Protection of Personal Data

İLBAK TURİZM İŞLETMELERİ VE YATIRIM A.Ş. DISCLOSURE FORM

DISCLOSURE ON THE PROTECTION OF YOUR PERSONAL DATA


The personal data that are collected and processed by İlbak Turizm İşletmeleri ve Yatırım A.Ş. (“the Company” or “the Hotel”) are under the protection of the Company. İlbak Turizm İşletmeleri ve Yatırım A.Ş. processes the personal data within the scope of this Disclosure Form in accordance with the Law 6698 on the Protection of Personal Data (“the Privacy Law”), secondary regulations thereof, and and other statutory regulations on the protection of personal data.

Pursuant to the Privacy Law, the personal data shall mean any and all information that identify you or that make your identifiable. Your personal data that the Company processes, the processing purposes thereof, the recipient groups that they can be transferred to, method of collection, legal grounds, and your rights regarding the personal data in question are given below.

A- WEBSITE USERS (ONLINE VISITORS)


A.I. WHAT PERSONAL DATA ARE PROCESSED?
Your below-listed personal data can be processed if you visit our website:

  • Identity Details: Name, Surname;
  • Contact Details: Telephone number, email address, mailing address;
  • Your Process Security Details: IP address details, website visiting-leaving details.


A.II. PURPOSES OF PROCESSING YOUR PERSONAL DATA
You personal data can be processed for the following purposes in line with the statutory regulations:

  • Assessment of the user requests and suggestions;
  • Conduct of communication operations;
  • Fulfillment of the obligations that are assumed under the Law 5651;
  • Storage of your information that need to be kept under the relevant regulations; reproduction and backup thereof to prevent any loss of information; conduct of the consistency control of your data; taking the required technical and administrative measures for the security of our networks and your information; and
  • Fulfillment of the legal obligations as set forth or prescribed by the regulatory and supervisory authorities and statutory regulations and the conduct of legal proceedings and processes.


A.III. TRANSFER OF PERSONAL DATA
Your personal data can be shared with the local judicial authorities or law-enforcement officers where requested under the relevant regulations for such purposes that are set out under section A.II. of this Disclosure Form and in accordance with the Privacy Law provisions regarding the transfer of personal data.

A.IV. LEGAL GROUNDS FOR THE PROTECTION AND COLLECTION METHOD OF PERSONAL DATA
You personal data are processed via automatic or non-automatic methods by electronic means during your visit to our website on the basis of the reasons for compliance with laws, which are enumerated under the articles 5 and 8 of the Law and set out below, and for such purposes that are listed above.

  • Prescription by the statutory regulations that are applicable to the Company;
  • Mandatory processing of data in order for the Company to fulfill its legal obligations;
  • Having been made public by your part;
  • Obligation for the processing of data in order to establish, exercise, or protect a right; and
  • Obligation for the processing of data for the lawful benefits of the Company, providing that your fundamental rights and liberties are not damaged.


B- PHYSICAL VISITORS


B.I. WHAT PERSONAL DATA ARE PROCESSED? As a part of your visit to our Hotel, your name and surname, Personal ID Number, telephone number, email address, vehicle license place number, visitor entrance-exit details, camera records, and, where you request to have internet access, IP address and log entries for going online and offline are processed.

B.II. PURPOSES OF PROCESSING YOUR PERSONAL DATA
Your personal data can be processed for the following purposes where you visit our Hotel:

  • Ensuring security and taking required measured within the Hotel;
  • Reporting any crime or violation of laws to the competent authorities;
  • Making the wireless internet network accessible by our guests; and
  • Keeping the visitor register book.


B.III. TRANSFER OF THE PERSONAL DATA PROCESSED
Your personal data can be shared with the local judicial authorities or law-enforcement officers and, where requested, with the authorized persons and agencies and institutions under the relevant regulations for such purposes that are set out under section B.II. and in accordance with the Privacy Law provisions regarding the transfer of personal data.

B.IV. LEGAL GROUNDS FOR THE PROTECTION AND COLLECTION METHOD OF PERSONAL DATA
Where you visit our Hotel, your personal data are collected, stored, and processed physically, verbally, in writing, or via CCTV cameras for such purposes that are enumerated above on the basis of the reasons for compliance with law that are enumerated in articles 5 and 8 of the Privacy Law and set out below.

  • Prescription by the statutory regulations that are applicable to the Hotel;
  • Necessity to process the personal data of the contracting parties, providing that there is a direct connection with the drawing up or performance of a contract;
  • Mandatory processing of data in order for the Hotel to fulfill its legal obligations;
  • Obligation for the processing of data in order to establish, exercise, or protect a right; and
  • Obligation for the processing of data for the lawful benefits of the data controller, providing that the relevant person’s fundamental rights and liberties are not damaged.


C- AUTHORIZED OFFICERS OF SUPPLIERS


C.I. WHAT PERSONAL DATA ARE PROCESSED?
Your following personal data are processed in line with your relation with the Company:

  • Your Identity Details: Name and surname, place of birth, date of birth, driving license details, marital status details, passport number, military service details, personal ID number, tax ID number, nationality, mother’s and father’s names, signature;
  • Your Contact Details: Address details, email, telephone number, registered email address (KEP);
  • Your Personal Information: CV details, payroll details, registration number, educational background, employment - resignation certificate details, information on your wage/fringe benefits, performance and career development details, professional/personal competencies, disciplinary proceedings, job interview and employment details, registration number;
  • Your Legal Transaction Details: Information contained in the notices served on/received from judicial authorities and case file details;
  • Customer Transaction Information: Order and demand details and invoice-note payable-check details;
  • Your Physical Place Security Information: CCTV records and and records for entering and leaving the premises;
  • Your Transaction Security Information: User names, passwords, IP addresses, logs;
  • Your Financial Information: Bank, account, and card details, invoice and debt details, collection risk details, credit and risk details, asset information, income level details, and bank account details;
  • Your Professional Experience Information: Professional information, diploma details, information on the courses attended, vocational training details, and certificates;
  • Information on Your Audiovisual Records: Photographs, images, video records, voice records;
  • Your Physical Information: Your weight, length, and body size details and shoe size; and
  • Your Sensitive Personal Data: Your personal health data, blood group data, disability details, fingerprint data, and conviction and security measure details.


C.II. PURPOSES OF PROCESSING YOUR PERSONAL DATA
Your personal data that are obtained in the course of your relationship with the Company are processed for the following purposes.

  • Meeting the goods and services needs;
  • Conduct of the purchasing of goods and services;
  • Fulfillment of the contract processes;
  • Meeting the temporary personnel needs;
  • Management of the personnel training processes;
  • Allocation of the fringe benefits;
  • Follow-up of temporary personnel’s working hours;
  • Conduct of data processing;
  • Fulfillment of the accounting processes;
  • Conduct of the occupational health and safety processes;
  • Fulfillment of the statutory obligations as set forth under the regulations;
  • Conduct of field audits;
  • Management of emergency processes;
  • Fulfillment of tender processes;
  • Follow-up and conduct of legal affairs;
  • Grant of powers of attorney; and
  • Provision of information to the competent persons, agencies, and institutions.


C.III. TRANSFER OF PERSONAL DATA
Your personal data can be transferred to the local authorized persons, agencies and institutions, our local affiliates and subsidiaries, local group companies, subsidiaries, business associates, and banks; our foreign business associates, suppliers, affiliates and subsidiaries, and group companies to the extent required for the purposes that are set out under Section C.II of this Disclosure Form within the scope of the Privacy Law provisions on the transfer of personal data locally and abroad.

C. IV. LEGAL GROUNDS FOR THE PROTECTION AND COLLECTION METHOD OF PERSONAL DATA
The Company obtains your personal data from the companies, which provide us with supply services as a party to your labor contract, or, if you are employed at our Company, directly from you, from our business associates or legal authorities via internet, telephone, email, and physically, in writing, verbally, or through electronic channels and processes the same by automatic and non-automatic means for the aforesaid purposes and on the basis of the reasons for compliance with law as enumerated below and set forth under articles 5, 6, 8, and 9 of the Privacy Law.

  • Explicit prescription by the statutory regulations that are applicable to our Company;
  • Necessity to process the personal data of the contracting parties, providing that there is a direct connection with the drawing up or performance of a contract;
  • Disclosure by the relevant person to the general public;
  • Obligation for the fulfillment of the legal liabilities;
  • Obligation for the processing of data in order to establish, exercise, or protect a right; and
  • Obligation for the processing of data for the lawful benefits of the data controller, providing that the relevant person’s fundamental rights and liberties are not damaged.


Your sensitive personal data are collected, stored, and processed on the basis of the reasons for compliance with law as enumerated below:

  • Availability of your explicit consent;
  • However, the health-related personal data by the persons or authorized institutions and organizations that are subject to the confidentiality obligation for protecting the public health and for the purposes preventive medicine, medical diagnosis, treatment, and healthcare services and planning and management of the same.


D- BUSINESS ASSOCIATES’ AUTHORIZED OFFICIALS


D.I. WHAT PERSONAL DATA ARE PROCESSED?
Your following personal data are processed in line with your relation with the Company:

  • Your Identity Details: Name and surname, place of birth, date of birth, driving license details, marital status details, passport number, personal ID number, tax ID number, nationality, mother’s and father’s names, signature;
  • Your Contact Details: Address details, email, telephone number, registered email address (KEP);
  • Your Personal Information: CV details, payroll details, registration number, leaves used, educational background, employment - resignation certificate details, information on your wage/fringe benefits, performance and career development details, professional/personal competencies, disciplinary proceedings, job interview and employment details, registration number;
  • Your Legal Transaction Details: Information contained in the notices served on/received from judicial authorities and case file details;
  • Customer Transaction Information: Order and demand details and invoice-note payable-check details;
  • Your Physical Place Security Information: CCTV records and and records for entering and leaving the premises;
  • Your Risk Management Details: Information sought for the management of Commercial/Technical/Administrative risks;
  • Your Financial Information: Bank, account, and card details, invoice and debt details, collection risk details, credit and risk details, asset information, and income level details;
  • Your Professional Experience Information: Professional information, diploma details, information on the courses attended, vocational training details, and certificates;
  • Information on Your Audiovisual Records: Photographs, images, video records, voice records;
  • Your Physical Information: Your weight, length, and body size details and shoe size; and
  • Your Close Relative Details: The identity and contact details of your close relatives;
  • Your Sensitive Personal Data: Your health data, biometric data, data on conviction and security measures, information on your political views, and membership details of associations, unions, and foundations.


D.II. PURPOSES OF PROCESSING YOUR PERSONAL DATA
Your personal data that are obtained in the course of your relationship with the Company are processed for the following purposes.

  • Conduct of the sale of goods and services;
  • Conduct of the production and operational processes of goods and services;
  • Conduct of communication operations;
  • Fulfillment of the accounting processes;
  • Visits to agencies and organizations;
  • Identification of the potential agencies and organizations;
  • Fulfillment of the contract processes with the agencies and organizations;
  • Price offers to agencies and organizations;
  • Bookings for the name lists sent by the agencies and organizations;
  • Payment of the invoices of those organizations that receive commissions;
  • Inclusion of case files in the audit process;
  • Conduct of the occupational health and safety processes;
  • Conduct of the litigation and attachment proceedings;
  • Follow-up and conduct of legal affairs;
  • Participation in tenders;
  • Receipt of warnings letters;
  • Receipt of wage and third person attachment notices;
  • Conduct of brand registration and patenting processes;
  • Fulfillment of the contract processes;
  • Grant of powers of attorney; and
  • Provision of information to the competent persons, agencies, and institutions.


D.III. TRANSFER OF PERSONAL DATA
Your personal data can be transferred to the authorized public agencies and institutions, our local business associates, local suppliers, affiliates and subsidiaries, and group companies; our foreign affiliates and subsidiaries, suppliers, and group companies to the extent required for the purposes that are set out under Section D.II of this Disclosure Form within the scope of the Privacy Law provisions on the transfer of personal data locally and abroad.

D. IV. LEGAL GROUNDS FOR THE PROTECTION AND COLLECTION METHOD OF PERSONAL DATA
The Company obtains your personal data from the companies, which provide us with supply services as a party to your labor contract, or, if you are employed at our Company, directly from you, from our third persons and legal authorities via internet, telephone, email, and physically, in writing, verbally, or through electronic channels and processes the same by automatic and non-automatic means for the aforesaid purposes and on the basis of the reasons for compliance with law as enumerated below and set forth under articles 5, 6, 8, and 9 of the Privacy Law.

  • Availability of your explicit consent;
  • Explicit prescription by the statutory regulations that are applicable to our Company;
  • Necessity to process the personal data of the contracting parties and to fulfill the requirements of your contracts for the supply of the requested products and services, providing that there is a direct connection with the drawing up or performance of a contract;
  • Obligation for the fulfillment of the legal liabilities;
  • Obligation for the processing of data in order to establish, exercise, or protect a right; and
  • Obligation for the processing of data for the lawful benefits of the data controller, providing that the relevant person’s fundamental rights and liberties are not damaged.


Your sensitive personal data are collected, stored, and processed on the basis of the reasons for compliance with law as enumerated below:

  • Availability of your explicit consent;
  • However, the health-related personal data by the persons or authorized institutions and organizations that are subject to the confidentiality obligation for protecting the public health and for the purposes preventive medicine, medical diagnosis, treatment, and healthcare services and planning and management of the same.


E- CUSTOMERS


E.I. WHAT PERSONAL DATA ARE PROCESSED?
Your following personal data can be processed as a part of your relation with our Hotel:

  • Your Identity Details: Name and surname, place of birth, date of birth, driving license details, marital status details, passport number, personal ID number, tax ID number, nationality, mother’s and father’s names, signature;
  • Your Contact Details: Address details, email, telephone number;
  • Your Legal Transaction Details: Information contained in a case file and notices served on/received from judicial authorities;
  • Your Physical Place Security Information: CCTV records and and records for entering and leaving the premises;
  • Your Financial Information: Bank, account, and card details, invoice and debt details, collection risk details, credit and risk details, asset information, and income level details;
  • Your Professional Experience Information: Professional details;
  • Customer Transaction Information: Order details, demand details, and invoice, not payable, check details;
  • Your Satisfaction and Marketing Details: Information on your accommodation preferences;
  • Your Process Security Details: IP Address Details, password details, going online-offline details, log entries;
  • Your Audiovisual Records: Photographs, images, video records, voice records;
  • Your Vehicle Details: Your license plate details; and
  • Your Sensitive Personal Data: details of disability status.


E.II. PURPOSES OF PROCESSING YOUR PERSONAL DATA
Your personal data that relate to your relationship with our Hotel are processed for the following purposes.

  • To offer our guests the best services and to ensure customer satisfaction;
  • Conduct of the sale of services;
  • Conduct of post sales support for the services;
  • Fulfillment of the identity notification procedures;
  • Conduct of the reception procedures at the facility;
  • Pursuant to the Law on the Notification of Identity Certificates and relevant Regulations, the process for the registration of the Accommodation Certificate completed by our guests in the Accommodation Registration Book;
  • Conduct of the payment procedures;
  • Conduct of the e-invoice process;
  • Conduct of the transfer procedures upon request;
  • Conduct of customer satisfaction surveys;
  • Handling your requests and complaints;
  • Recording the additional consumptions during accommodation;
  • Recording the special requests of your preference during your stay;
  • Conduct of the advertising, campaigns, and promotions;
  • Delivery of the valet and car parking services;
  • Daily backup of all serves;
  • Offering internet services during your stay;
  • Planning and reporting of sales;
  • Delivery of booking confirmation documentation;
  • Conduct of online booking procedures;
  • Procedures for the lost or stolen items,
  • Fulfillment of the contract processes;
  • Preparation of daily room lists;
  • Taking the required health and safety measures at our hotel;
  • Follow-up and conduct of legal affairs;
  • Meeting the requests of official authorities; and
  • Provision of information to the competent persons, agencies, and institutions.


E. III. TRANSFER OF THE PERSONAL DATA PROCESSED
Your personal data can be transferred to the local authorized persons, agencies and institutions, business associates, suppliers and their authorized personnel, affiliates and subsidiaries, our group companies; our foreign business associates, suppliers, and group companies to the extent required for the purposes that are set out under Section E.II of this Disclosure Form within the scope of the Privacy Law provisions on the transfer of personal data locally and abroad.

E. IV. LEGAL GROUNDS FOR THE PROTECTION AND COLLECTION METHOD OF PERSONAL DATA
In line with your relationship with our Hotel, your personal data are received directly from you, from our business associates, and legal authorities via internet, telephone, email, or CCTV and physically, in writing, verbally, or through electronic channels and processed by automatic and non-automatic means for the aforesaid purposes and on the basis of the reasons for compliance with law as enumerated below and set forth under articles 5, 6, 8, and 9 of the Privacy Law.

  • Availability of explicit consent;
  • Explicit prescription by the statutory regulations that are applicable to our Hotel;
  • Necessity to process the personal data of the contracting parties and to fulfill the requirements of your contracts for the supply of the requested products and services, providing that there is a direct connection with the drawing up or performance of a contract;
  • Obligation for the fulfillment of the legal liabilities;
  • Obligation for the processing of data in order to establish, exercise, or protect a right; and
  • Obligation for the processing of data for the lawful benefits of the data controller, providing that the relevant person’s fundamental rights and liberties are not damaged.


Your sensitive personal data are collected, stored, and processed on the basis of your explicit consent.

F- POTENTIAL CUSTOMERS


F.I. WHAT PERSONAL DATA ARE PROCESSED?
Your following personal data are processed by our Company as a part of your relation with our Hotel:

  • Your Identity Details: Name and surname;
  • Your Contact Details: Email and telephone number;
  • Your Professional Experience Information: Professional details.


F.II. PURPOSES OF PROCESSING YOUR PERSONAL DATA
Your personal data that are obtained in the course of your relationship with our Hotel are processed for the following purposes.

  • Conduct of communication operations;
  • Conduct of bidding process for the services and products; and
  • Fulfillment of the promotional and marketing activities.


F. III. TRANSFER OF THE PERSONAL DATA PROCESSED
Your personal data can be transferred to the local authorized persons, agencies and institutions, our business associates, suppliers and their authorized personnel to the extent required for the purposes that are set out under Section E.II of this Disclosure Form within the scope of the Privacy Law provisions on the transfer of personal data locally and abroad.

F. IV. LEGAL GROUNDS FOR THE PROTECTION AND COLLECTION METHOD OF PERSONAL DATA
In line with your relationship with our Hotel, your personal data are received directly from you, from our business associates, and legal authorities via internet, telephone, and email and physically, in writing, verbally, or through electronic channels and processed by automatic and non-automatic means for the aforesaid purposes and on the basis of the reasons for compliance with law as enumerated below and set forth under articles 5, 8, and 9 of the Privacy Law.

  • Availability of explicit consent;
  • Requirement for our Hotel’s legal liabilities;
  • Necessity to process the personal data of the contracting parties, providing that there is a direct connection with the drawing up or performance of a contract; and
  • Obligation for the processing of data for the lawful benefits of the data controller, providing that the relevant person’s fundamental rights and liberties are not damaged.


G. YOUR RIGHTS FOR THE PROTECTION OF YOUR PERSONAL DATA


By applying our Company by the contact details given in the “Contact” section of this Disclosure Form, you are entitled

  • To learn if your personal data has been processed;
  • To request the relevant information should they have been processed;
  • To learn the processing purpose of your personal data and also the fact that if they have been used according to that purpose;
  • To know the third persons whom they are transferred locally or internationally;
  • To request the correction of any deficient and/or incorrect processing of personal data;
  • To request the deletion or destruction of your personal data within the framework of the conditions prescribed under the Privacy Law;
  • To request the notification of third persons, whom the personal data were transferred, about the procedures that are done in line with your aforesaid correction, deletion, and destruction rights;
  • To object any negative result arising against you in consequence of the analysis of your processed data exclusively via automatic systems; and
  • To request the compensation of any loss, if any, incurred by you as a result of the unlawful processing of your personal data.


H. CONTACT DETAILS FOR THE EXERCISE OF YOUR RIGHTS AND REQUESTS


You can serve your questions and requests on your personal data personally with an identification process or through a notary public office at Oruçreis, Tekstilciler Cd. No:3, 34235 Esenler/Istanbul address together with an application letter issued according to the Communiqué on the Guidelines for Applying Data Controllers. Besides, you can send the same at the registered electronic mail (KEP) address of ilbakturizm@hs03.kep.tr or kvkk@ramadaplazatekstilkent.com electronic mail address with a secure electronic signature or mobile signature by using the electronic mail address that was previously notified to and confirmed by our company and included in our corporate system.

I. ABOUT THE DISCLOSURE FORM


This Disclosure Form shall become effective on the date of its release by the Hotel. The Hotel may, at any time, modify this Disclosure Form as necessary. Changes to be made by the Hotel shall become effective upon release of the Disclosure Form at www.ramadaplazatekstilkent.com.
+90(212) 443 03 03