GDPR

DISCLOSURE TEXT ABOUT PROCESSING PERSONAL DATA

At GERTUR GIDA VE İHTİYAÇ MADDELERİ PAZARLAMA TURİZM SANAYİ VE TİCARET ANONİM ŞİRKET (“Perdue Hotel ”), confidentiality and safety of your personal data is significant for us. Within this context it is essential to process and store any kind of personal data of all the people related to Perdue Hotel, including our guests who benefit from our services and products and our business partners, in compliance with the provisions of Code 6698 on “Protection of Personal Data” (“GDPR”)

As “Data Responsible” as defined under GDPR, we would like to explain the processing purposes of your personal data, reasons, methods for collection of your personal data and your rights related to processing of your personal data and the terms and basis for the applications related to the usage of these rights.

WHAT KIND OF PERSONAL DATA ARE COLLECTED?

Perdue Hotel  , we collect personal data of our guests, visitors and business partners (including travel agencies, suppliers, subcontractors and all the shareholders, managers, employees with whom we have business relations). Personal data collected can be classified as follows:

Identity Information: 

Name, surname, T.R. ID number, nationality, vehicle plate number, ID card copy and any other such information collected from our guests, visitors and business partners (including travel agencies, suppliers, subcontractors and all the shareholders, managers, employees with whom we have business relations) about the identity of the person.

Communication Information: Telephone number, address, e-mail address and any other such information enabling to contact with and collected from our guests, visitors and business partners (including travel agencies, suppliers, subcontractors and all the shareholders, managers, employees with whom we have business relations) whom we have business relations) and other third persons while we are receiving any demands for our complaints about our hotel or during their evaluation process.

Confidential Personal Information: Health information, association or foundation membership information, biometric data (audio and video records), blood type or conviction information or any other information defined in Article 6 of GDPR and collected from our guests, visitors or business partners.

Other Information: data processed for technical process security, risk management information, legal transaction data, marketing data, location data, cookies and other data collected from our guests, visitors and business partners (including travel agencies, suppliers, subcontractors and all the shareholders, managers, employees with whom we have business relations) and other third parties automatically using other tools.

WHAT ARE THE LEGAL GROUNDS AND METHODS EMPLOYED FOR COLLECTING OR PROCESSING YOUR PERSONAL DATA?

We collect your personal data via

• communication methods including the printed or electronic forms used for reservations, check in and check out or staying in our hotel,
• our internet websites, our social media accounts operated on the name of or with the brand of Perdue Hotel  in various social media channels,
• other communication channels including your e-mail, telephone, printed and electronic forms used by you in Perdue Hotel sale and marketing activities,
• closed circuit tv (CCTV) systems in Perdue Hotel facilities,
• the contracts executed between us and your company under the business relations carried out, submitted commercial offers, printed and electronic forms, documents, communications or applications made to us,
• the business cards and other documents submitted by you under the frame of the discussions made and the activities guests by our work units,
• Establishing direct communication with our guests and business partners in order to offer and manage the services under hotel activities; making notifications, communications and reservation confirmations related to hotel and accommodation services;
• Carrying out advertisement and marketing activities related to the products and services offered by Perdue Hotel  ; giving information about presentations, promotions, campaigns, offers, activities and other similar issues, offering products and services by customizing them according to personal preferences, usage habits and needs;
• Carrying out marketing and Guest Relations Management works;
• Corporate communication and organizing activities, campaigns and feasts for this purpose, giving information about these; carrying out market researches;
• Making statistics about the number, type, visit frequency, behaviors, geographical locations and other similar issues in order to Improve digital platforms made available for our guests and offer efficient and customized experience to the platform users; offering customized contents, campaigns and advertisements on the basis of interests and needs of platform users; using cookies for this purpose;
• Follow-up and evaluation from the demands, proposals and complaints received from the relevant persons, guest satisfaction management and performing planning, statistics and satisfaction evaluation works for this purpose;
• Performing quality evaluation and improvement works in order to offer better and reliable products and services and to ensure sustainability; inspecting suppliers, subcontractors and other business partners;
• Management of the relations with business partners, travel agents, suppliers, contractors and other persons with whom we have business relations; performing works and execution of commercial relations;
• Ensuring legal and commercial security of the persons having business relations being in compliance with the provisions of GDPR. We, at Perdue Hotel. hereby undertake that your personal data shall be kept safe and not be processed in an illegal manner.
•  

RIGHTS OF PERSONAL DATA OWNER UNDER GDPR AND APPLICATION TERMS AND BASIS

i. Your Rights related to Your Personal Data

We hereby inform you that you have the following rights about the data processed by our Company:

• Learning whether your personal data has been processed or not;
• Being informed about your personal data if it is processed;
• Learning the purpose of processing your personal data and whether your personal data is used in compliance with the purpose;
• If exists, learning the third parties whom the personal data has been transferred within Turkey or abroad and which data was transferred;
• Demanding the correction of the processed personal data if they are wrong or incomplete;
• If your personal data was modified, deleted or destructed, demanding the notification of these transactions to the third parties to whom your personal data has been transferred;
• If the reasons requiring your personal data is processed are over or your personal data is not up to date any more, demanding the deletion or destruction of your personal data;
• Objecting any situation against you as a result of analysis of your processed personal data exclusively via automatic systems;
• Demanding the indemnification of any damage suffered by you due to processing of your personal data against law.

ii. Application

You can make your demands about your rights mentioned above with your application meeting the minimum conditions defined under Announcement on “Terms and Basis about the Application to the Data Responsible” to our KEP address

Information about Family Members/Relatives: 

Information about the family members, relatives or the persons accompanying the relevant person during his/her stay in our hotel and which are collected pursuant to the provisions of the relevant legislations and/or in order to protect legal and other benefits of this person.

Financial Information: 

Salary, payroll, payment, credit card and other such information collected from our guests or business partners according to the relationship established between our company and the owner of the data.

Personal Information:

 any kind of personal information collected from the managers and employees of the institutions which we have contract or other business relationship and which was taken as a base for the establishment of the personal benefits of the real persons who have employment relationship with our company.

Physical Location Security Information: 

Personal information like camera records or security information taken from our guests, visitors and business partners (including travel agencies, suppliers, subcontractors and all the shareholders, managers, employees with whom we have business relations) when they are entering into or exiting from or during their stay in our hotel.

Visual/Audio Data: 

personal information like photos, audio and video records collected from our guests, visitors and business partners (including travel agencies, suppliers, subcontractors and all the shareholders, managers, employees with whom we have business relations) but not considered as physical location security information.

Transaction Information:

information about the transactions performed by the guests like reservation information, records about accommodation or the visit, product or service purchase transactions, membership information, groups and activities related to the accommodation or guest preferences.

Communication and Complaint Management Data: 

personal data obtained from our guests, visitors and business partners (including travel agencies, suppliers, subcontractors and all the shareholders, managers, employees with performed,

• the business connections of Perdue Hotel , third parties like travel agencies or companies supplying goods or rendering services, with full or partially automatic or non automatic data recording systems provided to be in verbal, written or electronic media.

We process your personal data collected using the above mentioned methods on the basis of one or several of the following legal reasons:

• Your express consent,
• Processing obligation pursuant to the provisions of laws and regulations of Turkish Republic,
• If it is required for the protection of your or any other person’s life or physical integrity when you cannot give your express consent due to physical impracticability,
• If it is required for the execution of the agreement executed between you and us,
• If we are obliged to process your personal data in order to perform our legal requirements,
• If your personal data was publicized by you,
• If it is required to protect or use our legal and contractual rights;
• If it is required to process your personal data for our legitimate rights provided that your fundamental rights and freedoms are not harmed.
• We keep all your personal data processed during the terms required under GDPR and other legal legislations by taking all the required administrative and technical measures as long as the above mentioned legitimate purposes exist.

FOR WHAT PURPOSES ARE YOUR PERSONAL DATA PROCESSED?

We process your personal data for the following purposes:

• Carrying out our hospitalization activities, meeting your demands and expectations with products and services offered to you by Perdue Hotel offering hospitality and personal experience at the desired level to our customers,
• Making the planning and evaluations and performing works required to make the products and services available for our with Perdue Hotel. (Planning administrative operations for the services rendered by our Company; business partner/customer/supplier (managers or employees) evaluation and inspection processes, legal compliance process, etc.)
• Physical security and supervision of the facility operated by Perdue Hotel
• Planning and execution of work health and safety processes;
• Exercising legal rights, using information about the transaction history as evidence after the end of legal relations in case of any disputes;
• Determining and application of commercial, legal and business strategies;
• Execution of financial policies; e-invoice management;
• Planning, supervision and execution of information security processes; management of information technology infrastructure;
• Planning, reporting, customer/visitor statistics or performing other similar evaluations under the frame of our company operations; and/or
• Being in compliance with the national legislations; submitting information demanded by public bodies and institutions, meeting reporting obligations.

DO WE TRANSFER YOU PERSONAL DATA TO THIRD PARTIES OR ABROAD?

We might transfer your personal data to our business partners that are located in Turkey or abroad who render services to our Company, to agencies we work in cooperation with and online hotel reservation service providers, our suppliers, third party service providers working within the facility, our insurance companies, banks and financial institutions, consulting companies rendering services about legal, tax and other similar issues, Company authorities, our shareholders, legally authorized public bodies and private persons, service providers processing personal data on behalf of our Company and rendering storage, archiving, information technology services to our Company within Turkey or abroad for the purposes mentioned above provided that the above mentioned legal basis exists send an e-mail to bilgi@perdue.com.tr with an electronically signed or mobile signed mail or with a written application signed and submitted by person or made via Notary public to Mustafa Kemal Bulvarı Babataşı Mahallesi no:113 Fethiye/ Muğla

Perdue Hotel  shall conclude all the demands made free of charge as soon as possible on the basis of the demand characteristics provided to be no more than thirty days. If we suffer any costs to fulfill your demand, the costs calculated on the basis of the tariff determined by the Personal Data Protection Board can be charged.

Perdue Hotel might accept the demands made or reject them by giving the reasons and such reply can be communicated to the relevant person in written or in electronic media. If the demand is accepted, Perdue Hotel  shall fulfill the demand as soon as possible.

iii. Complaints

If the demands made from Perdue Hotel  are rejected by the Company or you are not satisfied with the reply of the Company or no reply is given, you have the right to complain to Personal Data Protection Board within 30 days after the notification of the reply to you or within 30 days after the completion of 30 day long period if no reply is given.

IDENTITY AND COMMUNICATION DETAILS OF DATA RESPONSIBLE PERSON

This disclosure text was issued to address data owner persons by GERTUR GIDA VE İHTİYAÇ MADDELERİ PAZARLAMA TURİZM SANAYİ VE TİCARET ANONİM ŞİRKET., (as being the “Data Responsible”) which is incorporated in Turkey and whose details are given below.

Company GERTUR GIDA VE İHTİYAÇ MADDELERİ PAZARLAMA TURİZM SANAYİ VE TİCARET ANONİM ŞİRKET

Company ID (Mersis No): 0394046100000018

Address: Mustafa Kemal Bulvarı Babataşı Mahallesi No:113 Fethiye/Muğla

Telephone: +90 252 614 00 91

E-mail: bilgi@perdue.com.tr

2.3. Kayıt Formu suretiyle web Sitemize üye olan ziyaretçi

perdue.com.tr web sitesi kayıtlı kullanıcısı olmak amacıyla bir kullanıcı hesabı açmanız durumunda (yukarıda madde 2.1’de belirtmiş olduğumuz verilere ek olarak) bu kapsamda bizimle paylaştığınız zorunlu ve ihtiyari kişisel verileriniz, örneğin e-posta adresi, şifre, yüklenen fotoğraflar ve benzeri, tarafımızdan kaydedilecektir.

Bu durumda kişisel verileriniz KVKK madde 5’te düzenlenen ilgili kişinin açık rızası, meşru menfaati, veri sorumlusunun hukuki yükümlülüğünü yerine getirebilmesi veya bir sözleşmenin kurulması veya ifasıyla doğrudan doğruya ilgili olması hukuki sebepleri ile işlenecektir.

2.4. Ticari Elektronik İleti Gönderilmesi

6563 sayılı Elektronik Ticaretin Düzenlenmesi Hakkında Kanun ve Ticari İletişim ve Ticari Elektronik İletiler Hakkında Yönetmelik kapsamında perdue.com.tr tarafından sunulan ürün ve hizmetlere ilişkin kampanyalara ilişkin bilgi verilebilmesi, tanıtım ve pazarlama iletimleri, güncel gelişmeler hususunda bilgi iletimi, kutlama amaçlı iletiler ve e-bülten gibi içeriklerin paylaşılması ve benzer süreçlerin yürütülmesi adına iletişim bilgileri, kimlik bilgileri, pazarlama bilgileri, ürün ve hizmet satış bilgileri işlenebilmektedir. Ancak bu tür iletileri tarafınıza göndermemiz için önce “Ticari Elektronik İleti Gönderilmesine İlişkin Açık Rıza Metni”ni onaylamanız ve gerekli iletişim bilgilerinizi bizimle paylaşmanız gerekmektedir. Onayınız bağlamında kullandığınız IP adreslerinizi ve kayıt ve onay zamanlarını da kaydediyoruz. Prosedürün amacı, kaydınızı kanıtlayabilmektir.

Böylelikle yukarıda belirtilen amaçlar dahilinde kanunlara uygun olarak, sosyal medya, çevrimiçi reklam ağları, arama motorları, e-mail, kısa mesaj, telefonla arama, otomatik arama ve diğer elektronik iletişim yoluyla sizinle iletişime geçilebilmektedir.

Bu durumda kişisel verileriniz KVKK madde 5/1 bendinde düzenlenen “ilgili kişinin açık rızası” hukuki sebebi ile işlenecektir.

Elektronik Ticari İleti gönderilmesine ilişkin onayınızı ve e-bülteni aboneliğinizi istediğiniz zaman iptal edebilirsiniz. Her e-bülteni, e-posta ve diğer iletişim yollarında verilen bağlantıya tıklayarak iptal talebinizi beyan edebilirsiniz.

2.5. Çerez kullanımı ile ilgili ayrıntılı bilgi için “Çerez Politika”mıza yandaki bağlantıdan ulaşabilirsiniz: Çerez Politikası

3.Kişisel Verilerin Aktarılması

perdue.com.tr Kişisel verilerinizi yukarıda belirtilen amaç ve hukuki sebepler ile sınırlı olarak ve varsa yasal yükümlülükler veya zorunluluklar gereği bu verileri talep etmeye yetkili olan kamu kurum ve kuruluşları ile, ayrıca sistem gereği web sunucusunu kullanıma açan sağlayıcıya, İletişim formu aracılığıyla bize gönderdiğiniz veriler, e-posta sunucusunu sağlayan E-posta hizmet sağlayıcı bilgilerini ekleyiniz. ile kanunun 8. ve 9. maddelerine uygun olarak paylaşabilecektir.

1. Kişisel verilerin saklanması

Şirketimiz, kişisel verilerin muhafazasını sağlamak, kişisel verilerin hukuka aykırı olarak işlenmesini ve kişisel verilere hukuka aykırı olarak erişilmesini önlemek amaçlarıyla gerekli tüm teknik ve idari tedbirleri almaktadır. Kişisel verileriniz, size bildirilen amaçlar ve kapsam dahilinde kullanılmakta olup gerekli bilgi güvenliği tedbirleri alınarak işlenmektedir ve yasal saklama süresince veya böyle bir süre öngörülmemişse işleme amacının gerekli kıldığı süre boyunca saklanmaktadır.

Kişisel verileriniz yasal saklama süresi ve veri işleme amacını ortadan kalkması ardından, sair mevzuatlarda yer alan zamanaşımı süreleri dikkate alınarak, ilk periyodik imha işlemi (her 6 ayda bir) çerçevesinde silinecek, imha edilecek veya anonim hale getirilecektir. Saklama süreleri ile ilgili ayrıntılı bilgi için “Kişisel Veri İşlenmesi ve Korunması Politikası”nı inceleyiniz.

1. Veri Sahibinin Hakları

Kişisel veri sahipleri olarak, haklarınıza ilişkin taleplerinizi, perdue.com.tr’a iletebilirsiniz. Bu kapsamda kişisel veri sahipleri;

• Kişisel veri işlenip işlenmediğini öğrenme,
• Kişisel verileri işlenmişse buna ilişkin bilgi talep etme,
• Kişisel verilerin işlenme amacını ve bunların amacına uygun kullanılıp kullanılmadığını öğrenme,
• Yurt içinde veya yurt dışında kişisel verilerin aktarıldığı üçüncü kişileri bilme,
• Kişisel verilerin eksik veya yanlış işlenmiş olması hâlinde bunların düzeltilmesini isteme ve bu kapsamda yapılan işlemin kişisel verilerin aktarıldığı üçüncü kişilere bildirilmesini isteme,
• KVK Kanunu’nun ve ilgili diğer kanun hükümlerine uygun olarak işlenmiş olmasına rağmen, işlenmesini gerektiren sebeplerin ortadan kalkması hâlinde kişisel verilerin silinmesini veya yok edilmesini isteme ve bu kapsamda yapılan işlemin kişisel verilerin aktarıldığı üçüncü kişilere bildirilmesini isteme,
• İşlenen verilerin münhasıran otomatik sistemler vasıtasıyla analiz edilmesi suretiyle kişinin kendisi aleyhine bir sonucun ortaya çıkmasına itiraz etme,
• Kişisel verilerin kanuna aykırı olarak işlenmesi sebebiyle zarara uğraması hâlinde zararın giderilmesini talep etme haklarına sahiptir.

Yukarıda sayılan haklarınıza ilişkin taleplerinizi Veri Sorumlusuna Başvuru Usul ve Esasları Hakkında Tebliğde öngörülen başvuru usullerine uygun olarak perdue.com.tr’a iletmeniz durumunda talebinizi niteliğine göre en kısa sürede ve en geç 30 gün içinde sonuçlandırılacaktır.

Kişisel verilerinizle ilgili olarak yukarıda sıralanan haklarınıza yönelik taleplerinizi; adınızın, soyadınızın, T.C. kimlik numaranızın, yabancı iseniz uyruğunuzun ve pasaport numaranızın, tebligata esas adresinizin veya elektronik posta adresinizin ekli bulunduğu, talep konusunun açıkça belirtildiği ve imzaladığınız başvuru yazınızı aşağıda belirtilen yollardan birisini kullanarak iletebilirsiniz.

Başvuru Yöntemi

Şahsen Başvuru (Başvuru sahibinin bizzat gelerek veya posta yoluyla kimliğini tevsik edici belge ile başvurması)

Noter vasıtasıyla tebligat

Başvurunun Yapılacağı Adres

www.perdue.com.tr

Kızılcakaya Mevkii Faralya Fethiye / Muğla

Gönderimde Belirtilecek Bilgi

Tebligat Zarfı üzerine “Kişisel Verilerin Korunması Kanunu Bilgi Talebi” yazılmalıdır.

Kişisel Veri Başvuru Formu yoluyla Veri Sahibi Başvuru Formu için tıklayınız

Başvurunuz ücretsiz olarak sonuçlandırılacaktır, ancak işlemin ayrıca bir maliyet gerektirmesi halinde kişisel verileri koruma kurulunca belirlenen tarifedeki ücreti talep edebilecektir.

1. Değişiklik

perdue.com.tr Kişisel Verilerin Korunması Hakkında Aydınlatma metnini yürürlükteki mevzuatta yapılabilecek değişiklikler çerçevesinde her zaman güncelleme hakkına sahiptir.