DISCLOSURE TEXT
(For Hotel Guests)
You may reach to the details regarding the explanations taking place in this disclosure text that has prepared pursuant to the Law on Protection of Personal Data (LPPD Law) numbered 6698 with LPPD Policy which has prepared and brought into force in this accommodation facility belonging to (DREAM WORLD) OPTİMAL TURİZM SANAYİ TİCARET ANONİM ŞİRKETİ as data controller from the LPPD Policy and documents taking place in the attachments, in this scope;
Your Personal Data Processed
Identity and Family Information [Name-surname, RFT Identity Number, Passport Number, place of birth - date, marital status, profession, gender, name and number of child, age and dates of birth, signature, register card with voucher (travel card) information (accommodation card information), room type and number, flight number, hotel hosted, accommodation dates and amount]
Contact Information [address, telephone number, e-mail address]
Location Information [Accommodation and location information]
Customer Transaction Information [(Vehicle license plate, survey form, records, requests and instructions for product and service delivery, photographs, wedding, special days of birth anniversary, call center records, invoice, promissory note, check information, information on box office receipts, order information, request information]
Physical Location Security Information [Entry-exit recording information, camera and sound records of employees and visitors]
f) Transaction Security Information [IP address, hotspot records, password and password information, website login and exit information, log and digital traffic records]
Financial Information [bank account number, IBAN, Credit card number, CVC code, expiry date]
Visual and Auditory Records and Information [Audio recordings, visual and auditory records and information received through the call center]
Health Information [Information belonging to disability condition, blood group information, chronic diseases, past diseases, asthma, diabetes, heart, blood pressure diseases, personal health information, device and prosthesis information used]
Collection Method of Your Personal Data and Legal Reasons
Your personal data according to this disclosure text are obtained in verbal, written and electronic form by third parties or by means of information, documents and similar means transmitted by you with whom we have contracted and served as a requirement of working with solution partners that are in cooperation and contractual relationship with non-automatic methods provided that it is part of the automatic or data recording system.
Those data are able to be processed directly in the presence of the following conditions where your explicit consent is not required because of your express consent within the framework of the 5th article of the LPPD Law numbered 6698. In this scope;
Stipulating in the laws clearly,
Being mandatory for the protection of himself/herself or someone else's life or bodily integrity of a person who is unable to disclose his/her consent due to actual impossibility or whose consent is not legally become valid,
Being necessary to process personal data of the parties to the agreement provided that it is directly related to the establishment or performance of an agreement,
Being mandatory for the data controller to fulfill his/her legal obligation,
Being made public by the person concerned,
Being mandatory of data processing for the establishment, exercise or protection of a right,
Being mandatory of data processing for the legitimate interests of the data controller provided that it does not harm the fundamental rights and freedoms of the relevant person.
Your private personal data other than health and sexual life are able to be processed in cases stipulated by laws based on your express consent or in accordance with the provisions of the same article within the scope of the 6th Article of the LPPD numbered 6698. In case where you do not have your explicit consent, your personal data regarding health and sexual life may be processed by the persons or authorized institutions and organizations being under confidentiality obligation for the protection of public health, and conducting preventive medicine, medical diagnosis, treatment and care services.
Purpose of Processing Your Personal Data
Your personal data are processed within the purposes shown below by considering the principles of retention for the required period of time that are stipulated in the relevant legislation or required for the purpose for which they are processed within the scope of being compliance with the law and good faith, being accurate and up-to-date when necessary, processing for specific, explicit and legitimate purposes, being connected, limited and measured with the purpose of processing according to the 4th, 5th and 6th Articles of the LPPD numbered 6698.
Executing Emergency Management Processes
Executing Information Security Processes
Executing Employee Candidate / Intern / Student Selection and Placement Processes
Executing Employee Candidates' Application Processes
Executing Employee Satisfaction and Loyalty Processes
Fulfilling Obligations Arising From Employment Contract And Legislation For Employees
Executing Fringe Benefits and Interests Processes for Employees
Executing Audit / Ethical Activities
Planning and executing activities and organizations such as training, seminars, congresses,
Executing Access Authorities
Executing Activities in Compliance with Legislation
Executing Finance and Accounting Affairs
Executing Loyalty Process to Company / Products / Services
Ensuring Physical Location Security
Executing Recruitment Processes
Following and Executing Legal Affairs
Executing Internal Audit / Investigation / Intelligence Activities
Executing Communication Activities
Planning Human Resources Processes
Executing / Supervising Business Activities
Executing Occupational Health / Safety Activities
Receiving and Evaluating Suggestions for the Improvement of Business Processes
Executing Business Continuity Activities
Executing Logistics Activities
Executing Goods / Service Purchase Processes
Executing Goods / Service After Sales Support Services
Executing Goods / Service Sales Processes
Executing Goods / Service Production and Operation Processes
Executing Customer Relationship Management Processes
Executing Activities Intended to Customer, Guest Satisfaction, Service Quality
Organization and Event Management
Executing Marketing Analysis Studies
Executing Performance Evaluation Processes
Executing Advertising / Campaign / Promotion Processes
Executing Risk Management Processes
Executing Custody and Archive Activities
Executing Social Responsibility and Civil Society Activities
Executing Agreement Processes, Fulfilling the Obligations Assumed by the Performance of the Product and Service Conditions Completely and Correctly
Executing Sponsorship Activities
Executing Strategic Planning Activities
Following Requests / Complaints
Ensuring Security of Movable Goods and Resources
Executing Supply Chain Management Processes
Executing Wage Policy
Executing Marketing Process of Products / Services
Ensuring Security of Data Controller Operations
Foreign Personnel Work and Residence Permit Procedures
Executing Investment Processes
Executing Talent / Career Development Activities
Giving Information to the Authorized Persons, Institutions and Organizations
Executing Management Activities
Creating and Following Visitor Records
Fulfilling Safe Accommodation, Reservation, Holiday Sales Procedures,
Using Surveys, Marketing and Advertising in order to Share In Social Media And Other Environments
Ensuring public safety of customers, employees and related third parties in the workplace,
Implementing first intervention, diagnosis and treatment methods in case where health problems occur,
Conducting activities related to the business and the workplace in accordance with the legislation, company policies and procedures,
Planning and executing special day events and activities such as celebration, party, birthday, marriage, wedding, engagement and anniversary
Your personal data are not processed for purposes other than those shown above. All kinds of technical and administrative measures are taken by the enterprise to prevent the unlawful processing or illegal access of personal data.
Transfer of Your Personal Data
Your personal data can be transferred in country or to abroad in the presence of the following conditions according to the 8th and 9th articles of the LPPD numbered 6698.
The personal data taken due to the existence of the circumstances in the 5th article of the LPPD numbered 6698 or in line with your express consent can be transferred to the institutions and companies by which it is cooperated, to the persons and institutions by which it is interacted such as supplier and to third parties by and to whom it is received service or provided service in accordance with the provisions of the 8th and 9th articles of the Law in line with the above-mentioned purposes and in order to carry-out the above-mentioned activities.
Your personal data regarding health can be transferred without the explicit consent of the person concerned by the persons or authorized institutions and organizations that are found under confidentiality obligation in order to protect public health, to carry out preventive medicine, medical diagnosis, treatment and care services, to plan and manage health services and finance provided that adequate precautions are taken.
Provided that it is clearly stipulated in the laws; that it is mandatory for the protection of life or physical integrity the person who is unable to disclose their consent due to actual impossibility and whose consent is not legally valid; that it is directly related to the establishment or performance of a contract; that it is necessary to process personal data of the parties to the contract; that it is mandatory for the data controller to fulfill his/her legal obligation; that the data is made public; that data processing is mandatory for the establishment, use or protection of a right; and that it does not harm your fundamental rights and freedoms; in cases where data processing is mandatory for the legitimate interests of the data controller and moreover, for the purpose of protection of the public health, preventive medicine, medical diagnosis, treatment and care services and planning and management of health services and financing; on the condition that it is fulfilled by the persons or authorized institutions and organizations that are found under the obligation of secrecy; your personal data can be transferred abroad without your express consent in case there is sufficient protection abroad and there is not enough protection provided that the data controllers found in Turkey and foreign country commit an adequate protection in written form and there is permission of PPD Board.
The PPD Board can decide whether sufficient protection in the foreign country is transferable abroad and transfer will be given permission to abroad without your express consent in order to evaluate the international agreements that Turkey is a party; the reciprocity condition for transferring data between the country requesting the personal data with Turkey; the nature of personal data and the purpose and duration of its processing regarding each concrete personal data transfer; the relevant legislation and implementation of the country where the personal data will be transferred; the measures undertaken by the data controller in the country where the personal data will be transferred or if needed by taking the opinions of the relevant institutions and organizations. Your personal data can be only transferred to abroad with the permission of Board by taking the opinion of the relevant public institution or organization in cases where the interest of Turkey or you will severely damage without prejudice to the provisions of international agreements.
In this scope your personal data can be transferred
To the authorized public institutions and organizations,
To the company partners and officials,
To the business and solution partners,
To the supplier persons and companies,
To the real or legal persons with whom it is interacted with the purposes specified below, in other words;
Executing Emergency Management Processes
Executing Information Security Processes
Executing Employee Candidate / Intern / Student Selection and Placement Processes
Executing Employee Candidates' Application Processes
Executing Employee Satisfaction and Loyalty Processes
Fulfilling Work Contract for Employees and Obligations Arising from Legislation
Executing Fringe Benefits and Interests Processes for Employees
Executing Audit / Ethical Activities
Planning and executing activities and organizations such as training, seminars, congresses,
Executing Access Authorities
Executing Activities in Compliance with Legislation
Executing Finance and Accounting Affairs
Executing Loyalty Processes to Company / Products / Services
Ensuring Physical Location Security
Executing Assignment Processes
Following and Executing Legal Affairs
Executing Internal Audit / Investigation / Intelligence Activities
Executing Communication Activities
Planning Human Resources Processes
Executing / Supervising Business Activities
Executing Occupational Health / Safety Activities
Receiving and Evaluating Suggestions Intended to the Improvement of Business Processes
Executing Business Continuity Activities
Executing Logistics Activities
Executing Goods / Service Purchase Processes
Executing Goods / Service after Sales Support Services
Executing Goods / Service Sales Processes
Executing Goods / Service Production and Operation Processes
Executing Customer Relationship Management Processes
Executing Activities Intended to Customer, Guest Satisfaction, Service Quality
Organization and Event Management
Executing Marketing Analysis Studies
Executing Performance Organization and Event Management Evaluation Processes
Executing Advertising / Campaign / Promotion Processes
Executing Risk Management Processes
Executing Custody and Archive Activities
Executing Social Responsibility and Civil Society Activities
Executing Contract Processes, Fulfilling the Obligations Assumed by the Performance of the Product and Service Conditions Completely and Correctly
Executing Sponsorship Activities
Executing Strategic Planning Activities
Following Requests / Complaints
Ensuring Security of Movable Goods and Resources
Executing Supply Chain Management Processes
Executing Wage Policy
Executing Marketing Process of Products / Services
Ensuring Security of the Data Supervisor Operations
Foreign Personnel Work and Residence Permit Procedures
Executing Investment Processes
Executing Talent / Career Development Activities
Giving Information to the Authorized Persons, Institutions and Organizations
Executing Management Activities
Creating and Following Visitor Records
Fulfilling Safe Accommodation, Reservation, Holiday Sales Transactions,
Using Surveys, Marketing and Advertising in order to Share In Social Media And Other Environments,
Ensuring public safety of customers, employees and relevant third parties in the workplace,
Implementing first intervention, diagnosis and treatment methods in case of health problems,
Carrying out the management and activities of the business and the workplace in accordance with the legislation, company policies and procedures,
Planning and executing special day events and activities such as celebration, party, birthday, marriage, wedding, engagement and anniversary.
Your Rights as a Personal Data Owner
The data owner, in other words, the relevant person has right to
To learn whether personal data is processed or not,
To request information if personal data has been processed,
To learn the purpose of processing personal data and whether they are used appropriately for their purpose,
To know the third parties in the country or abroad to whom personal data have been transferred,
To request correction of personal data in case of incomplete or incorrect processing,
To request the deletion or destruction of personal data within the framework of the conditions stipulated in the 7th Article of the LPPD,
To request notification of the personal data that are processed incorrectly and requested to be corrected and the personal data requested to be destroyed to third parties to which it is transferred,
To object to the emergence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,
To request the compensation of the damage in case of damage due to the illegal processing of personal data within the scope of law.
You are required to apply to the personal data controller by primarily using the following communication channels in order for them to use their complaint rights as a personal data owner. No complaint can be made to the PPD Board without exhausting this way.
Your request is answered by our company as a data controller as soon as possible and within 30 days at the latest, depending on the nature of the request.
In case where your application is rejected or the response is insufficient or your application is not answered in time, you can use the right to complain to the PPD Board or apply directly to the judiciary.
Application Address and contact information:
(DREAM WORLD )
OPTİMAL TURİZM SANAYİ TİCARET ANONİM ŞİRKETİ
ESKİHİSAR MAHALLESİ 9519. SOK. NO:13/1 MANAVGAT ANTALYA
E POSTA : [email protected]
Retention Period of Your Personal Data
Your personal data that are required to be processed with the above-mentioned methods and in line with the stated purposes are stored in the data inventory for the period specified by taking into account the timeout and the grace periods. In case where the reasons requiring the processing of your data disappear or when the mandatory periods for the processing of your data in accordance with the legislation have expired, they are deleted, destroyed or anonymized by using any of the methods of destruction at the latest in six-month periods by our company ex officio or within thirty days at the latest upon your request.
The deletion of your personal data is the process of making it inaccessible and unavailable in any way for the relevant users.
The destruction of your personal data is the process of making personal data inaccessible, retrieved and reusable by no one in any way.
The anonymization of your personal data is making the data unrelated to an identified or identifiable natural person, even by using appropriate techniques.
The transactions regarding the deletion, destruction and anonymization of your personal data are recorded. In the face of public requirements, these minutes are written for a period of 5 years.
We present to your information with our respect.
Identity of Data Controller
NAME / TITLE : OPTİMAL TURİZM SANAYİ TİCARET ANONİM ŞİRKETİ
ADDRESS : ESKİHİSAR MAHALLESİ 9519. SOK. NO:13/1
MERSİS NO : 0644082672400001
TAX OFFICE / NO : MANAVGAT 6440826724
