations; Personal data obtained during your job application process, your Turkish ID number, ID copy, diploma, certificate, mastery, etc. documents and personal data obtained through these documents, your personal information, Social Security Institution data, criminal record, chest X-ray, and health reports.

· For the purpose of managing emergencies; the name and surname of a close relative to be notified in case of an emergency, your relationship with them, and their contact information.

· For the purpose of fulfilling our obligations clearly stated and/or anticipated in relevant laws and regulations; divorce, execution, and similar court decisions.

· For the purpose of paying your entitlements; your bank account IBAN information.

· For the purpose of fulfilling our obligations clearly stated and/or anticipated in the relevant laws and regulations; your Internet traffic information, web pages you have accessed, date and time of access, network card address (Media Access Control) of devices assigned to you, and your local IP address.

· For the purposes of data security and tracking, evaluating employee performance, conducting various audits, and quality management; data access and transaction records, login/logout data, correspondence conducted through your corporate email account, screenshots of your work computer assigned to you, and audio recordings of your conversations conducted through corporate lines.

· For the purpose of protecting physical premises; Your entry and exit data for our business and premises, images obtained from security cameras. In addition, for entry/exit to critical areas, subject to your preference and explicit consent; your biometric data such as fingerprints and facial recognition.

· For the purpose of ensuring the safety of company vehicles and enabling transfer planning; details of your use of company vehicles, vehicle location information,

· For the purpose of meeting uniform requirements; your height, weight and body measurements.

If you are our supplier, business partner or employee:

· Your name and surname for the purpose of identifying you and addressing you.

· For the purpose of establishing communication and conveying requests, your telephone number and email address.

· For the purpose of verifying your area of authority when necessary; your power of attorney, authorisation, mastery, representative, and other such documents and the personal data obtained through these documents.

If you are a parent, guardian or representative:

· For the purpose of verifying your identity and scope of authority; your first and last name, scope of authority and documents proving your scope of authority (power of attorney, signature circular, identity document, etc.) and personal data obtained from these documents.

· For the purpose of contacting you, your phone number, email address, residential address, and similar contact information.

OTHER REASONS FOR PROCESSING YOUR PERSONAL DATA;

• To provide necessary information within the scope of the contract and/or legislation, to send notifications such as congratulations, wishes, thanks, and surveys,
• To inform you about new services provided by our company and/or business partners, general and special campaigns, discounts, promotions, etc.,
• To provide you with the best and most suitable service,

· To carry out after-sales support services,

· To organise meetings, cocktail parties, online meetings, etc.,

• Backup/copying to prevent data loss,
• Taking all necessary technical and administrative measures for the services provided by our company,
• Conducting analyses for the purpose of improving the services provided by our company,
• Invoicing and payment transactions related to service purchases,
• Responding to all your questions and complaints,
• Detecting or preventing breaches of contractual and/or contractual obligations of our services,
• Providing the necessary information to regulatory and supervisory authorities and official bodies in accordance with their requests and audits,
• Retaining service information that must be kept in accordance with relevant legislation,
• Fulfilling our contractual and/or legal obligations to our business partners and other third parties regarding the products and services we offer to you,
• Measuring customer satisfaction,
• Providing and executing customer services,
• Fulfilling our contractual obligations

LEGAL REASONS

Your personal data may be processed for the purposes of fulfilling our legal obligations, in accordance with the laws specified below, without being limited to them, if expressly stated and/or envisaged in the laws.

· Tax Procedure Law No. 213

· Identity Reporting Law No. 1774

· Turkish Commercial Code No. 6102

· Turkish Code of Obligations No. 6098

· Labour Code No. 4857

· Occupational Health and Safety Code No. 6331

· Social Insurance and General Health Insurance Code No. 5510

· Turkish Penal Code No. 5237

· Law No. 6698 on the Protection of Personal Data

· Law No. 5651 on the Regulation of Publications Made on the Internet and the Fight Against Crimes Committed Through Such Publications

· Your explicit consent and our legitimate interest.

TRANSFER OF YOUR PERSONAL DATA

Your personal data may be shared with other third parties in accordance with Articles 8, 5, and 6 of the relevant law, provided that the purpose of data processing is valid within the scope of the KVKK and other legislation and for the purposes stated above, including but not limited to the following:

DOMESTIC TRANSFER

· Our company AND/OR affiliated companies,

· Persons acting on behalf of and/or for the account of our company,

· Business partners in connection with the performance of the product and/or service you use,

· Our company’s subcontractors, solution partners, suppliers, and service providers,

· Relevant institutions and organisations related to debt collection,

· Your authorised representatives,

· Third parties such as audit firms and law firms from whom we receive consultancy services,

· Regulatory and supervisory authorities, official and administrative bodies, law enforcement agencies

TRANSFER ABROAD

Your personal data may be transferred to the foreign tour operator with whom you have made your reservation for the purpose of being able to make the necessary notifications within the scope of our contracts and to manage processes such as complaints and claims, as long as the purpose of processing your personal data is valid. In addition, your personal data may be stored on foreign servers for purposes such as communication via e-mail and backup needs within the scope of the e-mail and cloud services we receive.

Your personal data is transferred in accordance with the purposes of processing and the principles set forth in Article 4 of the Personal Data Protection Law.

PROCESSING OF YOUR SPECIAL CATEGORY PERSONAL DATA

Your data that is considered special category personal data under the Personal Data Protection Law No. 6698 and related legislation (race, ethnic origin, political opinion, philosophical belief, religious sect or other beliefs, appearance, clothing, membership in an association – foundation or trade union membership, health information, sexual life, criminal convictions and security measures, biometric and genetic data) are processed in accordance with the conditions set forth in Article 6 of the relevant law or with your explicit consent.

EXCEPTIONS PROVIDED FOR BY LAW

In accordance with the relevant legislation, the processing of personal data belonging to the parties to a contract is necessary provided that it is directly related to the establishment or performance of the contract; it is expressly provided for by law; the processing of personal data belonging to the parties to the contract is necessary for our company to fulfil its legal obligations, if the processing of personal data is necessary for the establishment, exercise or protection of any of your rights, provided that it does not harm your fundamental rights and freedoms, or if the processing of personal data is necessary for the legitimate interests of our company, in accordance with the procedures and principles specified in the relevant legislation, your personal data may be processed without your explicit consent.

YOUR RIGHTS REGARDING THE PROTECTION OF PERSONAL DATA

· You have the following rights in accordance with the relevant legislation and may always contact our company regarding these matters;

· To learn whether your personal data has been processed,

· To request information about the processing of your personal data,

· To learn the purpose of the processing of your personal data and whether it is being used for its intended purpose,

· To know the third parties to whom your personal data has been transferred within or outside the country,

· Requesting the correction of personal data if they are incomplete or incorrect,

· Requesting the deletion or destruction of personal data, and requesting that the third parties to whom the personal data have been transferred be informed of the correction and/or deletion of the personal data if they are incomplete or incorrect,

· Object to the analysis of processed data exclusively by automated systems resulting in a decision against the individual, and request compensation for any damage suffered as a result of the unlawful processing of personal data.

In addition, you may notify us of any changes and/or updates to your personal data at any time by emailing [email protected] or by visiting Solivia Hotel Konaklı Mahallesi Ayışığı Sokak No:2 07410 Konaklı/Alanya/Antalya.

How Long Will Your Personal Data Be Processed?

In accordance with the KVKK, your personal data processed for the purposes specified in this Information and Consent Text will be processed for the period specified in Article 7/f.1 of the KVKK.

7/f.1. of the KVKK, your personal data will be deleted, destroyed or anonymised by us when the purpose requiring its processing ceases to exist and/or when the limitation periods for processing your data in accordance with the legislation expire.

Changes and Updates

This information notice has been prepared in accordance with the Personal Data Protection Law No. 6698 and related legislation. The information notice may be amended as necessary in line with changes in the relevant legislation and the personal data processing purposes and policies of OZERA TURİZM İŞLETMECİLİK VE TİCARET A.Ş. / SOLİVİA HOTEL.