Terms of Use

MAVİ BEYAZ OTELCİLİK TURİZM LTD. ŞTİ .

Privacy Notice (V.1.1)

1. Data Controller

The data controller responsible for the processing of your personal data is Mavi Beyaz Otelcilik Turizm Ltd. Şti., registered with Muğla Chamber of Commerce under registration number Datça/907, with tax number 613 069 2074, located at Yaka Mahallesi Palamutbükü Sokak No:121 PALAMUTBÜKÜ/DATÇA/MUĞLA (hereinafter referred to as “MAVI BEYAZ”). MAVI BEYAZ is the data controller under the Personal Data Protection Law No. 6698 (hereinafter referred to as “KVKK”), which came into force with its publication in the Official Gazette dated April 7, 2016, issue number 29677. This Privacy Notice is provided to you in accordance with Article 10 of the KVKK as of April 2, 2018.

According to the definitions in KVKK, personal data refers to “any information relating to an identified or identifiable natural person”; the data subject refers to “the natural person whose personal data is processed”; and the processing of personal data refers to “any operation carried out on personal data, whether or not by automated means, such as obtaining, recording, storing, preserving, altering, organizing, disclosing, transmitting, transferring, acquiring, making available, classifying, or preventing its use.”

MAVI BEYAZ declares that your personal data, which you have provided to MAVI BEYAZ or which has been obtained by MAVI BEYAZ, will not be used outside of the purposes for which it was collected, and that your personal data will not be processed or transferred to third parties without your explicit consent or in the absence of any of the exceptions listed in Article 5 of the KVKK. Furthermore, MAVI BEYAZ assures that all necessary administrative and technical measures have been taken to ensure the appropriate security level regarding the processing of your personal data. Please note that MAVI BEYAZ may make changes or updates to this Privacy Notice. The most current version of the Privacy Notice can be accessed at any time on the website www.otelmavibeyaz.com.

2. Purpose of Processing Your Personal Data

Your personal data provided to MAVI BEYAZ or collected by MAVI BEYAZ may be processed for the following purposes:

• To fulfill MAVI BEYAZ’s commercial, financial, legal, and administrative obligations and activities before public and private legal entities such as the Ministry of Finance, local police departments, local gendarmerie, and Ministry of Labor and Social Security.

• To conduct internal operations, ensure business development and flow, respond to customer requests, and fulfill contractual obligations.

• To comply with reporting, storage, and information disclosure obligations.

• To conduct advertising and promotional activities, ensure workplace security, improve quality standards, keep statistics, and determine promotional and commercial strategies based on these statistics.

Examples of data processing include invoice issuance, handling employee records and legal processes, processing actions performed through user login using usernames and passwords on platforms, internet browsing duration, identity notifications, accident notifications, recruitment processes, ensuring public health and safety, responding to customer requests, securing processed personal data in compliance with the law, and protecting data through secure storage and backup systems.

Personal data will be deleted or destroyed upon request or automatically when the purpose of processing is fully eliminated. The duration of data processing will not be less than the maximum periods prescribed by relevant regulations.

3. Who May Personal Data Be Transferred To and For What Purposes?

Your personal data may be shared, with your explicit consent or based on legal exceptions and obligations, in accordance with Article 8 of KVKK within the country. This sharing may involve public and private legal entities such as the Ministry of Finance, local police departments, local gendarmerie, Ministry of Labor and Social Security, and the company’s directors and employees. Data may also be shared with third parties when required for the fulfillment of MAVI BEYAZ’s obligations, including lawyers, banks, courier companies, auditing companies, inspectors, tourism companies, health workers, and technical support providers.

Examples of data sharing include:

• Identity notifications to police departments/local gendarmerie,

• Sharing of accommodation fees with banks via mail order,

• Reporting of work accidents to relevant public institutions,

• Social security notifications during recruitment processes,

• Ensuring the security of your personal data in accordance with the law and maintaining its backup.

MAVI BEYAZ ensures that all necessary technical and legal measures are in place to prevent violations of your rights when transferring personal data to third parties. However, MAVI BEYAZ is not responsible for any violations caused by the data protection policies of the third parties receiving the data.

4. Method and Legal Basis for Collecting Your Personal Data

Your personal data may be collected through various means such as forms, surveys, job application forms, notifications, social media applications, letters sent by hand or by mail, payment transactions, website, security camera recordings, email addresses, and telephone calls. This data collection is conducted in accordance with MAVI BEYAZ’s legal and contractual obligations and the laws regulating business and social life.

5. Your Rights Under Article 11 of the KVKK

Under Article 11 of KVKK, you have the right to request:

• Whether your personal data is processed,

• If your data is processed, you may request information about it,

• The purpose of data processing and whether it is used for its intended purpose,

• Information on third parties to whom your personal data has been transferred,

• Correction of any incomplete or inaccurate data,

• Deletion or destruction of your personal data if the reasons for processing no longer exist,

• Notification to third parties regarding any corrections or deletions of your personal data, if applicable,

• Objection to any result arising from the solely automated processing of your data,

• Compensation for any damages caused by the unlawful processing of your personal data.

To exercise your rights under Article 11, please fill out the application form, which can be accessed by clicking here, and send the signed hard copy to Mavi Beyaz Otelcilik Turizm Ltd. Şti., Yaka Mahallesi Palamutbükü Sokak No:121 PALAMUTBÜKÜ/DATÇA/MUĞLA by hand or via notary, or submit it with a secure electronic signature to the email address otelmavibeyaz@hs02.kep.tr.

MAVI BEYAZ will respond to your request as soon as possible and no later than 30 days, free of charge. If the request requires additional cost, a fee will be charged in accordance with the tariff set by the Personal Data Protection Board.

In case of a rejection of your request, MAVI BEYAZ will provide a written or electronic explanation with the reason for rejection. Detailed information on how to apply to the data controller and your complaint rights with the Personal Data Protection Board is outlined in Articles 13 and the following articles of KVKK.

Additionally, any requests for changes or updates to your personal data should be submitted to MAVI BEYAZ in the manner outlined above.