KVKK CLARIFICATION TEXT
Personal Data Protection and Processing Policy
As Tek-Art İnşaat Ticaret Turizm Sanayi ve Yatırımlar Anonim Şirketi ("Company"), we show maximum sensitivity to the security of your personal data. With this awareness, we attach great importance to the processing and storage of all kinds of personal data belonging to all persons associated with the Company, including those who benefit from our products and services as the Company, in accordance with the Personal Data Protection Law No. 6698 ("KVK Law"). With the full realisation of this responsibility, we process your personal data as "Data Controller" as defined in the KVK Law, as explained below and within the limits prescribed by the legislation.

The protection of personal data is among the fundamental policies of our Company and our Company has given priority importance to the confidentiality of personal data throughout its existence, adopted this as a working principle and instructed its employees to work in line with this principle. Our company accepts and undertakes to comply with all the responsibilities imposed by the KVK Law. With full awareness of this responsibility and in the capacity of Data Controller, we process, record, transfer, share and store your personal data as explained below and within the limits prescribed by the official legislation.

Our Company reserves the right to update this "Clarification Text on the Protection of Personal Data" at any time within the framework of changes that may be made in the applicable official legislation.

Collection, Processing and Processing Purposes of Personal Data:
Our Company's policy on the Protection and Confidentiality of Personal Data has been prepared in accordance with the KVK Law. Within this framework, although your personal data may vary depending on the services, products or commercial activities provided by our Company; It may be collected verbally, in writing or electronically by automatic or non-automatic methods, offices, branches, dealers, call centre, website, social media channels, mobile applications and similar tools. As long as you benefit from the products and services of our Company, your personal data may be processed by creating and updating.

In addition, with the intention of benefiting from the products and services of our Company;

When you use our call centre or website,
b. When you visit our company, our facilities, our units,
c. When you visit our website or our social media channels / channels,
d. Your personal data may be processed when you participate in trainings, seminars or organisations organised by our Company.
Your personal data obtained from you with your consent or in accordance with the reasons for compliance with the law expressed in the laws of the Republic of Turkey;

a. In order for our business units to carry out the necessary work to benefit you from the products and services offered by our company,

b. Suggesting and presenting the products and services offered by our Company to you by customising them according to your tastes, usage habits and needs,
c. Improving the quality of the services provided by our company and developing our quality policy,
d. To be informed about and benefit from the general and special campaigns, promotions, promotions, discounts and similar advantages offered by our Company,
e. To be able to process the data obtained together with your personal data, preferences, transactions and browsing time in the relevant channels when you log in with your username and password in order to receive services from the channels offered by our company in order to provide you with the information and services you have requested,
f. To make notifications (renewal, termination, etc.) regarding all kinds of cards issued and/or to be issued by our Company and its related companies/organisations and website memberships of our Company and its related companies/organisations, to inform you about all kinds of communication that may be established with you, new services and products to be offered, changes, innovations and similar issues that may occur in personal data policies and membership conditions,
g. Ensuring the legal and commercial security of our Company and the persons who have a business relationship with our Company (administrative operations for communication carried out by our Company, ensuring the physical security and control of the Company's locations, business partner/customer/supplier (authorised or employees) evaluation processes, legal compliance process, financial affairs, etc.),
h. Managing security operations, accidents or other similar incidents for medical-insurance purposes,
i. Carrying out market research and R&D (research and development) activities, as well as developing and improving our product range, services, stores, information technology systems and security systems,
j. To ensure the safety of those in our facilities by making use of video camera (CCTV) images and to assist in the prevention, detection and prosecution of criminal offences; as well as to establish, exercise or defend our legal rights by taking into account the photographs,
k. To inform you about the information, activities and services you will request from our company,
l. Determining and implementing the commercial and business strategies of our Company
m. Ensuring the execution of our Company's human resources policies and
n. In the event that it is clearly stated in the legislation or, if necessary, for the purposes of fulfilling a legal obligation determined by the legislation, within the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVK Law, it may be processed by our Company and its related Companies / organisations and other real and/or legal persons specified in Article (E) below.

Method and Legal Reason for Collecting Personal Data:
Your personal data is obtained in all kinds of verbal, written or electronic media, for the purposes specified in the above articles, in order to provide our products and services as the Company within the legal framework determined and to fulfil our Company's contractual and legal responsibilities in a complete and accurate manner. Your personal data collected for this legal reason are processed, recorded, transferred, shared and stored for the purposes specified in Article (B) of this text within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVK Law.

Processing in accordance with the Law and Good Faith

In the processing of personal data, our company acts in accordance with the principles introduced by legal regulations and the rule of honesty.

Accuracy and Data Up-to-date

Our Company ensures that the personal data processed by taking into account the fundamental rights of personal data owners and their legitimate interests within the scope of the KVK Law and the relevant legislation are accurate and up-to-date, if known.

Processing for Specific, Explicit and Legitimate Purposes

Our company processes personal data in a manner that is conducive to the realisation of the previously determined purposes and avoids the processing of personal data that is not related to the realisation of the purpose and is not needed. In this direction, the processing of data is limited to the activities and legal obligations. Additional changes to the purpose are only possible to a limited extent and with justification.

Being Relevant, Limited and Proportionate to the Purpose of Processing

Personal data are processed within the framework of the realisation of the purposes determined by our company, legal and legitimate interests; personal data processing activities that are not needed, not for the purpose and do not contain any legal and legitimate interests are not carried out.

Personal data are processed within the framework of the realisation of the purposes determined by our company, legal and legitimate interests; personal data processing activities that are not needed, not for the purpose and do not contain any legal and legitimate interests are not carried out.

Retention for the Period Stipulated in the Relevant Legislation or Required for the Purpose for which they are Processed

Our company retains personal data for the periods specified in the relevant legislation and other laws or for the periods required for the purpose for which they are processed. It is processed for the period required to be processed in accordance with the practices of our company and the customs of commercial life.

If the purpose of processing personal data has expired and the relevant legislation and the retention periods of the company have expired, personal data may be stored in order to constitute evidence in possible legal disputes, to assert the right or to establish a defence. In this case, the stored data cannot be accessed for any other purpose and access to the relevant personal data is provided only for use in the relevant legal dispute.

Privacy Policy

The website you are visiting is owned and operated by the Company. By using our website, you consent to the use of personal data obtained and collected through our website.

The Company is committed to protecting your personal privacy. This policy applies only to this website and does not apply to websites owned by third parties. By using our website, if you do not agree with the terms of our current Privacy Policy posted in this area of the site, please do not share your personal data on this site.

Unless you share your personal data with your explicit consent, we assure you that the Company will not collect any personal data from your visits to our website. When you share your personal data, you authorise us to use this information in accordance with the terms of the Privacy Policy.

The personal data you may share will be used for the following purposes:

Sending press releases or notifications via e-mail
- Sending printed publications or other correspondence
- Delivering your purchases or prizes
- To process your booking requests and manage your account
- Calculate statistics on your transactions and
- To generate commercial statistics and analyses related to website usage.
If you choose not to share your personal data on this site, you will not be able to enjoy certain rights such as accessing certain areas of the site, requesting online newsletters, making online bookings, applying for jobs, providing feedback about our business or sending us e-mails.

Cookies are small data files that allow our website to collect and store a range of data on your desktop computer, laptop or mobile device. Companies may use "cookies" to collect information such as the specific site areas you visit and the services you use on our website. We collect this information in order to be able to change our website and the products you are interested in and need. These "cookies" may also be used to help you perform your transactions faster if you visit our website again. For example, our website can recognise the personal data you provide in order to use it and avoid you being asked for the same information once again. Many web browsers are pre-set to accept a "cookie". You can preferably set your own web browser to reject "cookies" or to be warned when a "cookie" is sent. Refusing "cookies" on the site you enter may prevent you from visiting some areas of the site or receiving personalised information when you visit the site.

We can measure how effective our website presence is by determining when you enter our website, which pages you browse and how long you stay. The site measurement statistics can be used to personalise your website experience as well as - anonymously and holistically - to create and evaluate statistics about the use of our website.

Information about your computer, such as your IP address (the number assigned to your computer when you use the Internet), the type of Web browser you are using and the operating system you are using may also be collected and linked to your Personal Information. This is necessary to ensure that our website provides the best experience for our visitors and is an effective source of information.

We take reasonable precautions to ensure the security of your personal data. All identifiable personal data is subject to restricted access to prevent its unauthorised access, modification or misuse.

Organisations providing services to the Company are required to keep such information confidential and are not permitted to use such information for any purpose other than the services they perform for the Company.

Processing of Special Quality Data:
In Article 6 of the KVK Law, some personal data that have the risk of causing victimisation or discrimination when processed unlawfully are determined as "special quality". These data are; race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, association - foundation or trade union membership, health, sexual life, criminal conviction and security measures, and biometric and genetic data. Our company acts in accordance with the regulations stipulated in Article 6 of the KVK Law in terms of processing special categories of personal data and acts sensitively in the protection of these data.

Our Company processes special categories of personal data in accordance with the PDP Law in the following cases, provided that adequate measures to be determined by the PDP Board are taken:

If the personal data owner has explicit consent;
Our guests can request customised service by sharing their conditions with our Company and can share their special quality data for this purpose (In case our guest requests special service by sharing their special quality data; For example, requesting a thin pillow due to neck hernia, requesting a room on the ground floor due to heart disease, requesting us to prepare dessert without nuts due to peanut allergy, etc.). In order to provide customised services to our guests for their needs defined by sharing their special quality data and to remember these needs of our guests in the future and to provide the same services again, our Company will process the special quality data of the persons only with the explicit consent of the person concerned and only to serve the purpose of collection.

If the personal data owner does not have explicit consent;
- Sensitive personal data other than the health and sexual life of the personal data owner, in cases stipulated by law,

- Personal data of special nature relating to the health and sexual life of the personal data owner are processed only for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing, by persons or authorised institutions and organisations under the obligation of confidentiality.

To whom and for what purpose the processed personal data may be transferred:
Your collected personal data may be transferred to our shareholders, business partners, suppliers, legally authorised public institutions and private persons within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVK Law in order to serve the purposes specified in Article (B).

Transfer of Personal Data Abroad:
Our company is authorised to transfer personal data abroad within the conditions determined by the Personal Data Protection Board in the KVK Law, in accordance with the other conditions in the law and after obtaining the explicit consent of the person for this purpose.

Rights of the Personal Data Owner listed in Article 11 of the KVK Law:
Within the scope of the KVK Law, we accept that the person concerned has the right to be informed and to obtain his/her consent before the processing, recording, transfer, sharing and storage of his/her personal data, and that he/she has the right to determine the fate of his/her data after the processing, recording, transfer, sharing and storage of the data. In this context, if you submit your requests regarding your rights as personal data owners to our Company by the methods set out below in this "Clarification Text on the Processing of Personal Data", our Company will finalise the request free of charge within thirty days at the latest, depending on the nature of the request.

In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller published by the Personal Data Protection Board, regarding your requests regarding your rights as personal data owners;

If your application will be answered in writing, no fee is charged up to five pages. A transaction fee of 1 Turkish Lira may be charged for each page over five pages.
If the response to the application is given in a recording medium such as CD, flash memory, the fee that may be requested by our Company as the data controller cannot exceed the cost of the recording medium.
In this context, personal data owners;

To learn whether personal data is processed or not,
b. Requesting information if personal data has been processed,
c. To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
d. To know the third parties to whom personal data are transferred domestically or abroad,
e. To request correction of personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
f. To request the deletion, destruction or anonymisation of personal data within the framework of the conditions stipulated in Article 7 of the KVK Law and to request notification of the transaction made within this scope to third parties to whom personal data are transferred,
g. To object to the occurrence of a result to the detriment of the person himself/herself by analysing the processed data exclusively through automated systems,
h. In the event that personal data is damaged due to unlawful processing of personal data, it has the right to demand the compensation of the damage. On the other hand, individuals do not have any rights regarding anonymised data within the Company. Our Company may share personal data with the relevant institutions and organisations in accordance with the business and contractual relationship, in order for a judicial duty or state authority to exercise its legal powers.
Periods for Processing Your Personal Data:
In accordance with the KVK Law, your personal data, which have been processed for the purposes specified in this "Clarification Text on the Processing of Personal Data", will be deleted, destroyed or anonymised and will continue to be used by us when the purpose that requires processing according to Article 7 / f.1. of the KVK Law disappears and / or the time-out periods that we are required to process your data in accordance with the legislation expire.

I. Situations where our Company may process your personal data without your explicit consent as required by law:

Pursuant to Article 5 of the KVKK, in the following cases, our Companies may process your personal data specified above and obtained in accordance with the law without seeking your explicit consent:

In cases where it is clearly stipulated in the laws;

If you are unable to disclose your consent as a data subject due to actual impossibility or if it is mandatory to process your personal data for the protection of your or someone else's life or physical integrity in cases where your consent is not legally valid,
It is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract you have concluded with our Company and its related Companies / organisations, other natural and/or legal persons specified in Article (C),
It is mandatory for our company to fulfil a legal obligation,
Your personal data has been made public by you,
Data processing is mandatory for the establishment, exercise or protection of a right,
Data processing is mandatory for the legitimate interests of our Company, provided that it does not harm your fundamental rights and freedoms.
To make a request in accordance with the Law on the Protection of Personal Data:
Pursuant to paragraph 1 of Article 13 of the KVK Law, you can submit your request to our Company with the method(s) determined / to be determined by the Personal Data Protection Board with the regulations in the KVK Law and the relevant legislation, or you can make your request by one of the following methods by filling out and signing the Application Form at www.resortziganahotel.com.

A signed copy of the form containing your explanations regarding your requested right;

* Halkalı Cad. N:245/12 Küçükçekmece Istanbul / Turkey
You can send your identity documents (e.g. identity card, driver's licence, passport, etc.) to the address by hand.

* You can send the form you will fill out and the official documents identifying your identity through a Notary Public or

* You can send the form you will fill out and the documents identifying your identity electronically to [email protected] with secure electronic signature or mobile signature, * You can send the form you will fill out and the documents identifying your identity to our Company as the Data Controller by using the e-mail address you have previously notified to our Companies and registered in our Company's system. Our Company will ensure that the request is finalised within 30 days at the latest depending on the nature of the request. The rights regarding personal data can only be used for the data belonging to the individuals themselves.
Requests regarding the data of persons other than the person who filled out the form and attached official documents identifying your identity will not be taken into consideration. Forms that are not accompanied by official documents identifying you will not be taken into consideration. Even when data deletion requests are fulfilled, we inform you that we are obliged to share the data with the official authorities if requested by the official authorities.