Personal Data Processing and Protection Policy
BATA TURİZM DENİZCİLİK DEMİR ÇELİK VE İNŞ. SAN TİC. A.Ş. SUSESİ LUXURY RESORT CLARIFICATION TEXT ON THE LAW ON THE PROTECTION OF PERSONAL DATA
SUSESI LUXURY RESORT takes the highest possible security measures to ensure that your personal data is collected, stored and shared in accordance with the law and to protect your privacy.
Our aim is to inform you in the most transparent way about the ways your personal data are collected, the purposes of processing, the persons shared, the legal reasons and your rights in accordance with Article 10 of the Personal Data Protection Law No. 6698 and in line with your satisfaction.
a) Data Controller
In accordance with the Law No. 6698 on the Protection of Personal Data ("Law No. 6698"), your personal data is collected and processed by SUSESI LUXURY RESORT (referred to as "BATA" or "COMPANY") as the data controller within the scope described below.
b) Categories of Personal Data and Purposes of Processing
Your personal data collected by the COMPANY from its customers, employees, potential customers, employee candidates, representatives and employees of official institutions, business partners and suppliers are processed for the purposes specified in the table below.
| Category of Personal Data Processed | Processing Purpose |
| Identity Information |
To be able to provide the products and services of the COMPANY, to fulfil our obligations to you, to organise records and documents, to comply with the information retention, reporting, information, tax and other obligations stipulated by local and international legal legislation In line with the purpose of determining and implementing the commercial and business strategies of the COMPANY; financial operations, communication, market research and social responsibility activities carried out by the COMPANY, purchasing operations (demand, proposal, evaluation, order, budgeting, contract), internal system and application management operations Offering you special advertisements, campaigns, advantages and benefits for sales and marketing activities to be carried out to increase the quality of services and products Examining, evaluating, and responding to requests from official authorities or you |
| Location, position, GPS data | Planning, supervision and execution of corporate governance, internal system and application management operations, strategic planning, and information security processes Ensuring business continuity |
| Risk Management Knowledge | Planning, auditing and execution of risk management, corporate sustainability, corporate governance, strategic planning, and information security processes; ensuring business continuity. |
| Customer Information | Complying with information retention, reporting, information, tax and other obligations stipulated by local and international legal legislation in order to provide the products and services of the COMPANY, to fulfil our obligations to you, to organise records and documents, In line with the purpose of determining and implementing the commercial and business strategies of the COMPANY; managing financial operations, communication, market research and social responsibility activities, purchasing operations (demand, proposal,evaluation, order, budgeting, contract), internal system and application management operations, legal operations carried out by the COMPANY, Examining, evaluating, and responding to requests from official authorities or you Measuring and increasing customer satisfaction and improving our services accordingly |
| Identity Information | Providing the products and services of the COMPANY and fulfilling our obligations towards you In line with the purpose of determining and implementing the commercial and business strategies of the COMPANY; financial operations, communication, market research and social responsibility activities carried out by the COMPANY, purchasing operations (demand, proposal, evaluation, order, budgeting, contract), internal system and application management operations. Managing legal operations Examining, evaluating, and responding to requests from official authorities or you |
| Employee Information | Fulfilling the obligations of the COMPANY towards its employees, organising records and documents, complying with information retention, reporting, disclosure, tax, and other obligations stipulated by local and international legal regulations. Managing legal operations |
| Ancillary Rights and Benefits Information |
Providing the products and services of the COMPANY, fulfilling our obligations towards you, organising records and documents, complying with information retention, reporting, information, tax and other obligations stipulated by local and international legal legislation Managing legal operations |
| Knowledge of Legal Procedure and Compliance | Providing the products and services of the COMPANY, fulfilling our obligations towards you, organising records and documents, complying with information retention, reporting, information, tax and other obligations stipulated by local and international legal legislation Managing legal operations |
| Event Management Information | Complying with the information storage, reporting and information obligations stipulated by official institutions, fulfilling the requirements of the contracts and fulfilling the legal obligations to which the COMPANY is subject in relation to the utilisation of these services |
| Audiovisual Data | Complying with the information retention, reporting and information obligations stipulated by official institutions Planning, supervision and execution of corporate governance, internal system and application management operations, strategic planning and information security processes Ensuring workplace safety |
c) To whom and for what purpose the processed personal data can be transferred
In order to be limited to the realisation of the processing purposes specified in section b) above and to be valid for all of your collected personal data, our Company informs the Data Subject of the groups of persons to whom personal data is transferred in accordance with Article 10 of the PDPL. The persons to whom personal data are transferred, the scope of these persons and the purposes of data transfer are stated below.
| TRANSFERRED PERSONS and INSTITUTIONS | DESCRIPTION | PURPOSE OF DATA TRANSFER |
| Business Partner | It defines the parties with whom our Company has established business partnerships for purposes such as the sale, promotion and marketing of our Company's services, after-sales support, while carrying out its commercial activities. | Limited to the purpose of ensuring the fulfilment of the objectives of the establishment of the joint venture |
| Customer | It defines the persons to whom our Company provides services and/or employees/signature authorities/other real persons in the companies to which our Company provides services. | Limited to the purpose of providing services to our customers |
| Domestic and foreign affiliates, business partners and shareholders | Companies in which the Company is a shareholder | Limited to ensuring the execution of the Company's commercial activities that require the participation of the Company's subsidiaries |
| Supplier | It defines the parties that provide services to our Company on a contractual basis in accordance with the orders and instructions of our Company while carrying out the commercial activities of our Company, or the employees / officials / other relevant persons of these parties. | Limited to the purpose of providing the service provision of our Company, which is outsourced by our Company from the supplier and which is limited to the purpose of providing the service provision of our Company |
| Legally Authorised Public Institutions and Organisations | Public institutions and organisations authorised to receive information and documents from our Company in accordance with the provisions of the relevant legislation | İlgili kamu kurum ve kuruluşlarının hukuki yetkisi dahilinde talep ettiği amaçla sınırlı olarak |
| Legally Authorised Private Law Persons | Private law persons authorised to obtain information and documents from our Company in accordance with the provisions of the relevant legislation | Limited to the purpose requested by the relevant private law persons within their legal authority (e.g. Occupational Health and Safety Company) |
ç) Method and Legal Grounds for Collecting Personal Data
Your Personal Data, both fully or partially by automated means and by methods that are part of the data recording system but not automated;
Directly by you or by persons authorised to act on your behalf; applications made through contracted websites, store and COMPANY headquarters personnel, institutions that we provide / receive support services, real and / or legal persons with whom transactions are made within the scope of any legislation or contract, and directly automated systems (our website and call centres, social media accounts) and verbal, written or electronic media;
•It shall be collected on the basis of the following legal grounds set out in Articles 5 and 6 of the Law;
•Being clearly stipulated in the laws,
•Being compulsory for our company to fulfil the legal obligation,
•Being directly related to the conclusion or performance of the contract and being necessary to be processed,
•Obligation of processing for the legitimate interest of our Company, provided that it does not harm your fundamental rights and freedoms,
•Having been publicised by you,
•Obligation of processing for the establishment, use or protection of a right,
d) Rights of the Relevant Person Listed in Article 11 of Law No. 6698
As personal data owners, if you submit your requests regarding your rights to the Company by the methods set out below, the COMPANY will finalise the request as soon as possible and within thirty days at the latest, depending on the nature of the request. No fee will be charged for up to ten pages in the reply to be given. A transaction fee of 1 Turkish Lira will be charged for each page over ten pages. In case the response to the application is given in a recording medium such as CD, flash memory, the fee that may be requested by the COMPANY shall not exceed the cost of the recording medium.
Pursuant to Article 11 of the PDPL, by contacting BATA, you have the following rights:
1. Learning whether your personal data is being processed,
2. If processed, to request information about it,
3. Learning the purpose of processing your personal data and whether they are used in accordance with their purpose,
4. Requesting correction of personal data in case of incomplete or incorrect processing,
5. Demand the deletion or destruction of your personal data within the framework of the conditions stipulated in Article 7 of the Law,
6. Objection to the occurrence of a result to your detriment by means of analysing your processed personal data exclusively with automated systems,
7. In case you suffer damage due to unlawful processing of personal data, requesting the compensation of your damage
You can submit your applications that you want to make in writing by attaching the necessary documents to the address of our Company İskele Mevkii Belek/Serik/Antalya as the data controller. You can access the application form here.
You can send your applications via e-mail to [email protected] e-mail address. You can make your applications via KEP to [email protected] KEP address.
Depending on the nature of your request, the information and documents that will enable identification must be provided to us completely and accurately. If the requested information and documents are not provided as required, there may be problems in the full and qualified execution of the investigations to be carried out by the COMPANY based on your request. In this case, the COMPANY declares that it reserves its legal rights. For this reason, your application must be sent completely and in a manner to include the requested information and documents according to the nature of your request.
In your application;
1. Your name, surname and signature if the application is in writing,
2. For citizens of the Republic of Turkey, your Turkish ID number; if you are a foreigner, your nationality, passport number or ID number, if any,
3. Your residential or workplace address for notification,
4. Your e-mail address, telephone, and fax numbers, if any,
5. Your request subject,
must be present. Information and documents related to the subject, if any, must also be attached to the application.