Personal Data Protection Policy

Home

This Policy for Protection and Processing of Personal Data (Layer Policy), Caf Travel Vip Turizm Tic. Ltd. Şti. (Kısaca COMPANY) shall be adopted in the processing and protection of personal data in accordance with the relevant provisions of the Personal Data Protection Law No. 6698 and reveals the principles to be considered at the application point. With this Policy, the Company undertakes to act in accordance with these Policy and procedures to be applied accordingly.

Oral

The main purpose of this Policy is to determine the principles of methods and processes for the Protection of Personal Data for compliance with the KVK Law. In this context, the Company will conduct the necessary regulations for compliance with the Policy and periodically conduct internal audit mechanisms in compliance with the Policy to ensure the continuity of compliance and shall take all necessary administrative and technical measures in terms of processing and protection of personal data.

POLITICS

The data processing activities performed by MNG Turizm, including the Company’s visitors, business connections, business partners, employees, suppliers, third parties, are under this Policy and are prepared by observing other legislation regarding personal data, including the Law and secondary regulations.

PRINCIPLES TO WORKING PERSONAL DATA

Personal data by the company will be processed by oral, written or electronic media with automatic or non-automatic methods, and the processing of personal data will be moved in accordance with the Constitution and KVK Law. It will also be loyal to a team principles in processing personal data. In this regard;

Personal data will be processed in accordance with the principles of proportionality and measured by the COMPANY, in accordance with the purpose of personal data as required. The processing of personal data that is not related to the realization of the purpose or does not require will be avoided.
Personal data will be processed by the COMPANY for certain, open, legitimate and legal reasons. Before processing personal data, personal data will be determined to be processed for which purpose by the COMPANY and in this context, personal data will be presented to the information of the data owners before processing, where necessary, explicit consent will be taken.
The company retains personal data only to the extent required in accordance with the time prescribed in the laws or the purpose of which they operate. In this context, if the personal data is set for the storage of personal data in the relevant legislation, it will be treated appropriate for this period, if a time is not determined, the personal data will be kept until the time required for the purpose they operate. Until now, personal data may be stored longer in order to create evidence in a possible legal dispute at the end of these periods, or to occur a dispute that may be partyed. In the detection of the retention period here, the period of time determined in the applicable laws shall be taken into account. Personal data stored in such a situation will only be accessed when it is necessary to use in the relevant legal dispute and will not be accessed for any other purpose. Personal data is deleted, destroyed or anonymized if any reasons require lice or processing of all these times. Personal data will not be stored with the possibility of using the future.
The company will update the relevant data in the event that the personal data to be complete, accurate, and current, will receive all necessary measures to make changes to the personal data of the data owner.
Special measures for the processing of personal data in the KVK Law. In this context, the processing of the personal data of the private nature shall be taken into account the special provisions prescribed in the KVK Law in terms of the processing of personal data and transfer to third parties and abroad, in addition to the above mentioned considerations, the special requirements for which the law is called will be carried out and the personal data processing activities will be carried out.
The necessary organizational systems will be designed to act in accordance with the regulations prescribed in Article 8 and 9 of the KVK Law, in order to transfer personal data to third parties abroad or abroad.

PROCESSING PERSONAL DATA

Personal data will be processed if the data holder is informed and the data owner has explicit consent. The rights to the data holder will be reported before receiving explicit consent in the framework of the Lighting Load and the explicit consent will be taken by means appropriate to KVK Regulations.

In cases where the processing of personal data is predicted without explicit consent under KVK regulations (KVKanunu Article 5.2 and Article 6.3), the COMPANY may process personal data without taking the explicit consent of the data owner. In this regard:

If a person who is unable to disclose his consent due to its impossibility, or does not recognize legal validity to his consent, and/or data ownership outside, in the protection of his life or body integrity,
If a contract is necessary to process personal data belonging to the parties of the contract, with the registration of the establishment, implementation, or termination of a contract,
If the processing of personal data is mandatory for the legal obligation of the COMPANY,
If personal data is assigned by the data owner,
If the processing of personal data without explicit consent is mandatory for the use or protection of a right,
If the data processing is mandatory for the legitimate interests of the Company, with the registration of the data owner not harm the basic rights and freedoms,
If the law is clearly predicted,

Personal data can be processed without explicit consent by the COMPANY.

WORKING PRIVATE PERSONAL DATA

Private qualified personal data is processed by MNG Turizm in accordance with the principles specified in this Policy and by taking all necessary administrative and technical measures, including methods to determine the Board of Directors, and in the presence of the following conditions:

Private quality personal data outside health and sexual life may be processed without express consent to the processing of personal data in the law, expressly predicted in the laws. Otherwise, the explicit consent of the data owner will be taken.
Private qualified personal data for health and sexual life, protection of public health, preventive physicianity, medical diagnosis, treatment and maintenance services, planning and management of financing with health care, under the obligation to store secret persons or by competent institutions and organizations that may be processed without express consent. Otherwise, the explicit consent of the data owner will be taken.

ACCEPTIONAL DATA

By taking the necessary security measures in accordance with the purposes of personal data processing, the company may transfer personal data of the personal data of the personal data and private qualified personal data to third parties (the third party companies, group companies, third parties, business partners and business connections, independent audit firms, law-authorised public institutions and organizations). The Company acts in accordance with the regulations prescribed in Article 8. of the Law.

Even if the personal data owner does not have explicit consent, personal data will be transferred to third parties, taking all necessary security measures, including the methods prescribed by our Company and the methods specified by the Board.

Obviously predicted in the laws of the activities relating to the transfer of personal data,
The establishment or compensation of a contract to be transferred by the Company of personal data is directly related to the correct and necessary,
The obligation to carry out the legal obligation of our Company,
The transfer of personal data by our Company in a limited way, provided that personal data is assigned by the data owner,
The transfer of personal data by the Company is mandatory for the establishment, use or protection of the Company or the rights of the data owner or third parties,
The Company must be mandatory for the legitimate interests of the Company, with the registration of the data owner not harm the basic rights and freedoms,
It is mandatory for the protection of the person himself or someone else’s life or body integrity, which is unable to disclose consent due to its impossibility.

Personal data shall not be transferred abroad without explicit consent of the person concerned as a rule. However, if there are conditions prescribed in Article 9 of the Law, third parties located abroad, but in countries where there is sufficient protection, or in countries where there is no adequate protection, personal data may be transferred outside the country without express consent in the circumstances of which the data responsible in the foreign country is written, and the personal data may be transferred outside the country without express consent in the status of the consent for the transfer of the Board.

TERMS AND CONDITIONS OF PERSONAL DATA

The company retains personal data in accordance with the required time and the minimum period prescribed in the relevant legal legislation. In this context, the Company first detects that the personal data in the relevant legislation has been predicted and predicted for a while, if a period is determined, this period is appropriate. The legal time is not available, but personal data is stored until the time required for the purpose they operate. Personal data is destroyed in accordance with periodic destruction periods or data-owning application at the end of specified storage times and with designated methods of destruction (extinguishing and/or anonymity).

LIGHTING LOAD ON PERSONAL DATA COFFEE

COMPANY 10 of KVK Law In accordance with the article, the data will be processed during obtaining personal data will lighten what data will be processed. The minimum considerations to be included in the KVK Law are counted:

The identity of the Company and its representative as a data controller,
What purpose the personal data will be processed,
Who and what purpose the personal data processed can be transferred,
Method and legal reasons for collecting personal data,
Rights with the owner of personal data
Learning whether personal data is processed,
Requesting information about it if the processing of personal data,
Learning the purpose of processing personal data and whether they are used in accordance with their purpose,
Knowing third parties to whom personal data is transferred inside or abroad,
If the personal data is missing or incorrectly processed by the COMPANY, they want to fix them and ask for the third parties to whom the personal data is transferred in this context,
Despite being processed in accordance with the provisions of the KVK Law and other applicable law, the purpose is to ask for the deletion, destruction or anonymize of personal data if the reasons that require processing of personal data to be evaluated within the principles of time and legislativeness, to request that the processing of personal data in this context is transferred to third parties,
In case of analysis of personal data exclusively through automated systems, the person object to the emergence of a result against himself,
To request that personal data is processed in violation of the law and to eliminate damage if harm is damaged.

When data owners want to use their rights and/or processes personal data, the Company may deliver their requests as a secure electronic signature to the e-mail address, which may vary from time to time, or still send their IDs to the mail address, which may vary below and time, or send them through noteer.

Data Officer: Caf Travel Vip Turizm Tic. Ltd. Home

Email: info@otelmarkt.com

Phone: +90 212 593 Mir Plaza No:31 / Aksu / Antalya / Turkey

The company will conclude the request in the shortest possible time and for free in thirty days. As a result of the evaluation, the applications required by accepting the COMPANY applications may be refused by means of electronic mail or mail. The personal data owner may complain to the KVK Board within 30 days in the event that the application is rejected, the answer given is insufficient or not answered in the period.