INFORMATION TEXT ON THE PROTECTION AND PROCESSING OF PERSONAL DATA

This information text on the protection and processing of personal data has been prepared by Köseoğlu Tourism Health Services and Construction Trading Inc. (“Company”) as the Data Controller, in accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”), to inform you that we will process and store the personal data of you and third parties, which you have shared with us upon our request, in a manner limited and proportionate to the processing purpose, within the framework of the limits set by the legislation.

Data Controller

In accordance with the Law on the Protection of Personal Data, your personal data will be collected and processed by the Company as the data controller within the scope explained below.

Collection, Processing, and Processing Purposes of Personal Data

Our Company’s policy on the protection and confidentiality of personal data is in compliance with the KVKK. During the commercial activities carried out by our Company, your personal data may be collected by our Company through automatic or non-automatic methods, via offices, branches, call centers, websites, social media channels, mobile applications, and similar means, verbally, in writing, or electronically.

Your personal data may be processed when you visit our Company and facilities, visit our website or social media channels/platforms, or participate in training, seminars, or events organized by our Company.

Your personal data, obtained with your consent or based on the legal grounds specified in the laws of the Republic of Turkey, will be processed for the following purposes:

  • To carry out the necessary work by our business units to provide you with the products and services offered by our Company.
  • To customize and offer the products and services offered by our Company according to your preferences, usage habits, and needs.
  • To improve the quality of the services provided by our Company and to develop our quality policy, to contact Personal Data Owners who submit requests and complaints, and to manage requests and complaints.
  • To ensure the legal and commercial security of our Company and the persons in business relations with our Company (administrative operations for communication carried out by our Company, ensuring and auditing the physical security of the Company’s locations, business partner/customer/supplier (authorized persons or employees) evaluation processes, legal compliance process, financial affairs, etc.).
  • To inform you about the information, events, and services you request from our Company.
  • To determine and implement our Company’s commercial and business strategies.
  • To ensure the execution of our Company’s human resources policies.
  • To fulfill a legal obligation arising from the legislation by providing information to authorized institutions, creating and tracking visitor records.
  • Your personal data will be processed within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK.

Method and Legal Basis of Collecting Personal Data

Personal Data is collected through various means, including verbal, written, and electronic methods, via call centers, the Company’s website, social media channels, reservation channels, mobile applications, and other technical methods, in order to provide the products and services offered by our Company within the legal framework and to fulfill our Company’s contractual and legal obligations completely and accurately. Your personal data collected for this legal reason will be processed by the Company or data processors appointed by the Company within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK.

Rights of the Personal Data Owner Listed in Article 11 of the KVKK

The Company informs you of your rights in accordance with Article 10 of the Law, guides you on how to exercise these rights, and implements the necessary internal procedures, administrative, and technical arrangements for all these. In accordance with Article 11 of the Law, individuals whose Personal Data is processed have the following rights:

  • To learn whether their personal data is being processed.
  • To request information if their personal data has been processed.
  • To learn the purpose of processing their personal data and whether they are used in accordance with their purpose.
  • To know the third parties to whom their personal data is transferred, domestically or abroad.
  • To request the correction of their personal data if it is incomplete or inaccurate, and to request that the third parties to whom the personal data has been transferred be informed of this correction.
  • To request the deletion or destruction of their personal data if the reasons requiring its processing have ceased to exist, despite being processed in accordance with the KVKK and other relevant legal provisions, and to request that the third parties to whom the personal data has been transferred be informed of this action.
  • To object to the emergence of a result against them by analyzing the processed data exclusively through automated systems.
  • To request compensation for damages if they suffer damage due to the unlawful processing of their personal data.
  • You can submit your request to exercise the above-mentioned rights to the Company in writing or through other methods determined by the Personal Data Protection Board. Within the scope of your written application, you can personally submit your request, which includes the necessary information to identify you and your explanations regarding the right you wish to exercise under Article 11 of the Law, to the address “Akdeniz Cad. No:78 34080 Fatih – Istanbul / Turkey,” or send it to the registered email address info@berrhotel.com after signing it with your “secure electronic signature” within the scope of the Electronic Signature Law No. 5070, or send it through a notary or other methods specified in the KVKK.

Cases Where Consent Is Not Required

In accordance with Article 5, Paragraph 2 of the Law on the Protection of Personal Data No. 6698, the Company has the right to process personal data without obtaining the explicit consent of the individual if one of the following conditions exists:

  • It is explicitly provided for by law.
  • It is necessary to protect the life or physical integrity of the individual or another person who is unable to express their consent due to actual impossibility or whose consent is not legally valid.
  • It is necessary to process the personal data of the parties to a contract, provided that it is directly related to the establishment or performance of the contract.
  • It is mandatory for the Company, as the data controller, to fulfill its legal obligation.
  • It has been made public by the data subject.
  • It is necessary for the establishment, exercise, or protection of a right.
  • It is necessary for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the data subject.