
Personal data protection
ALTINYIL TURİZM GAYRİMENKUL TİCARİ YATIRIMLARI A.Ş
INFORMATION NOTE ON RESERVATION
This information Note has been redacted for the purposes of informing the data subjects concerning the procedures and principles regarding the processing of personal data of the guests and customers of Altınyıl Turizm gayrimenkul ticari yatırımlar A.Ş.. (“Company”) as per Turkish Personal Data Protection Law no. 6698.
1. Purpose of Processing of Personal Data
The personal data collected are processed for execution of emergency processes, execution of information security processes, to conduct audit / ethics operations, to conduct business and operations in accordance with the legislation, execution of financial operations and accounting, execution of the loyalty processes with regards to the company / products / services, ensuring hotel security, to conduct internal audit / investigation / intelligence operations, managing communication activities, to execute/ supervise business operations, receiving and evaluating suggestions to improve business operations, ensuring business stability, execution of the customer relationship management processes, carrying out activities with regards to customer satisfaction, organization and event management, conducting marketing analysis, execution of advertising / campaign / promotion processes, managing contract processes, managing requests / complaints, ensuring the security of movable goods and resources, execution of marketing processes with regards to products / services, ensuring the security of data controller operations and providing information to authorized persons, institutions and organizations, creation and tracking of visitor records within the framework of the personal data processing terms and purposes specified in Articles 5 and 6 of the Law. Personal data processed in this context is as follows: name, surname, nationality, date of birth, identity type (passport / driver's license / identity card etc.), sex, address, language preference, e-mail and telephone number.
2. Parties to Whom Personal Data May Be Transferred and Purpose of Transfer
The personal data collected may be shared for Execution of emergency processes, Execution of information security processes, to conduct audit / ethics operations, to conduct business and operations in accordance with the legislation, execution of financial operations and accounting, execution of the loyalty processes with regards to the company / products / services, ensuring hotel security, to conduct internal audit / investigation / intelligence activities, managing communication activities, to execute/ supervise business operations, receiving and evaluating suggestions to improve business operations, ensuring business stability, execution of the customer relationship management processes, carrying out activities with regards to customer satisfaction, organization and event management, conducting marketing analysis, execution of advertising / campaign / promotion processes, managing contract processes, managing requests / complaints, ensuring the security of movable goods and resources, execution of marketing processes with regards to products / services, ensuring the security of data controller operations and providing information to authorized persons, institutions and organizations with other business partners and hotels and with authorized institutions and organizations within the Intercontinental Hotels Group in which the Company is a member within the framework of the personal data processing conditions specified in Articles 8 and 9 of the Law.
3. Method and Legal Reason for Personal Data Collection
Your personal data are collected materially or by means that are partially or fully automated during the creation of your reservation based on the reasons stated in article 5 of the Law No. 6698 which are as follows “expressly permitted by any legislation”, “being necessary to process the personal data of parties of a contract, provided that the processing is directly related to the establishment or performance of the contract”, “being necessary for compliance with a legal obligation the controller is subject to”, “being necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed” and transferred abroad with your explicit consent.
4. Rights of Data Subjects and Exercise of These Rights
You may submit your requests in writing to Altınyıl Turizm gayrimenkul ticari yatırımlar A.Ş... delivering by hand to 19 Mayıs Mahallesi Halaskargazi Cad. No:206 34360 Şişli/İstanbul, or sending via a notary public or by the methods determined in accordance with “Communiqué on Procedures and Principles of Application to the Data Controller” or sending to altinyil@hs03.kep.tr with secure electronic signature as per article 11 of the Law regulating the rights of data subject.