Misafir Aydınlatma Metni

CLARIFICATION TEXT ON THE PROCESSING OF PERSONAL DATA

  1. Data Controller, Personal Data Categories and Data Collection Methods

Pursuant to the Law No. 6698 on the Protection of Personal Data (” LPPD No. 6698″) and, if you are a citizen of the European Union, the European General Data Protection Regulation (“GDPR”), Your personal data in the form of identity, communication, customer transaction, legal transaction, audio-visual recording, finance, transaction security, information about the person you will stay with, vehicle information, information about your personal preferences and interests are collected by you or from third parties, physically or electronically, by written or verbal data transfer in written or verbal form, in whole or in part by automatic or non-automatic means  provided that it is part of any data recording system,  and Saroz Gayrimenkul Geliştirme İnş. San. Ve Dış Tic. A.Ş (“Wish More Hotel Istanbul)  as the data controller is processed by us within the scope described below.

  1. Purposes and Legal Grounds for Processing Personal Data

Your personal data collected by us are processed for the following purposes and legal reasons.

Purpose of Data Processing Data Category Legal Reason
Execution of goods/service sales and after-sales support services Identity, Contact, Customer Transaction, Legal Transaction, Audiovisual Record, Finance, Accommodation Information, Vehicle Information, Information on Your Personal Preferences and Interests  

 

 

 

Article 5/2-c of LPPD No. 6698

Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract

Execution of goods/service production and operation processes Identity, Communication, Customer Transaction, Audio-Visual Recording, Finance, Accommodation Information, Vehicle Information, Information Regarding Your Personal Preferences and Interests
Execution of contract processes and accommodation service fulfillment processes Identity, Communication, Customer Transaction, Legal Transaction, Audio-Visual Recording, Finance, Accommodation Information, Vehicle Information, Information Regarding Your Personal Preferences and Interests
Execution of activities in accordance with the legislation Identity, Contact, Customer Transaction, Legal Transaction, Finance, Transaction Security, Accommodation Information, Vehicle Information  

 

 

Article 5/2-a of LPPD No. 6698

Explicitly stipulated in the law.

 

Article 5/2-ç of LPPD No. 6698

Being mandatory for the data controller to fulfill its legal obligation.

 

Conducting finance and accounting affairs Identity, Communication, Customer Transaction, Legal Transaction, Finance
Conducting legal affairs Identity, Communication, Customer Transaction, Legal Transaction, Finance
Execution of information security processes Transaction Security
Informing authorized institutions and organizations Identity, Customer Transaction, Legal Transaction, Finance, Transaction Security, Homestay Information, Vehicle Information
Conducting communication activities Identity, Contact, Customer Transaction  

Article 5/2-f of LPPD No. 6698

Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Execution of customer satisfaction processes and post-stay support services activities Information on your Identity, Contact, Customer Transaction, Personal Preferences and Interests
Meeting requests and complaints Information on your Identity, Contact, Customer Transaction, Personal Preferences and Interests
 

 

Carrying out storage and archive activities

 

Identity, Contact, Customer Transaction, Legal Transaction, Audiovisual Recording, Finance, Transaction Security, Accommodation Information, Vehicle Information, Information on Your Personal Preferences and Interests

Article 5/2-a of LPPD No. 6698

Explicitly stipulated in the law.

 

Article 5/2-f of LPPD No. 6698

Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

  1. Transfer of Personal Data

Your personal data may be transferred to third parties under the following conditions;

Legal Grounds for Transfer Purpose of Transfer Transferred Party
Article 8/2-a of LPPD No. 6698

Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract

 

Transferring the information necessary for the fulfillment of our obligations under your service contract

 

 

 

 

Business Partners

 

Article 8/2-a of LPPD No. 6698

Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

 

Transferring the necessary information for the execution of goods/service production and operation processes

Article 8/2-a of LPPD No. 6698

Being mandatory for the data controller to fulfill its legal obligation

 

Execution of activities in accordance with the legislation

 

Authorized Public Institutions

 

Article 9/1 of the LPPD No. 6698

Explicit consent of the person concerned

Use of corporate programs, services and software purchased for business continuity and business development activities  

Business Partners Resident Abroad

 

 

  1. Application Procedures and Principles

As a relevant person, if you have a request regarding your rights under Article 11 of Law No. 6698 and if you are a citizen of the European Union, you have the following rights under the GDPR; you can submit your requests regarding your rights to withdraw your explicit consent, to receive information about your data and to access your data, to correct, delete or limit the processing of your personal data in certain circumstances, data portability under certain conditions, to object to the processing of your personal data and similar rights by filling out the Application Form for the Protection of Personal Data that you can obtain from the front office or with your application that meets the minimum conditions stipulated by the Communiqué on the Procedures and Principles of Application to the Data Controller. As Wish More Hotel Istanbul, we will finalize your application free of charge as soon as possible and within thirty days at the latest, depending on the nature of your request. However, if the transaction requires an additional cost, Wish More Hotel Istanbul will charge the fee in the tariff determined by the Personal Data Protection Board. You may inform us if your application is dismissed, if the response is inadequate or if we do not respond to your application in due time, and as a data subject, you have the right to appeal to the competent data protection authority in your country within thirty days from the date on which you become aware of our response and in any case within sixty days from the date on which you duly lodged your application.

Application Procedure Application Address
The electronic message you will send via KEP sarozgayrimenkul@hs02.kep.tr
The message you will send with your e-mail address registered in our system or with secure electronic signature, mobile signature  

www.wishmore.com.tr/kvkk

Written application to be submitted in person or through a notary public Kocatepe Mah. Cicoz Yolu Cd. No: 207 Bayrampaşa 34045 İstanbul