PRIVACY POLICY
As ARTHE TUR. İNŞ. MÜH. GIDA OTO. İTH. İHR. SAN. VE TİC. A.Ş. (the “Company”), we attach great importance to the privacy of our visitors, users, guests, and individuals who contact us within the scope of the website, digital platforms, and related services offered under the Art Alaçatı brand.
This Privacy Policy (“Policy”) has been prepared to provide general information on how the data and personal information of individuals who visit our website, use our contact forms, make reservation requests, or interact with us through our digital channels are processed, protected, stored, and managed in accordance with applicable principles.
Our Company undertakes to act in compliance with the applicable legislation, primarily the Personal Data Protection Law No. 6698, in all processes related to the processing and protection of personal data.
1. Information on the Data Controller
The data controller under this Policy is:
Legal Name: ARTHE TUR. İNŞ. MÜH. GIDA OTO. İTH. İHR. SAN. VE TİC. A.Ş.
Brand / Trade Name: Art Alaçatı
Address: [●]
Phone: [●]
Email: [●]
MERSIS No / Tax ID: [●]
acts as the data controller.
2. Scope of the Policy
This Policy covers;
website visitors,
individuals who fill out the contact form,
users who make reservation requests or obtain information,
individuals who communicate via email, phone, or other digital channels,
individuals included in campaigns, announcements, or commercial communication processes,
applies to.
This Policy sets out the general principles regarding the protection of personal data within the scope of the services provided by our Company. For specific processes, separate documents such as an Information Notice, Cookie Policy, KVKK Application Form, or similar dedicated texts may also be published.
3. Personal Data That May Be Processed
Depending on the nature of the service relationship and the use of the website, our Company may process personal data in the following categories:
Identity Information: Name, surname, and similar identifying information.
Contact Information: Phone number, email address, physical address, and any other contact details you provide.
Transaction Security Information: IP address, website access logs, session information, traffic data, log records, and technical data processed for security purposes.
Request / Complaint / Communication Information: Contact form content, messages, application details, and information related to suggestions and complaints.
Reservation and Service Information: Accommodation requests, check-in/check-out dates, number of guests, special requests, and any information you provide during the reservation process.
Marketing and Commercial Communication Information: Preference data related to campaigns, informational updates, and promotional activities, where explicit consent has been provided.
Digital Usage Data: Usage, preference, and browsing information obtained through cookies and similar technologies.
The categories of personal data processed may vary depending on the nature of the relevant service.
4. Purposes of Processing Personal Data
Your personal data may be processed by our Company for the following purposes:
ensuring the proper functioning of the website,
improving user experience,
receiving, evaluating, and finalizing reservation requests,
responding to information requests, suggestions, and complaints,
managing customer relations and communication processes,
improving service quality,
fulfilling legal obligations,
managing information security processes,
conducting audit, reporting, and internal control activities,
carrying out campaign, promotional, and marketing activities where explicit consent has been obtained,
resolving disputes and tracking requests and applications.
5. Method of Collection and Legal Basis of Personal Data
Your personal data may be collected through the website, contact forms, reservation forms, email, telephone, cookies, digital analytics tools, physical or electronic application channels, and similar methods, either fully or partially through automated means or through non-automated means provided that they are part of a data recording system.
The collected personal data, depending on the relevant process, may be:
directly related to the establishment or performance of a contract,
enabling our Company to fulfill its legal obligations,
the establishment, exercise, or protection of a right,
the legitimate interests of our Company, provided that they do not harm your fundamental rights and freedoms,
as expressly stipulated in laws,
where your explicit consent is required where necessary.
may be processed based on legal grounds. It is explicitly stated in official regulations and guidelines under the KVKK that the legal basis must be clearly indicated, and that the information notice must be clear, understandable, and specific.
6. Transfer of Personal Data
Your personal data may be transferred, in compliance with applicable legislation and for the purposes stated above, to:
authorized public institutions and organizations,
legally authorized judicial and administrative authorities,
information technology, hosting, software, security, communication, and support service providers,
business partners providing support in reservation, payment, accounting, or operational processes,
legal advisors, financial consultants, and authorized persons or organizations providing auditing services.
may be transferred.
Data transfers are carried out in compliance with the data minimization principle and only to the extent necessary.
7. Transfer Abroad
Some of the digital infrastructures, email services, analytics tools, cloud systems, or technical services used by our Company may operate through servers or service providers located abroad. In such cases, where the transfer of your personal data abroad occurs, our Company takes the necessary technical, administrative, and legal measures in accordance with the conditions stipulated under applicable legislation; where required, explicit consent procedures are also duly implemented.
8. Measures Regarding the Protection of Personal Data
Our Company takes appropriate technical and administrative measures to prevent the unlawful processing and access of personal data, ensure data security, and guarantee the protection and safekeeping of such data.
In this context, measures such as restricting access authorizations, ensuring system security, protecting records, raising personnel awareness, implementing up-to-date security measures, and regulating data security obligations with third-party service providers are adopted.
9. Cookies and Similar Technologies
Cookies and similar technologies may be used on our website for the purposes of improving user experience, ensuring the proper functioning of the site, maintaining security, and, in certain cases, conducting analytical activities.
You can access detailed information regarding cookies through the Cookie Policy separately published on our website. For non-essential cookies, you may manage your preferences via the cookie management panel. In KVKK practice, it is clearly emphasized in the Board’s decisions that, particularly in relation to cookies, the obligation to inform and explicit consent must be evaluated separately.
10. Retention Period
Your personal data is retained for the period required for the relevant processing purpose and, in any case, for the retention periods prescribed by applicable legislation. Once the reasons requiring the processing no longer exist, and subject to any legal obligations, your personal data is deleted, destroyed, or anonymized.
11. Data Subject Rights
Pursuant to Article 11 of Law No. 6698, data subjects may apply to our Company to:
learn whether their personal data is being processed,
request information regarding such processing if their personal data has been processed,
learn the purpose of processing and whether their data is used in accordance with that purpose,
know the third parties to whom their personal data is transferred, either domestically or abroad,
request correction if the data is incomplete or incorrectly processed,
request the deletion or destruction of their personal data,
request that any correction, deletion, or destruction carried out be notified to third parties to whom the data has been transferred,
object to the emergence of a result against them through the analysis of processed data exclusively via automated systems,
request compensation for damages in the event they suffer harm due to unlawful processing,
have the rights. These rights are also summarized by the Authority under Article 11 of the KVKK. (KVKK)
12. Application Procedure
You may submit your requests under the Law to our Company in accordance with the provisions of the applicable legislation and together with information and documents verifying your identity.
You may submit your applications through the following communication channels:
Address: [●]
Email: [●]
Registered Electronic Mail (KEP) Address: [●]
Phone: [●]
Our Company will process and conclude applications within the time periods stipulated under the applicable legislation, depending on the nature of the request.
13. Third-Party Links
Our website may contain links to third-party websites, reservation systems, social media platforms, or other digital services. Our Company is not responsible for the data processing activities and privacy practices of such third-party platforms. Therefore, we recommend reviewing the privacy policies of the relevant platforms separately.
14. Changes to the Policy
Our Company reserves the right to amend this Policy at any time in line with changes in legislation, technical requirements, service processes, or operational needs. The updated version shall enter into force as of the date it is published on our website.
15. Entry into Force
This Privacy Policy entered into force on [dd.mm.yyyy].