Personal Data Protection Policy

Your personal data (such as name, surname, date of birth, mobile phone number, e-mail, gender, address, occupation, education, marital status, vehicle license plate, identity information, accommodation and expenditure information, boat/transportation/travel information, insurance, boat crew information, social media accounts shopping information, billing information) that you have shared with us with your own will and volition are processed in order to provide you with better service. In addition, within the framework of our legal obligations arising from the relevant legislation, especially the Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed through These Publications and related legislation, the Law No. 6563 on the Regulation of Electronic Commerce and related legislation, the Turkish Penal Code No. 5237 and the Law No. 6698 on the Protection of Personal Data; Your personal data is also processed in order to ensure that the said purposes and legal obligations can be fulfilled. As it has been the case so far, your personal data will be processed and stored by taking information security measures, provided that they are not used outside the purposes and scope specified in this Personal Data Protection Policy, based on your explicit consent, without prejudice to the exceptions set out in Articles 5 and 6 of the Personal Data Protection Law.

By applying to our company, your personal data;

a) to learn whether your personal data is processed or not,

b) request information if processed,

c) to learn the purpose of processing and whether it is used in accordance with its purpose,

d) to know the third parties to whom it is transferred domestically/overseas,

d) request correction if incomplete/incorrectly processed,

e) To request deletion/destruction within the framework of the conditions stipulated in Article 7 of the Law No. 6698 on the Protection of Personal Data,

f) to request the third parties to whom it is transferred to be notified of the transactions made pursuant to subparagraphs (d) and (e) above,

g) object to the occurrence of a result to your detriment due to analysis exclusively by automated systems,

ğ) you have the right to demand the compensation of the damage in case you suffer damage due to unlawful processing.

You can use your rights you have in accordance with Article 11 of Law No. 6698 as stated above by contacting [email protected] e-mail address.

Your personal data is stored for the periods stipulated in the relevant legislation.

The User/Users acknowledge and declare that they are aware that it is important that the information they share on the website is accurate and kept up to date in order to exercise the rights they have on their personal data in terms of the Law No. 6698 on the Protection of Personal Data and other relevant legislation and that the responsibilities arising from providing incorrect information will be entirely their own. You can make changes and/or updates regarding your personal data you have shared by contacting [email protected] e-mail address.

Your personal data processed for the purposes specified in this Personal Data Protection Policy will continue to be anonymized and used by us when the purpose requiring its processing according to Article 7/1 of Law No. 6698 disappears and the periods determined by the law expire. You always have the right to withdraw your explicit consent regarding the processing and use of your personal data. In order to withdraw your explicit consent, you can send an e-mail to [email protected] at any time.

Our Company may make changes to this Personal Data Protection Policy document at any time. These changes become effective immediately upon the posting of the new amended Personal Data Protection Policy on the website "www.surahotels.com". In order for you to be informed about the changes in this Personal Data Protection Policy, necessary information will be provided to you.

User/Users irrevocably accept, declare and undertake that they have read the above-mentioned Personal Data Protection Policy before entering the website, that they will comply with all the above-mentioned issues, and that the contents of the website and all electronic media and computer records of our Company will be deemed as conclusive evidence in accordance with Article 193 of the Code of Civil Procedure.

Within the scope of Law No. 6698 on the Protection of Personal Data, I hereby authorize my personal data to be collected, recorded, processed, stored, used and transferred/shared to third parties for the same purposes by your Company within the framework of the law and the above principles.

a. Identity of the data controller and its representative, if any;

This information is provided in order to fulfill the obligation of "İPEKYOLU KUYUMCULUK KIYMETLI TAŞLAR TURİZM OTELCİLİK SANAYİ VE TİCARET LİMİTED ŞİRKETİ", as the Data Controller, to inform its business partners, shareholders, other companies under the umbrella of the group of companies, customers, real or legal persons with whom it communicates within the scope of the Personal Data Protection Law No. 6698 ("KVKK").

b. The purpose for which personal data will be processed;

Your personal data (such as name, surname, date of birth, mobile phone number, e-mail, gender, address, profession, education, marital status, vehicle license plate, identity information, accommodation and expenditure information, boat/transportation/travel information, insurance, social media accounts, shopping information, billing information, consumption preferences) may vary depending on the service, product or commercial activity provided by our Company; may be collected verbally, in writing or electronically by automatic or non-automatic methods, offices, branches, dealers, call center, website, social media channels, mobile applications and similar means. Your personal data may be processed by being created and updated as long as you benefit from the products and services of our Company. In addition, your personal data may be processed when you use our call center or our website with the intention of using Company services, when you visit our Company or our website, when you participate in trainings, seminars or organizations organized by our Company. Your collected personal data will be processed within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVK Law for the purposes of carrying out the necessary work by our business units to benefit you from the products and services offered by our Company, customizing the products and services offered by our Company according to your tastes, usage habits and needs, ensuring the legal and commercial security of our Company and the persons who have a business relationship with our Company (administrative operations for communication carried out by our Company, ensuring the physical security and supervision of the Company's locations, business partner/customer/supplier (authorized or employees) evaluation processes, legal compliance process, financial affairs, etc.), determining and implementing our Company's commercial and business strategies and ensuring the execution of our Company's human resources policies. b.) It will be processed within the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVK Law for the purposes of determining and implementing the commercial and business strategies of our Company and ensuring the execution of our Company's human resources policies.

c. To whom and for what purpose the processed personal data may be transferred,

Your personal data collected; Carrying out the necessary work by our business units in order to benefit you from the products and services offered by our Company, customizing the products and services offered by our Company according to your tastes, usage habits and needs, ensuring the legal and commercial security of our Company and the persons who have a business relationship with our Company (administrative operations for communication carried out by our Company, ensuring the physical security and control of the Company's locations, business partner / customer / supplier (authorized or employees) evaluation processes, legal compliance process, financial affairs, etc.), determining and implementing our Company's commercial and business strategies and ensuring the execution of our Company's human resources policies. b.), to our business partners, suppliers, other companies under our group of companies, shareholders, legally authorized public institutions and private persons for the purposes of determining and implementing our Company's commercial and business strategies and ensuring the execution of our Company's human resources policies, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVK Law. The method and legal reason for collecting personal data, Your personal data is obtained in all kinds of verbal, written or electronic media in order to provide the products and services offered by the Company within the legal framework determined in line with the above-mentioned purposes and to fulfill our Company's contractual and legal obligations in a complete and accurate manner. Your personal data collected for this legal reason can also be processed and transferred for the purposes specified in Articles (1) and (2) of this text within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVK Law.

d. Rights of the Data Subject,

Within the scope of KVKK, you have the following rights regarding your personal data: - To learn whether personal data has been processed,- To request information if personal data has been processed,- To learn the purpose of processing personal data and whether they are used in accordance with their purpose,- To know the third parties to whom personal data is transferred domestically or abroad,- To request correction of personal data in case of incomplete or incorrect processing,- In case the reasons requiring the processing of your personal data disappear, To request the deletion or destruction of data, - To request that your information corrected or deleted upon your request be notified to third parties to whom personal data has been transferred, if transferred, - To object to the occurrence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems, - To request compensation for damages in case of damage due to unlawful processing of personal data. In order to exercise your above-mentioned rights, you must submit your written request together with the necessary information identifying your identity and your explanations regarding the right you wish to exercise through a notary public or by registered mail with return receipt requested to "Alemdar Mah. Ticarethane Sok. No:13/1 Fatih-İSTANBUL" address with wet signature or to our registered e-mail address [email protected] signed with secure electronic signature. In the application that you have as a personal data owner and that you will make in order to exercise your rights mentioned above and that includes your explanations regarding the right you request to exercise; the matter you request must be clear and understandable, the subject you request must be related to your person or if you are acting on behalf of someone else, you must be specifically authorized in this regard and document your authority, the application must contain identity and address information and documents certifying your identity must be attached to the application. The applications you will make in this context will be finalized as soon as possible and within 30 days at most. These applications are currently free of charge. However, if the transaction requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be charged.