Gdpr | Xperia Hotels

INFORMATION TEXT FOR GUESTS REGARDING PERSONAL DATA PROTECTION LAW

Turkey-based company MDK CONSTRUCTION TOURISM DOMESTIC AND FOREIGN TRADE LTD.ŞTİ/SUNALAR HOTEL.TOUR. TRADE AND INDUSTRY A.Ş ("Company"), with its headquarters located at Saray Mah.Alaaddinoğlu sok.Zamanoğlu Apt.1/4 / Antalya-Alanya, as the data controller; hereby informs you of the personal data we obtain in the following ways,

Within the scope of our accommodation and service relationship with you;

In accordance with the purposes required for the operation of the hotels and limited to this purpose,

By maintaining the accuracy and most up-to-date status of the personal data you provide or as notified to us,

We inform that your personal data will be recorded, stored, preserved, reorganized, may be processed in other ways specified in the Personal Data Protection Law No. 6698 (“KVKK”), may be shared with institutions authorized to request such personal data by law, and may be transferred to third parties domestically or abroad, in accordance with the conditions stipulated by the KVKK.

1. PROCESSED PERSONAL DATA

Personal data provided to us during the registration and throughout the accommodation may be processed. The personal data processed are as follows:

Identity Data

Name, surname, date of birth, country of birth, city of birth, gender, marital status, nationality, ID card information (TCKN, serial no, ID card no, father's name, mother's name, place of birth, province, district, neighborhood, volume no, family order no, order no, household no, page no, registration no, place of issue, reason for issue, date of issue, previous surname), copy of identity card

Contact Data

Phone number, full address information, personal and corporate email address

Special Categories of Personal Data

Allergy, chronic illness, blood type, pandemic disease (Covid-19, etc.), disability information, special requests related to accommodation.

Visual and Auditory Data

Camera and audio recordings taken within the hotel

Family and Relative Data

Name, surname, ID number, gender, date of birth, phone number of spouse and children; name, surname, and phone number of relatives to be contacted in case of emergency.

2. METHOD OF COLLECTING PERSONAL DATA AND LEGAL BASIS

We collect your personal data through the methods specified above in compliance with Article 5 of the KVKK regarding the processing of personal data, based on the legal obligations, the necessity of processing personal data belonging to the parties of the contract for the establishment or performance of the service relationship between us, explicitly provided for by the laws, the legitimate interests of the Company, and the necessity of processing data to establish, exercise, or protect a right.

3. PURPOSES OF PROCESSING YOUR PERSONAL DATA

Your personal data and special categories of personal data collected through the methods specified above are processed for the purposes related to the establishment and performance of the service relationship concerning the accommodation, especially for:

• Sale of our products and services, complete provision of the products and services you have purchased, fulfillment of additional requests, and collection of service fees.
• Management of emergency processes such as illness, accidents, pandemic diseases, natural disasters, fires, floods; ensuring security measures are taken at hotel entrances and within the hotel premises during pandemic diseases, including contactless temperature measurement.
• Execution of information security processes and monitoring of all electronic communications made by you with our company for virus, harmful content, and data leakage prevention.
• Provision of physical space security by collecting identity information at hotel entrances and keeping camera records.
• Sharing of visual data through camera recordings for security purposes at hotel entrances, parking lots, and common areas.
• Resolution of legal disputes.
• Conducting communication activities.
• Conducting advertising, campaign, and promotion processes with your consent.
• Compliance with legal obligations such as sharing the identity or passport information of customers staying at our hotel with the police and gendarmerie.
• Sharing of personal data with authorized institutions and organizations through legal means or for fulfilling our legal obligations.

Personal data processing is carried out in accordance with the general principles specified in Article 4 and the processing purposes specified in Article 5 of the KVKK. Your personal data will be kept for the maximum period required by the relevant legislation or for the maximum period necessary for the purpose for which they were processed, and in any case, for the statutory limitation periods.

4. SHARING OF YOUR PERSONAL DATA WITH THIRD PARTIES

In order to fulfill your security and our company's obligations under the law, your personal data is shared with:

• Domestic suppliers and our group companies for the execution of information security processes.
• Companies such as Logo for the execution of financial and accounting transactions.
• WhatsApp for the execution of communication activities.
• Domestic and foreign agencies or tour operators for the sale of our products and services and the complete provision of the products and services you have purchased.
• Social media platforms for the execution of advertising, campaign, and promotion processes.
• Industry associations, Judicial Authorities, Revenue Administration, Public Institutions, and Law Enforcement Agencies for legal obligations and the need to share information.

Personal data transfers are carried out in compliance with the principles of being relevant, limited, and proportionate to the purposes for which they are processed, and necessary administrative and technical measures are taken to prevent unauthorized and/or unlawful access to your personal data.

5. YOUR RIGHTS

In accordance with Article 11 of the Law, as the data subject, you have the following rights regarding the processing of your personal data:

a. To learn whether personal data is processed, b. To request information if personal data has been processed, c. To learn the purpose of processing personal data and whether they are used in accordance with their purpose, d. To know the third parties in the country or abroad to whom personal data has been transferred, e. To request the correction of personal data in case of incomplete or incorrect processing, f. To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7, g. To request notification of the transactions made pursuant to subparagraphs (e) and (f) to third parties to whom personal data has been transferred, h. To object to the occurrence of a result against the individual by analyzing the processed data exclusively through automated systems, i. To demand the compensation of the damage in case of damage due to the unlawful processing of personal data.

In accordance with the first paragraph of Article 13 of the Law; your requests regarding these rights must be made to our Company in writing or through other methods determined by the Personal Data Protection Board (“Board”). You can submit your applications to our company electronically to the e-mail address grandbali@xperia.com.tr/saraybeach@xperia.com.tr previously notified or in writing to the address Saray Mah.Alaaddinoğlu sok.Zamanoğlu Apt.1/4 / Antalya.

In the application to be made; (i) name, surname and signature if the application is written, (ii) T.R. for citizens of the Republic of Turkey. It is legally required to include identification number, nationality for foreigners, passport number or identification number, if any, (iii) residence or workplace address for notification, (iv) e-mail address, telephone and fax number for notification, if any, and (v) subject of the request. 

You acknowledge that you have been informed by our Company in accordance with the obligation to inform within the scope of Article 10 of the KVKK and that you understand the matters specified in the text.