* This is an English translation. In case of any difference in meaning between the original Turkish text and the English translation, the Turkish text shall apply.

TERMS OF USE

UNDER THE PERSONAL DATA PROTECTION LAW NO. 6698 AND RELATED REGULATIONS

MAVİ BEYAZ OTELCİLİK TURİZM LTD. ŞTİ.

CLARIFICATION TEXT (V.1.1)

Muğla Chamber of Commerce Datça/907 register numbered, Datça Tax Office 613 069 2074 tax numbered and located at “Yaka Mahallesi Palamutbükü Sokak No:121 PALAMUTBÜKÜ/Datça/MUĞLA” Mavi Beyaz Otelcilik Turizm Ltd. Şti. (from now on referred to as “MAVİ BEYAZ”), 7 April 2016 date – 29677 published in the Official Gazette No. 6698 Personal Data Protection Law (hereinafter referred to as “KVKK”) is the data controller; As of 02.04.2018, this Clarification Text has been presented to your valuable information to fulfill the obligations specified in the article 10, KVKK.

According to the definitions made in KVKK, personal data refers to “all information about identified or identifiable natural person”; related person refers to “natural persons whose personal data are processed”; the processing of personal data refers to “any operation which is performed on personal data, wholly or partially by automated means or non-automated means which provided  that form part of a data filing system, such as collection, recording, storage, protection, alteration, adaptation, disclosure, transfer, retrieval, making available for collection, categorization, preventing the use.” We state that your data that you have transmitted to or obtained by Beyaz Mavi is not to be used to receive personal data,  your data is not to be processed/transmitted to third parties without your explicit consent or exceptional cases partaking in KVKK Article 5, and in this regard, all necessary administrative and technical measures are taken to ensure the appropriate level of security we declare. MAVİ BEYAZ can change/update this Clarification Text at different times. You can always access the current version of the Clarification Text via the web address www.otelmavibeyaz.com.

For What Purposes Do We Process Your Personal Data?

Personal data that you transmit to MAVİ BEYAZ or obtained by MAVİ BEYAZ can be processed by providing data security to completely fulfill commercial, financial, legal, and administrative obligations of MAVİ BEYAZ in the eyes of public and private legal entities, especially the Finance Department, County Police Departments/District Gendarmerie Command and the Department of Labour and Social Security Law,  to conduct their operations within the company and to provide business development/flow, to meet the demands of the customers and/or contractual obligations, to meet the obligations of information storage/reporting/disclosure, to execute advertising/promotional activities, to ensure workplace safety, to increase the standards of quality, to keep statistics and to determine promotional and commercial strategies according to these statistics.  To give examples for the purpose of processing personal data can be as following; billing arrangement, conducting the employees personal, legal and administrative process, processing of traffic that are entered by using username and password and the period of surfing the web to ensure data security, stating identification information, notification of occupational accidents, the execution of the recruitment process, the assurance of Public Health and safety, to respond to the demands of the customers in accordance with the law to provide your personal data processed for this purpose and to ensure the security of your data to be transferred in order to maintain/to be backed up, Occupational Health and safety measures and submitting for evaluations carried out by the public and private sectors, negotiating contracts, assuring the security of the people who come to visit and workplace and improving quality standards, creating the human resources policies, performance measurements, the celebration of special days, making announcements, identifying and reporting noncompliances with the contract or the law to the relevant authorities, answering questions/complaints/requests of yours.

Your data will be deleted or destroyed at your request or if these processing purposes are eliminated. In any case, personal data processing time shall not be less than the maximum periods stipulated in the relevant legislation.

To whom and for what purposes may your processed personal data be transferred?

By providing technical and administrative measures related to data safety, personal data that you have transmitted to MAVİ BEYAZ or obtained by MAVİ BEYAZ  may be transferred with your explicit consent or within the framework of Legal Exceptions and obligations in the country accordance to KVKK Article 8 to: completely fulfill commercial, financial, legal and administrative obligations of MAVİ BEYAZ in the eyes of the public and private legal entities especially Finance Department, County Police Departments/District Gendarmerie Command and the Department of Labour and Social Security Law, conduct their operations within the company, meet the demands of the customers and/or contractual obligations, to the company’s manager and employees in order to design or make decisions related to commercial or administrative strategies; to the third parties whose services are used either by contract or permanent, lawyers, bankers, shipping companies, inspection companies, inspectors, tourism companies, healthservice workers, technical support providers and limitedly to legally competent public institutions and organizations in the scope of the legal authorities’ claims of relevant public institutions in order to carry their operations and sometimes to prevent the loss of rights and in cases of legitimate interest.  To give examples for the purpose of processing personal data can be as following: making identity statement to security directorates/district gendarmerie command, sharing of accommodation costs with the banks via mail, notifying relevant public institutions and agencies in case of an accident at work, making Social Security statements in the recruitment process, transferring/backing up your personal data, which is processed in accordance with the law to maintain and provide personal data safety, passing of ID information of participants to the education institution within the frameworks of Occupational Health and safety education, negotiating contracts, sharing of employee data with the group compliances, identifying and reporting of noncompliances with the law or the contract to the relevant public entities, passing of the project staff’s personal documents to the customers in accordance with the demands of customers, passing of the ID information to tourism companies who work for travel planning, answering your question/compliance/requests.

Necessary technical and legal measures are taken to prevent right violations during data transfer to third parties. However, BEYAZ MAVİ is not responsible for violations arising from the third party’s data protection policies that received the personal data and which occurred under the third party’s responsibility.

The transfer of your personal data abroad is out of the question.

Method and legal reason for collecting your personal data?

In cases of your explicit consent or to; ensure complete fulfillment of legal/contractual obligations, sustain commercial and administrative operations within the scope of the law that regulates work and social life, fulfill legal obligations of MAVİ BEYAZ entirely and accurately; your personal data may be obtained through channels such as oral, written or in electronic media by various contracts, information and registration forms of any kind, surveys, job application forms, notification forms, social media applications, petitions forwarded by hand or by mail, payment processing, website, in-vehicle camera, and audio recordings for safety measures, business contracts, employment documents, and electronic mail addresses, security camera footage, and recorded phone calls to increase the quality standards.

What Are The Rights Of The Person Concerned Per The KVKK Article 11 And In What Way Are They Used?

Under the KVKK Article 11, you have the right to contact MAVİ BEYAZ at any time to request the following considerations regarding your personal data:

To know whether your personal data has been processed,

Request information if your personal data has been processed,

To know the purpose of processing your data and whether it is used by its purpose,

To know the third parties to whom your personal data is transferred at home or abroad,

Request correction of your personal data is incomplete or incorrectly processed,

Request that your personal data be deleted or destroyed if the reasons that require their processing disappear, even if your personal data is processed following legal regulations,

Request that the correction/deletion/destruction of your personal data corrected or deleted/destroyed by your request be notified to the third parties to whom they were transferred if they were transferred,

Object to the occurrence of a result against yourself by analyzing the processed data exclusively through automated systems,

Request removal of damages if your personal data is damaged due to unlawful processing.

To exercise your rights per the KVKK Article 11, complete the application form that you can access by clicking here  and submit a wet signed copy either in person or through a notary public to Mavi Beyaz Otelcilik Turizm Ltd. Şti. which is located in this address: “Yaka Mahallesi Palamutbükü Sokak No:121 PALAMUTBÜKÜ/DATÇA/MUĞLA” or sign this form with a secure electronic signature and send via mail to otelmavibeyaz@hs02.kep.tr. Suppose there is a different method that the Personal Data Protection Board may determine in the future concerning the application of the person concerned to the data controller. In that case, these methods will be announced by updating this clarification text. MAVİ BEYAZ will conclude your request free of charge as soon as possible and no later than 30 (thirty) days, depending on the request’s eligibility. However, if the transaction also requires a cost, the fee will be charged by MAVİ BEYAZ in the Personal Data Protection Board’s tariff set. If your request is accepted, the requirement will be fulfilled. However, if your application is rejected as a result of the examination and evaluation, you will be notified in writing or electronically along with the reason for the rejection. Detailed information about your rights to apply to the data manager and complain to the board is contained in KVKK Article 13 and the following articles. You may also forward your requests for changes or updates to your personal data to MAVİ BEYAZ as described above.