DISCLOSURE
TEXT
(For
Hotel Guests)
You may reach to the details regarding the
explanations taking place in this disclosure text that has prepared pursuant to
the Law on Protection of Personal Data (LPPD Law) numbered 6698 with LPPD
Policy which has prepared and brought into force in this accommodation facility
belonging to (DREAM WORLD) OPTİMAL TURİZM SANAYİ TİCARET ANONİM ŞİRKETİ as data
controller from the LPPD Policy and documents taking place in the attachments,
in this scope;
Your Personal Data Processed
Identity and Family Information [Name-surname, RFT Identity Number, Passport
Number, place of birth - date, marital status, profession, gender, name and
number of child, age and dates of birth, signature, register card with voucher
(travel card) information (accommodation card information), room type and
number, flight number, hotel hosted, accommodation dates and amount]
Contact Information [address, telephone number, e-mail address]
Location Information [Accommodation and location information]
Customer Transaction Information [(Vehicle license plate, survey form,
records, requests and instructions for product and service delivery,
photographs, wedding, special days of birth anniversary, call center records,
invoice, promissory note, check information, information on box office
receipts, order information, request information]
Physical Location Security Information [Entry-exit recording information, camera
and sound records of employees and visitors]
f) Transaction Security Information [IP address, hotspot records, password and
password information, website login and exit information, log and digital
traffic records]
Financial Information [bank account number, IBAN, Credit card number, CVC
code, expiry date]
Visual and Auditory Records and Information [Audio recordings, visual and auditory
records and information received through the call center]
Health Information [Information belonging to disability condition, blood
group information, chronic diseases, past diseases, asthma, diabetes, heart,
blood pressure diseases, personal health information, device and prosthesis
information used]
Collection Method of Your Personal Data and Legal
Reasons
Your personal data according to this disclosure text
are obtained in verbal, written and electronic form by third parties or by
means of information, documents and similar means transmitted by you with whom
we have contracted and served as a requirement of working with solution
partners that are in cooperation and contractual relationship with
non-automatic methods provided that it is part of the automatic or data
recording system.
Those data are able to be processed directly in the
presence of the following conditions where your explicit consent is not required because of your
express consent within the framework of the 5th article of the LPPD
Law numbered 6698. In this scope;
Stipulating in the laws clearly,
Being mandatory for the protection of himself/herself
or someone else's life or bodily integrity of a person who is unable to
disclose his/her consent due to actual impossibility or whose consent is not
legally become valid,
Being necessary to process personal data of the
parties to the agreement provided that it is directly related to the establishment
or performance of an agreement,
Being mandatory for the data controller to fulfill his/her
legal obligation,
Being made public by the person concerned,
Being mandatory of data processing for the
establishment, exercise or protection of a right,
Being mandatory of data processing for the legitimate
interests of the data controller provided that it does not harm the fundamental
rights and freedoms of the relevant person.
Your private personal data other than health and
sexual life are able to be processed in cases stipulated by laws based on your
express consent or in accordance with the provisions of the same article within
the scope of the 6th Article of the LPPD numbered 6698. In case
where you do not have your explicit consent, your personal data regarding
health and sexual life may be processed by the persons or authorized
institutions and organizations being under confidentiality obligation for the
protection of public health, and conducting preventive medicine, medical
diagnosis, treatment and care services.
Purpose of Processing Your Personal Data
Your personal data are processed within the purposes
shown below by considering the principles of retention for the required period
of time that are stipulated in the relevant legislation or required for the
purpose for which they are processed within the scope of being compliance with
the law and good faith, being accurate and up-to-date when necessary, processing
for specific, explicit and legitimate purposes, being connected, limited and measured
with the purpose of processing according to the 4th, 5th
and 6th Articles of the LPPD numbered 6698.
Executing Emergency Management Processes
Executing Information Security Processes
Executing Employee Candidate / Intern /
Student Selection and Placement Processes
Executing Employee Candidates' Application
Processes
Executing Employee Satisfaction and Loyalty
Processes
Fulfilling Obligations Arising From
Employment Contract And Legislation For Employees
Executing Fringe Benefits and Interests
Processes for Employees
Executing Audit / Ethical Activities
Planning and executing activities and organizations
such as training, seminars, congresses,
Executing Access Authorities
Executing Activities in Compliance with
Legislation
Executing Finance and Accounting Affairs
Executing Loyalty Process to Company /
Products / Services
Ensuring Physical Location Security
Executing Recruitment Processes
Following and Executing Legal Affairs
Executing Internal Audit / Investigation /
Intelligence Activities
Executing Communication Activities
Planning Human Resources Processes
Executing / Supervising Business Activities
Executing Occupational Health / Safety
Activities
Receiving and Evaluating Suggestions for
the Improvement of Business Processes
Executing Business Continuity Activities
Executing Logistics Activities
Executing Goods / Service Purchase
Processes
Executing Goods / Service After Sales
Support Services
Executing Goods / Service Sales Processes
Executing Goods / Service Production and
Operation Processes
Executing Customer Relationship Management
Processes
Executing Activities Intended to Customer,
Guest Satisfaction, Service Quality
Organization and Event Management
Executing Marketing Analysis Studies
Executing Performance Evaluation Processes
Executing Advertising / Campaign /
Promotion Processes
Executing Risk Management Processes
Executing Custody and Archive Activities
Executing Social Responsibility and Civil
Society Activities
Executing Agreement Processes, Fulfilling
the Obligations Assumed by the Performance of the Product and Service
Conditions Completely and Correctly
Executing Sponsorship Activities
Executing Strategic Planning Activities
Following Requests / Complaints
Ensuring Security of Movable Goods and
Resources
Executing Supply Chain Management Processes
Executing Wage Policy
Executing Marketing Process of Products /
Services
Ensuring Security of Data Controller Operations
Foreign Personnel Work and Residence Permit
Procedures
Executing Investment Processes
Executing Talent / Career Development
Activities
Giving Information to the Authorized
Persons, Institutions and Organizations
Executing Management Activities
Creating and Following Visitor Records
Fulfilling Safe Accommodation, Reservation,
Holiday Sales Procedures,
Using Surveys, Marketing and Advertising in
order to Share In Social Media And Other Environments
Ensuring public safety of customers,
employees and related third parties in the workplace,
Implementing first intervention, diagnosis
and treatment methods in case where health problems occur,
Conducting activities related to the business
and the workplace in accordance with the legislation, company policies and
procedures,
Planning and executing special day events and
activities such as celebration, party, birthday, marriage, wedding, engagement
and anniversary
Your personal data are not processed for purposes
other than those shown above. All kinds of technical and administrative
measures are taken by the enterprise to prevent the unlawful processing or
illegal access of personal data.
Transfer of Your Personal Data
Your personal data can be transferred in country or to
abroad in
the presence of the following conditions according to the 8th and 9th
articles of the LPPD numbered 6698.
The personal data taken due to the existence of the
circumstances in the 5th article of the LPPD numbered 6698 or in
line with your express consent can be transferred to the institutions and companies
by which it is cooperated, to the persons and institutions by which it is
interacted such as supplier and to third parties by and to whom it is received
service or provided service in accordance with the provisions of the 8th
and 9th articles of the Law in line with the above-mentioned
purposes and in order to carry-out the above-mentioned activities.
Your personal data regarding health can be transferred
without the explicit consent of the person concerned by the persons or
authorized institutions and organizations that are found under confidentiality
obligation in order to protect public health, to carry out preventive medicine,
medical diagnosis, treatment and care services, to plan and manage health
services and finance provided that adequate precautions are taken.
Provided that it is clearly stipulated in the laws;
that it is mandatory for the protection of life or physical integrity the
person who is unable to disclose their consent due to actual impossibility and whose
consent is not legally valid; that it is directly related to the establishment
or performance of a contract; that it is necessary to process personal data of
the parties to the contract; that it is mandatory for the data controller to
fulfill his/her legal obligation; that the data is made public; that data
processing is mandatory for the establishment, use or protection of a right;
and that it does not harm your fundamental rights and freedoms; in cases where
data processing is mandatory for the legitimate interests of the data
controller and moreover, for the purpose of protection of the public health,
preventive medicine, medical diagnosis, treatment and care services and planning
and management of health services and financing; on the condition that it is
fulfilled by the persons or authorized institutions and organizations that are
found under the obligation of secrecy; your personal data can be transferred
abroad without your express consent in case there is sufficient protection
abroad and there is not enough protection provided that the data controllers
found in Turkey and foreign country commit an adequate protection in written
form and there is permission of PPD Board.
The PPD Board can decide whether sufficient protection
in the foreign country is transferable abroad and transfer will be given
permission to abroad without your express consent in order to evaluate the international
agreements that Turkey is a party; the reciprocity condition for transferring
data between the country requesting the personal data with Turkey; the nature
of personal data and the purpose and duration of its processing regarding each
concrete personal data transfer; the relevant legislation and implementation of
the country where the personal data will be transferred; the measures
undertaken by the data controller in the country where the personal data will
be transferred or if needed by taking the opinions of the relevant institutions
and organizations. Your personal data can be only transferred to abroad with
the permission of Board by taking the opinion of the relevant public
institution or organization in cases where the interest of Turkey or you will
severely damage without prejudice to the provisions of international agreements.
In this scope your personal data can be transferred
To the authorized public institutions and
organizations,
To the company partners and officials,
To the business and solution partners,
To the supplier persons and companies,
To the real or legal persons with whom it is interacted
with the purposes specified below, in other words;
Executing Emergency Management Processes
Executing Information Security Processes
Executing Employee Candidate / Intern / Student
Selection and Placement Processes
Executing Employee Candidates' Application Processes
Executing Employee Satisfaction and Loyalty Processes
Fulfilling Work Contract for Employees and Obligations
Arising from Legislation
Executing Fringe Benefits and Interests Processes for
Employees
Executing Audit / Ethical Activities
Planning and executing activities and organizations
such as training, seminars, congresses,
Executing Access Authorities
Executing Activities in Compliance with Legislation
Executing Finance and Accounting Affairs
Executing Loyalty Processes to Company / Products /
Services
Ensuring Physical Location Security
Executing Assignment Processes
Following and Executing Legal Affairs
Executing Internal Audit / Investigation /
Intelligence Activities
Executing Communication Activities
Planning Human Resources Processes
Executing / Supervising Business Activities
Executing Occupational Health / Safety Activities
Receiving and Evaluating Suggestions Intended to the
Improvement of Business Processes
Executing Business Continuity Activities
Executing Logistics Activities
Executing Goods / Service Purchase Processes
Executing Goods / Service after Sales Support Services
Executing Goods / Service Sales Processes
Executing Goods / Service Production and Operation
Processes
Executing Customer Relationship Management Processes
Executing Activities Intended to Customer, Guest
Satisfaction, Service Quality
Organization and Event Management
Executing Marketing Analysis Studies
Executing Performance Organization and Event
Management Evaluation Processes
Executing Advertising / Campaign / Promotion Processes
Executing Risk Management Processes
Executing Custody and Archive Activities
Executing Social Responsibility and Civil Society
Activities
Executing Contract Processes, Fulfilling the
Obligations Assumed by the Performance of the Product and Service Conditions
Completely and Correctly
Executing Sponsorship Activities
Executing Strategic Planning Activities
Following Requests / Complaints
Ensuring Security of Movable Goods and Resources
Executing Supply Chain Management Processes
Executing Wage Policy
Executing Marketing Process of Products / Services
Ensuring Security of the Data Supervisor Operations
Foreign Personnel Work and Residence Permit Procedures
Executing Investment Processes
Executing Talent / Career Development Activities
Giving Information to the Authorized Persons,
Institutions and Organizations
Executing Management Activities
Creating and Following Visitor Records
Fulfilling Safe Accommodation, Reservation, Holiday
Sales Transactions,
Using Surveys, Marketing and Advertising in order to
Share In Social Media And Other Environments,
Ensuring public safety of customers, employees and
relevant third parties in the workplace,
Implementing first intervention, diagnosis and
treatment methods in case of health problems,
Carrying out the management and activities of the
business and the workplace in accordance with the legislation, company policies
and procedures,
Planning and executing special day events and
activities such as celebration, party, birthday, marriage, wedding, engagement
and anniversary.
Your Rights as a Personal Data Owner
The data owner, in other words, the relevant person
has right to
To learn whether personal data is processed or not,
To request information if personal data has been
processed,
To learn the purpose of processing personal data and
whether they are used appropriately for their purpose,
To know the third parties in the country or abroad to
whom personal data have been transferred,
To request correction of personal data in case of
incomplete or incorrect processing,
To request the deletion or destruction of personal
data within the framework of the conditions stipulated in the 7th Article
of the LPPD,
To request notification of the personal data that are
processed incorrectly and requested to be corrected and the personal data
requested to be destroyed to third parties to which it is transferred,
To object to the emergence of a result against the
person himself/herself by analyzing the processed data exclusively through automated
systems,
To request the compensation of the damage in case of
damage due to the illegal processing of personal data within the scope of law.
You are required to apply to the personal data
controller by primarily using the following communication channels in order for them
to use their complaint rights as a personal data owner. No complaint can be
made to the PPD Board without exhausting this way.
Your request is answered by our company as a data
controller as soon as possible and within 30 days at the latest, depending on
the nature of the request.
In case where your application is rejected or the
response is insufficient or your application is not answered in time, you can
use the right to complain to the PPD Board or apply directly to the judiciary.
Application Address and contact information:
(DREAM WORLD )
OPTİMAL TURİZM SANAYİ TİCARET
ANONİM ŞİRKETİ
ESKİHİSAR MAHALLESİ 9519. SOK.
NO:13/1 MANAVGAT ANTALYA
E POSTA : [email protected]
Retention Period of Your Personal Data
Your personal data that are required to be processed
with the above-mentioned methods and in line with the stated purposes are
stored in the data inventory for the period specified by taking into account
the timeout and the grace periods. In case where the reasons requiring the
processing of your data disappear or when the mandatory periods for the
processing of your data in accordance with the legislation have expired, they
are deleted, destroyed or anonymized by using any of the methods of destruction
at the latest in six-month periods by our company ex officio or within thirty
days at the latest upon your request.
The deletion of your personal data is the process of
making it inaccessible and unavailable in any way for the relevant users.
The destruction of your personal data is the process
of making personal data inaccessible, retrieved and reusable by no one in any
way.
The anonymization of your personal data is making the
data unrelated to an identified or identifiable natural person, even by using
appropriate techniques.
The transactions regarding the deletion, destruction
and anonymization of your personal data are recorded. In the face of public
requirements, these minutes are written for a period of 5 years.
We present to your information with our respect.
Identity of Data Controller
NAME / TITLE : OPTİMAL
TURİZM SANAYİ TİCARET ANONİM ŞİRKETİ
ADDRESS : ESKİHİSAR
MAHALLESİ 9519. SOK. NO:13/1
MERSİS NO : 0644082672400001
TAX OFFICE / NO : MANAVGAT 6440826724
