IN ACCORDANCE WITH THE LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA, GUEST CLARIFICATION TEXT
Data Controller:
Susesi Luxury Resort, Bata Turizm Denizcilik Demir Çelik veİnşaat Sanayi Ticaret A.Ş.
İskeleMevkii Belek / Serik / Antalya
This Clarification Text has been prepared to inform you about the processing, storage, and transfer of your personal data during the accommodation services we provide to you as Susesi Luxury Resort, Bata Turizm Denizcilik Demir Çelik veİnşaat Sanayi Ticaret AŞ ("Susesi Luxury Resort") within the scope of the Personal Data Protection Law No. 6698 ("KVKK - PDPL") and the relevant legislation. Our Company's Policies on the protection of personal data are available at www.susesihotel.com.
Our Company obtains the personal data of the data subjects listed in subparagraph B through Susesi Luxury Resort Accommodation Certificate.
Personal data are processed by our Company for the following legal reasons.
|
Legal Grounds |
Data Categories |
|
Necessary for the conclusion and performance of the contract |
Identity Information |
|
Necessary for the conclusion and performance of the contract |
Contact Information |
|
Necessary for the conclusion and performance of the contract |
Financial Information |
|
Legitimate interest of the data controller Legal liability |
Visual Recordings |
|
Explicit consent |
Health Information |
|
Necessary for the conclusion and performance of the contract Legal liability |
Operation Security |
Processingis defined in Article 3 of the PDPL as the processes of recording, storing, preserving, changing, reorganising, disclosing, transferring, taking over, making available and classifying personal data.
Your personal data will be processed by our Company for the following purposes within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the PDPL:
|
Processing Purpose |
Date Categories |
|
Provision of accommodation services Carrying out communication activities |
Identity Information |
|
Provision of accommodation services Carrying out communication activities |
Contact Information |
|
Provision of accommodation services Realisation of payment transactions |
Financial Information |
|
Ensuring workplace safety |
Visual Recordings |
|
Protection of workplace health |
Health Information |
|
Provision of Internet service |
Operation Security |
Your personal data may be transferred to the following third parties and for the specified purposes within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the PDPL:
|
Third Party |
Data Categories |
Transfer Purpose |
|
Official Public Institutions and Organisations |
Identity Information Contact Details Visual Recordings |
Fulfilment of official institution request |
|
|
Identity Information Contact Details Financial Information |
Fulfilment of accommodation services |
If you wish, you can send your applications and requests regarding your personal data to Susesi Luxury Resort via the Relevant Person Application Form;
Pursuant to the Communiqué on the Procedures and Principles of Application to the Data Controller, the application of the Data Subject must include the name, surname, signature if the application is in writing, Turkish ID number, (passport number if the applicant is a foreigner), residential or workplace address for notification, e-mail address for notification, telephone number and fax number, if any, and information on the subject of the request.
The Relevant Person must clearly and comprehensibly specify the requested matter in the application, which includes explanations regarding the right he/she will make in order to use the above-mentioned rights and the right he/she requests to use. Information and documents related to the application must be attached to the application.
Although the subject of the request must be related to the applicant's person, if acting on behalf of someone else, the applicant must be specifically authorised, and this authorisation must be documented (power of attorney). In addition, the application must contain identity and address information and documents confirming the identity must be attached to the application.
Requests made by unauthorised third parties on behalf of someone else will not be evaluated.
Your requests regarding your personal data are evaluated and answered within 30 days at the latest from the date of receipt. In the event that your application is evaluated negatively, the reasons for the reasoned rejection shall be communicated to you by e-mail or postal mail to the address you specified in the application, or, if possible, through the procedure in which the request was made.
