Privacy Notice Regarding Website, Email and Social Media Communications

Article 1: Data Controller

As ASF Otelcilik ve Turizm İşletmeleri Ticaret A.Ş. (“Hotel”), pursuant to Article 10 of the Law on the Protection of Personal Data No. 6698 (“Law”), we hereby present this Privacy Notice, which has been specifically prepared for communications carried out via our Company-owned website domains, electronic mail addresses, and social media accounts, for the information of the public and the relevant data subjects.

Article 2: Processed Personal Data and Purposes of Processing

For the purposes of carrying out communication activities, monitoring and resolving requests and complaints, conducting goods and services sales and procurement processes, and managing information security processes, our Company processes your Identity data (name and surname), Contact data (email address, social media accounts), other personal data included in the communications sent by you, as well as your IP address, log records, and location data collected during your visit to our website with the domain themuseumhotelantakya.com.

Article 3: Parties to Whom Personal Data May Be Transferred and Purposes of Transfer

Your processed personal data may be transferred to authorized public institutions and organizations for the purpose of fulfilling legal obligations, in cases where such data is requested by competent authorities or where disclosure is mandatory.

In addition, in accordance with Articles 8 and 9 of the Law, personal data processed during visits to our website may be shared with our suppliers, including outsourced service providers and hosting service providers, for the purposes of carrying out information security processes and conducting storage and archiving activities.

Furthermore, your personal data may be shared on a limited basis with suppliers or customers for the purposes of evaluating and resolving requests, demands, complaints, or inquiries submitted to us.

Article 4: Methods of Collecting Personal Data and Legal Grounds

Your personal data are processed by automatic means, provided that they form part of a data recording system, through sending communications to our electronic mail addresses, visiting our website, submitting messages via the contact form on our website, and through your social media messages.

The legal ground for the collection and processing of personal data is set forth in Article 5 of the Law on the Protection of Personal Data, namely:

“Processing of personal data is mandatory for the legitimate interests of the data controller, provided that such processing does not harm the fundamental rights and freedoms of the data subject.”

Personal data included in the emails sent by you that cannot be processed based on the legal grounds specified in Article 5 of the Law are processed based on the legal ground of explicit consent of the data subject.

Article 5: Rights of the Data Subject

The natural person whose personal data are processed is defined as the data subject. By applying to the Company, the data subject has the following rights:

  • To learn whether personal data are processed
  • To request information if personal data have been processed
  • To learn the purpose of processing personal data and whether they are used in accordance with such purpose
  • To know the third parties to whom personal data are transferred domestically or abroad
  • To request the correction of personal data if they are processed incompletely or inaccurately
  • To request the deletion or destruction of personal data
  • To request notification of the transactions carried out pursuant to the above items to third parties to whom personal data have been transferred
  • To object to the occurrence of a result against the data subject arising from the analysis of processed data exclusively through automated systems
  • To request compensation for damages in case of loss arising from the unlawful processing of personal data

 

Pursuant to Article 11 of the Law No. 6698 titled “Rights of the Data Subject” and the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit your requests together with information identifying your identity and explanations regarding the rights you wish to exercise:

In writing or electronically via the Contact Form available at
themuseumhotelantakya.com/iletisim,

By sending an email to asfotell@hs01.kep.tr
, or

From the verified email address associated with your membership to
kvkk@themuseumhotelantakya.com
,
with the subject line “Request for Information Regarding Personal Data.”

Detailed information is available in the Application Form on themuseumhotelantakya.com.

You may access the KVKK Application Form by clicking the link below:

KVKK APPLICATION FORM