Personal Data Protection and Privacy Policy
Website Privacy Agreement
During your visit to this website and your use of the services we provide through this site, the way your personal information and the information about the services you request will be used and protected is subject to the terms set forth in this “Privacy Policy.” By visiting this website and requesting to use the services we provide through this site, you accept the terms specified in this “Privacy Policy.”
I. Purpose of the Personal Data Protection and Processing Policy
Due to the sensitivity of the work we do as CELESTE HOTEL OLUDENIZ, the data obtained from our customers or potential customers has always been kept confidential and has never been shared with third parties. The protection of personal data is a fundamental policy of our company. Even before any legal regulation, our company and its affiliates have given great importance to the confidentiality of personal data and have adopted this as a working principle and instructed their employees accordingly. As CELESTE HOTEL OLUDENIZ, we are committed to complying with all responsibilities brought by the Personal Data Protection Law. The principles of personal data protection of our company also cover our affiliates.
II. Scope and Modification of the Personal Data Protection and Processing Policy
This Policy prepared by our company has been designed in accordance with the Personal Data Protection Law No. 6698 (“KVKK”). As of today, the law is fully in effect. The data obtained from you with your consent or due to other legal reasons listed in the law will be used to improve the quality of services we provide, to improve the services and our quality policy. Some of the data we hold is anonymized and is not subject to the law or our policy as it is used for statistical purposes. CELESTE HOTEL OLUDENIZ Personal Data Protection and Processing Policy aims to protect the data of our customers, potential customers, employees, and the employees of the companies we work with, as well as other individuals, and includes the necessary regulations regarding this protection.
Our company reserves the right to modify our policy and regulation – provided it complies with the law and ensures better protection of personal data.
III. Basic rules regarding the processing of personal data
a) Compliance with the law and honesty rules: CELESTE HOTEL OLUDENIZ questions the source of the data it collects or receives from other companies and ensures that they are obtained in accordance with the law and honesty rules. In this context, CELESTE HOTEL OLUDENIZ makes the necessary warnings and notifications to third parties (agencies and other intermediaries) selling the services it offers to protect personal data.
b) Accuracy and being up-to-date when necessary: CELESTE HOTEL OLUDENIZ ensures that all data within the institution is accurate, does not contain incorrect information, and is updated if there are changes in personal data provided to it.
c) Processing for specific, clear, and legitimate purposes: CELESTE HOTEL OLUDENIZ processes data within the scope of the purposes it receives approval for from individuals during the service. Data is not processed, used, or allowed to be used beyond this purpose.
d) Being connected, limited, and measured for the purpose they are processed: CELESTE HOTEL OLUDENIZ uses the data only to the extent required for the purpose for which it was processed and within the scope of the service.
e) Being retained for the duration specified in the relevant legislation or required for the purpose for which they are processed: CELESTE HOTEL OLUDENIZ retains data arising from contracts for the duration of the statute of limitations of the relevant legal requirements, trade, and tax laws. However, when these purposes are no longer valid, it deletes or anonymizes the data.
Importantly, the principles listed above apply whether CELESTE HOTEL OLUDENIZ has collected or processed data with consent or lawfully.
According to Article 11 of the Personal Data Protection Law, you have the following rights. CELESTE HOTEL OLUDENIZ has also prepared a form to facilitate these rights for you.
Individuals whose personal data is processed may request the following by contacting our company as announced on our website:
a) Learn whether personal data about them is being processed,
b) Request information if their personal data has been processed,
c) Learn the purpose of processing personal data and whether they are used in accordance with this purpose,
d) Know the third parties in the country or abroad to whom personal data have been transferred,
e) Request the correction of personal data if it is incomplete or incorrectly processed,
f) Request the deletion or destruction of personal data within the framework of the conditions set forth in the law,
g) Request the notification of the operations carried out pursuant to subparagraphs (d) and (e) to third parties to whom personal data have been transferred,
h) Object to the occurrence of a result against the person by analyzing the processed data exclusively through automated systems,
i) Request compensation for damages in case of unlawful processing of personal data.
As CELESTE HOTEL OLUDENIZ, we respect these rights.
Maximum Savings Principle/Frugality Principle
According to our maximum savings principle or frugality principle, data reaching CELESTE HOTEL OLUDENIZ is processed only to the extent necessary. Therefore, the type of data we collect is determined based on the purpose. Unnecessary data is not collected. Other data that reaches our company is similarly transferred to the company’s information systems. Excess information is not recorded in the system, deleted, or anonymized. These data can be used for statistical purposes. Special category data, such as health data, is collected only to provide better service to customers and to protect their health and is carefully maintained in the system, limited to the purpose for which it is collected.
Deletion of personal data
When the statutory retention periods expire, judicial processes are completed, or other requirements are eliminated, these data are deleted, destroyed, or anonymized by our company on its own initiative or upon the request of the relevant person.
Accuracy and data freshness
The data within CELESTE HOTEL OLUDENIZ is processed as declared by the individuals concerned. CELESTE HOTEL OLUDENIZ is not obliged to investigate the accuracy of the data declared by customers or persons in contact with CELESTE HOTEL OLUDENIZ, nor is it done due to legal and work principles. Declared data is considered correct. The principle of accuracy and data freshness is also adopted by CELESTE HOTEL OLUDENIZ. Our company updates the personal data processed upon the receipt of official documents or requests from the concerned person. Necessary measures are taken for this.
Confidentiality and data security
Personal data is confidential, and CELESTE HOTEL OLUDENIZ respects this confidentiality. Personal data can only be accessed by authorized persons within the company. All necessary technical and administrative measures are taken to protect the personal data collected by CELESTE HOTEL OLUDENIZ and prevent unauthorized persons from accessing them to avoid victimizing our customers and potential customers. In this context, it is ensured that software complies with standards, third parties are carefully selected, and the data protection policy is adhered to within the company.
Due to Covid-19 and other epidemic diseases, additional health data may be requested or collected from our employees, and collected data may be shared with relevant official authorities.
IV. Data processing purposes
The collection and processing of personal data by CELESTE HOTEL OLUDENIZ will be carried out in line with the purposes specified in the clarification text. Data is collected and processed to establish a contract and provide better services to customers.
V. Customer, potential customer, business, and solution partner data
Data collection and processing for contractual relationships
If a contractual relationship has been established with our customers and potential customers, the collected personal data may be used without the customer’s consent. However, this use is in line with the purpose of the contract. Data is used and updated as needed to better execute the contract and meet service requirements. Conversely, the data left to us by our potential customers (prospective customers) is processed to provide them with easier and higher quality service later on. If these data do not turn into a contractual relationship upon their request, they are deleted.
Business and Solution Partner Data
CELESTE HOTEL OLUDENIZ adheres to lawful behavior while sharing data with business and solution partners. Data privacy commitments are made with business and solution partners, and data sharing is only to the extent necessary for the service, ensuring that these parties take necessary measures for data security.
Data processing for advertising purposes
According to the Law on Regulation of Electronic Commerce and the Regulation on Commercial Communication and Commercial Electronic Messages, electronic messages for advertising purposes can only be sent to individuals with prior consent. The existence of explicit consent of the person to whom the advertisement will be sent is mandatory. CELESTE HOTEL OLUDENIZ adheres to the details of “consent” as determined by the same legislation. To send electronic messages, personal data is transferred to service providers and IYS (Commercial Electronic Messages Management System) in accordance with the Regulation on Commercial Communication and Commercial Electronic Messages.
Data processing due to the company’s legal obligation or explicitly stipulated by the law
Personal data can be processed without additional consent if processing is explicitly stipulated in the relevant legislation or if it is necessary to fulfill a legal obligation defined by the legislation. The type and scope of data processing must be necessary for the legally permitted data processing activity and comply with the relevant legal provisions.
Data processing by the company
Personal data can be processed in line with the services provided by the company and for legitimate purposes. However, data cannot be used for illegal services in any way.
Processing of special category data
According to the law, personal data relating to an individual’s race, ethnic origin, political opinions, philosophical beliefs, religion, sect or other beliefs, appearance and dress, association, foundation or trade union membership, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data are special categories of personal data. CELESTE HOTEL OLUDENIZ takes adequate measures determined by the Board in processing special categories of personal data.
CELESTE HOTEL OLUDENIZ, for providing better services, may process special categories of personal data with the individual’s consent only for the purpose for which they are collected. The facility where you made a reservation through our intermediary may request some personal data, including health data related to you and your relatives, due to the regulations and legal arrangements issued under Covid-19. These personal data may be shared with official authorities and health institutions when necessary.
Data processed through automated systems
CELESTE HOTEL OLUDENIZ complies with the law regarding data processed through automated systems. Information obtained through these systems cannot be used against the individual without their explicit consent. However, CELESTE HOTEL OLUDENIZ may take decisions concerning individuals using the data within its own systems.