INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA
As ARTHE TUR. İNŞ. MÜH. GIDA OTO. İTH. İHR. SAN. VE TİC. A.Ş. (the “Company”), we attach importance to the security of your personal data within the scope of the services provided under the Art Alaçatı brand, in accordance with the Personal Data Protection Law No. 6698 (“KVKK”).
This Information Notice has been prepared to inform you about the processing of your personal data when you visit our website, contact us, make a reservation request, request information, benefit from our services, or interact with us through digital or physical channels.
1. Identity of the Data Controller
Pursuant to the KVKK, your personal data may be processed by the company whose details are provided below, acting as the data controller:
Legal Name: ARTHE TUR. İNŞ. MÜH. GIDA OTO. İTH. İHR. SAN. VE TİC. A.Ş.
Brand / Trade Name: Art Alaçatı
Address: [●]
Phone: [●]
Email: [●]
MERSIS No / Tax ID: [●]
2. Personal Data Processed
Depending on the nature of the services we provide, the following personal data may be processed by our Company:
Identity Information: Name, surname
Contact Information: Phone number, email address, address, and communication content
Customer Transaction / Reservation Information: Accommodation request, check-in and check-out dates, number of guests, reservation notes, request and preference information.
Transaction Security Information: IP address, log records, device and browser information, and website access and usage logs.
Request / Complaint / Communication Information: Contact forms, email content, and information related to suggestions, requests, and complaints.
Marketing Communication Information: Campaign and promotional communication preferences, where explicit consent has been provided.
Legal Transaction Information: Records that may be required in requests from official authorities, disputes, and application processes.
The categories of personal data processed may vary depending on the legal relationship you establish with us and the services you use.
3. Purposes of Processing Personal Data
Your personal data may be processed for the following purposes:
receiving, evaluating, and finalizing reservation requests,
management of accommodation and customer relations processes,
responding to information requests, suggestions, and complaints,
conducting communication activities,
ensuring the operation, security, and performance improvement of the website,
improving user experience,
fulfillment of legal obligations,
providing information to authorized institutions and organizations,
tracking legal affairs and processes,
managing information security processes,
conducting campaign, announcement, promotional, and marketing processes where your explicit consent has been obtained.
It is explicitly stated in the official Communiqué that, in KVKK information notices, these purposes must be specified in a clear, specific, and legitimate manner. (KVKK)
4. To Whom and For What Purposes Personal Data May Be Transferred
Your personal data may be transferred, to the extent necessary and in compliance with applicable legislation, to the following categories of recipients for the purposes stated above:
legally authorized public institutions and organizations,
legally authorized private law entities,
rezervasyon, konaklama, yazılım, barındırma, teknik destek ve bilişim altyapısı hizmeti alınan tedarikçiler,
individuals and organizations providing accounting, financial advisory, auditing, and legal consultancy services,
business partners providing support in payment, operational, security, and communication processes.
Data transfers are carried out solely to the extent necessary and in a proportionate manner limited to the relevant processing purpose.
5. Method and Legal Basis for Collecting Personal Data
Your personal data may be collected through the website, contact forms, reservation forms, email, telephone, cookies, digital analytics tools, physical application channels, and similar methods, either fully or partially by automated means or by non-automated means provided that they are part of a data recording system. It is also regulated in the Communiqué that both the method and the legal basis must be clearly stated in the information notice. (KVKK)
Your personal data may be processed based on the following legal grounds within the scope of the data processing conditions set out in Article 5 of the KVKK:
as expressly stipulated in laws,
directly related to the establishment or performance of a contract,
necessity for the fulfillment of our Company’s legal obligations,
necessity of processing data for the establishment, exercise, or protection of a right,
necessity of processing data for the legitimate interests of our Company, provided that it does not harm your fundamental rights and freedoms,
where necessary, the existence of your explicit consent.
6. Storage and Security of Personal Data
Our Company processes your personal data in accordance with applicable legislation, the principle of data minimization, and information security obligations; and takes appropriate technical and administrative measures to prevent unlawful access, loss, misuse, disclosure, alteration, or destruction.
Your personal data is retained for the period required for the relevant processing purpose and for the statutory retention periods stipulated under applicable legislation; upon expiry of such periods, it is deleted, destroyed, or anonymized. Under KVKK practice, general principles include processing data for specific, explicit, and legitimate purposes in a limited and proportionate manner, and retaining it only for as long as necessary. (KVKK)
7. Your Rights as a Data Subject
Pursuant to Article 11 of the KVKK, you may apply to our Company to:
learn whether your personal data is being processed,
request information regarding such processing if their personal data has been processed,
learn the purpose of processing and whether their data is used in accordance with that purpose,
know the third parties to whom their personal data is transferred, either domestically or abroad,
request correction if the data is incomplete or incorrectly processed,
request the deletion or destruction of their personal data,
request that these actions be notified to third parties to whom the data has been transferred,
object to the emergence of a result against you through the analysis of processed data exclusively by automated systems,
request compensation for damages if you suffer harm due to unlawful processing,
you have these rights. These rights are also summarized on the Authority’s “Data Subject Rights” page. (KVKK)
8. Application Method
You may submit your requests under the KVKK to our Company in accordance with the applicable legislation.
You may submit your applications through the following channels:
Address: [●]
Email: [●]
Registered Electronic Mail (KEP) Address: [●]
Phone: [●]
Your applications will be evaluated and concluded within the time periods stipulated under the applicable legislation, depending on the nature of the request. It is also emphasized in the Authority’s public announcement that, before applying to the Board, the application process to the data controller must be exhausted. (KVKK)
9. Entry into Force
This Information Notice entered into force on [dd.mm.yyyy]. Our Company reserves the right to amend this text in line with changes in legislation or operational requirements. The updated version becomes effective as of the date it is published on our website.