Information Notice on the Protection and Processing of Personal Data

ASKA MILL TURİZM LİMİTED ŞİRKETİ
Information Notice on the Protection and Processing of Personal Data

As ASKA MILL TURİZM LİMİTED ŞİRKETİ, we attach importance to the security of your personal data within the scope of the Personal Data Protection Law No. 6698 (“KVKK”). This Information Notice has been prepared regarding the processing of personal data of our guests, persons making reservations, visitors, supplier/business partner representatives, and persons who contact us within the scope of our hotel and accommodation services.

1. Data Controller

Your personal data is processed by ASKA MILL TURİZM LİMİTED ŞİRKETİ, acting as the data controller, within the scope of the purposes and legal grounds explained below.

Company Title: ASKA MILL TURİZM LİMİTED ŞİRKETİ
Address: Tekelli Mah. Divanlı Sok. No: 20 Uçhisar, Nevşehir
E-mail: [email protected]
Telephone: +90 384 219 22 88
MERSIS / Tax No: 086 049 1449

2. Personal Data Processed

Within the scope of our hotel services, the following personal data may be processed:

Identity information: Name, surname, Turkish Republic identity number, passport number, nationality, date of birth, identity/passport information, signature.

Contact information: Telephone number, e-mail address, address information.

Reservation and accommodation information: Check-in and check-out dates, room number, accommodation preferences, reservation number, agency/channel information, special requests, accommodation history.

Financial information: Payment information, invoice information, current account records, authorization and collection information.

Visual and audio records: Camera recordings obtained for security purposes in common areas of the hotel.

Vehicle information: Vehicle license plate information if parking service is provided.

Transaction security information: IP address, internet access records, log records, system usage records.

Request and complaint information: Contents of requests, suggestions and complaints submitted by call, e-mail, form, social media or face-to-face communication.

Special categories of personal data: Where your explicit consent is available or where provided for by law, information such as health, disability, allergies and dietary preferences may be processed to the extent necessary for the safe and appropriate provision of accommodation services. Such information is processed only to the extent necessary and for limited purposes.

3. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

Providing accommodation and hotel services, carrying out reservation procedures, keeping guest check-in and check-out records, fulfilling identity notification obligations, conducting invoice and payment procedures, managing customer relations and satisfaction processes, evaluating requests and complaints, ensuring hotel security, fulfilling legal obligations, providing information to authorized public institutions and organizations, carrying out information security processes, keeping internet access records, improving service quality, conducting supplier and business partner processes, following up legal disputes, and carrying out company activities in compliance with the legislation.

If your explicit consent is obtained, your personal data may also be processed for campaign, promotion, marketing, satisfaction survey and commercial electronic communication purposes.

4. Methods of Collecting Personal Data

Your personal data may be collected directly from you through reservation forms, hotel registration records, presentation of identity/passport, telephone, e-mail, website, online reservation platforms, agencies, call center, social media accounts, camera recording systems, payment systems, wireless internet usage systems and similar channels, in physical or electronic environments.

5. Legal Grounds for Processing Personal Data

Your personal data is processed based on the following legal grounds set out in Articles 5 and 6 of the KVKK:

It is explicitly provided for by law; it is directly related to the establishment or performance of a contract; it is necessary for the data controller to fulfill its legal obligation; data processing is mandatory for the establishment, exercise or protection of a right; data processing is mandatory for the legitimate interests of our company, provided that it does not harm the fundamental rights and freedoms of the data subject; and, where necessary, your explicit consent is obtained.

Your special categories of personal data are processed only in accordance with the conditions specified under the KVKK and by taking the necessary technical and administrative measures.

6. Persons and Organizations to Whom Personal Data May Be Transferred and Purposes of Transfer

Your personal data may be shared, limited to the purposes stated above, with the following persons and organizations:

Authorized public institutions and organizations, law enforcement units, courts and enforcement offices, certified public accountants and independent auditors, banks and payment institutions, reservation systems, agencies, online reservation platforms, software and information technology service providers, security service providers, legal advisors, suppliers, business partners and third-party service providers.

Personal data is transferred only in a manner connected with, limited to and proportionate to the purpose of processing. If systems requiring the transfer of data abroad are used, such transfer is carried out in accordance with the conditions stipulated under the KVKK.

7. Camera Recordings

Camera recordings may be obtained in the common areas of our hotel for the purposes of ensuring security, protecting guests and employees, preventing legal disputes and ensuring facility security. Camera recordings are stored in a manner accessible only by authorized persons and are deleted, destroyed or anonymized at the end of the period required by the legislation.

Information signs are also placed in areas where camera recording is carried out. Camera recording is not conducted in private areas in a manner that would violate personal privacy.

8. Internet Usage Records

If wireless internet service is provided to our guests, internet access records and log information may be processed in accordance with the relevant legislation. Such data is stored in a limited manner for the purposes of fulfilling legal obligations and ensuring information security.

9. Retention Periods

Your personal data is retained for the periods stipulated under the relevant legislation and for the period required by the purpose of processing. When the retention period expires or the purpose of processing ceases to exist, your personal data is deleted, destroyed or anonymized.

10. Your Rights as a Data Subject

Within the scope of Article 11 of the KVKK, you have the following rights:

To learn whether your personal data is being processed; to request information if it has been processed; to learn the purpose of processing and whether it is used in accordance with such purpose; to know the third parties to whom it is transferred domestically or abroad; to request correction if it has been processed incompletely or inaccurately; to request deletion or destruction within the framework of the conditions stipulated under the KVKK; to request notification of correction/deletion/destruction operations to third parties to whom the data has been transferred; to object to the occurrence of a result against you through analysis exclusively by automated systems; and to request compensation for damages if you suffer damage due to unlawful processing.

11. Application Method

You may submit your requests under the KVKK to our company through the following methods:

By hand or through a notary public: Tekelli Mah. Divanlı Sok. No: 20 Uçhisar, Nevşehir
By e-mail: [email protected]

Your application must include your name and surname, Turkish Republic identity number or passport number, contact details, the subject of your request and information that enables verification of your identity. Your applications will be concluded as soon as possible and within the legal period at the latest, depending on the nature of the request.

12. Cases Requiring Explicit Consent

Your explicit consent may be requested separately in the following cases:

Promotion, campaign and marketing activities, sending commercial electronic communications, processing special categories of personal data, non-mandatory accommodation preferences, and the use of certain digital systems requiring data transfer abroad.

Failure to provide explicit consent does not prevent you from benefiting from basic accommodation services; however, it may not be possible for you to benefit from additional services subject to explicit consent.