LPPD Policy & Clarification Text
Touring and Automobile Association of Turkey (Havuzlu Asmazlar Mansion)
Disclosure Statement within the Scope of the Law on Protection of Personal Data No. 6698 (LPPD)
Website: https://havuzluasmazlar.com/
Phone Number: +90 370 712 14 44
E-Mail Address: safranbolu@turing.org.tr
Address: Hacıhalil, Beybağı Sok. No: 18 Safranbolu, Karabük
What Types of Data Do We Collect?
We, as the data controller Touring and Automobile Association of Turkey (“The Association”), process some of your personal data in accordance with the general principles stipulated in Article 4 of the LPPD in order to allow our guests to benefit from accommodation services in our Havuzlu Asmazlar Mansion. Your personal data we process are as follows;
- Your identity details (name and surname, identity number, nationality)
- Your contact details (phone number, e-mail address, address)
- Your financial data (payment method, bank account details)
- Your visual records (photo)
- Your health information (allergen status information, health details)
- Other information (Room type, number of people, license plate information, check-in and check-out date, minibar usage information)
How Do We Collect Such Data?
The data we process are being collected via the following methods:
- Partially automated means based on the information you have provided to us via e-mail,
- Partially automated means through the communications you have made with us through our telephone line,
- And by automatic means from our holiday site suppliers for which you have made reservations.
What Are Our Purposes in Processing Such Data and What Legal Basis we rely on?
The data processing conditions stipulated within the scope of LPPD are as follows;
- Explicit consent of the data subject ("Article 5/1, Article 6").
- When it is clearly stipulated in laws ("Article 5/2, Article 6/3").
- It is mandatory for the protection of life or physical integrity of the person or of any other person who is bodily incapable of giving his consent or whose consent is not deemed legally valid ("Article 5/2-b").
- Processing of personal data belonging to the parties of a contract, is necessary provided that it is directly related to the conclusion or fulfilment of that contract ("Article 5/2-c").
- It is mandatory for the controller to be able to perform his legal obligations ("Article 5/2-ç").
- The data concerned is made available to the public by the data subject himself ("Article 5/2-d").
- Data processing is mandatory for the establishment, exercise or protection of any right ("Article 5/2-e").
- It is mandatory for the legitimate interests of the controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject ("Article 5/2-f").
We request this data from you in order to achieve the following purposes:
- We Process Your Identity Details:
- In order to carry out accommodation services (Article 5/2-c, Article 5/2-ç, Article 5/2-e),
- In order to create and follow up your reservation records (Article 5/2-c, Article 5/2-e),
- For the purpose of conducting and supervising our business activities (Article 5/2-f),
- In order to fulfill our legal obligations (Article 5/2-ç, Article 5/2-e, Article 5/2-f),
- In order to inform you during our campaign periods and to carry out the promotional processes of our hotel (Article 5/1),
- We Process Your Contact Details:
- In order to create and follow up your reservation records (Article 5/2-c, Article 5/2-e),
- In order to carry out accommodation services (Article 5/2-c, Article 5/2-ç, Article 5/2-e),
- For the purpose of carrying out communication activities (Article 5/2-c, Article 5/2-f),
- In order to fulfill our legal obligations (Article 5/2-ç, Article 5/2-e, Article 5/2-f),
- In order to inform you during our campaign periods and to carry out the promotional processes of our hotel (Article 5/1),
- We Process Your Financial Data:
- In order to carry out the payment processes regarding our services (Article 5/2-c, Article 5/2-f),
- In order to create your reservation record, receive the prepayment and follow-up (Article 5/2-c, Article 5/2-e),
- We Process Your Visual Records:
- In order to verify your identity (Article 5/2-ç, Article 5/2-f),
- We Process Your Health Data
- In order to provide you with special services (Article 6),
- We Process Your Other Information:
- In order to create and follow up your reservation records (Article 5/2-c, Article 5/2-e),
- In order to carry out accommodation services (Article 5/2-c, Article 5/2-ç, Article 5/2-e),
The data processing conditions we rely on while processing such data are indicated in parentheses.
With Whom Do We Share These Data?
Personal data we process may be shared with:
- Authorized public institutions and organizations in order to fulfill our obligation to comply with the legislation,
- General Directorate of Security in order to fulfill our legal obligations arising from the relevant legislation,
- The supplier transport company in order to deliver your forgotten items to you,
- The law firm that provides services to us for the execution of legal and judicial processes, and with the assigned/authorized courts and enforcement offices upon request.
We do not share personal data with unrelated and unauthorized third parties except for those specified above.
What Are Your Rights Under LPPD?
Each person has the right to apply to the controller and;
- To learn whether his personal data are processed or not,
- To request information if his personal data are processed,
- To learn the purpose of his data processing and whether this data is used for intended purposes,
- To know the third parties to whom his personal data is transferred at home or abroad,
- To request the rectification of the incomplete or inaccurate data, if any, and to request reporting of the operations carried out pursuant to this paragraph to third parties to whom his personal data has been transferred,
- To request erasure or destruction of his personal data upon disappearance of reasons which require the process despite being processed under the provisions of this Law and other related laws, and to request notification of the operations carried out within this scope to third parties to whom his personal data has been transferred,
- To object to the processing, exclusively by automatic means, of personal data, which leads to an unfavorable consequence for the data subject,
- To request compensation for the damage arising from the unlawful processing of his personal data.
You can submit your requests to the address of “Hacıhalil, Beybağı Sok. No: 18 Safranbolu, Karabuk” or “Huzur Mh. Fazil Kaftanoglu Cd. No: 2 Sarıyer, Istanbul'' to exercise your rights in accordance with the Communiqué on the Procedures and Principles Regarding Application to the Data Controller. Your requests will be evaluated and concluded free of charge as soon as possible and in any case within thirty (30) days at the latest. However, if the procedure requires an additional cost, we may charge the fee indicated in the price list determined by the Personal Data Protection Board. In addition to the foregoing, you can also contact us whenever you want to get detailed information about your data processing processes.