Protection of Personal Data

1. Data Controller

Within the scope of the Personal Data Protection Law No. 6698 ("Law"), your personal data is processed by Cumbalı Plaza Hotel as the data controller within the framework described below.

2. Your Processed Personal Data

Depending on the nature of the business relationship or the website / contact form / request for proposal / membership / reservation process, your following data may be processed:

• Identity information
• Contact information
• Customer transaction information
• Request / complaint information
• Transaction security information
• Marketing information
• Financial information
• Visual and audio records
• Website usage data and cookie data

3. Purposes of Processing Your Personal Data

Your personal data may be processed for the following purposes:

• Offering products and services
• Executing proposal, sales, reservation, order, and support processes
• Conducting communication activities
• Evaluating requests, suggestions, and complaints
• Managing customer satisfaction processes
• Executing accounting and financial transactions
• Fulfilling legal obligations
• Executing information security processes
• Carrying out campaign, promotion, and commercial communication activities, provided you have explicit consent

4. Method and Legal Reason for Collecting Your Personal Data

Your personal data may be collected via physical or electronic media such as the website, contact forms, e-mail, phone, WhatsApp line, social media channels, contracts, application forms, camera recording systems, and similar environments.

These data may be processed based on the following legal reasons:

• being explicitly stipulated by the laws,
• being directly related to the establishment or performance of a contract,
• the data controller fulfilling its legal obligation,
• data processing being mandatory for the establishment, exercise, or protection of a right,
• the legitimate interest of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject,
• your explicit consent where required.

5. Transfer of Your Personal Data

Your personal data may be transferred, limited to the fulfillment of the above purposes and by taking the necessary security measures, to:

• authorized public institutions and organizations,
• business partners from whom legal, financial advisory, IT, and operational support services are received,
• payment institutions / banks,
• cargo, logistics, and call center service providers,
• suppliers and business partners when necessary.

6. Your Rights as the Data Subject

Under Article 11 of the Law, you have the right to:

• learn whether your personal data is being processed,
• request information if it has been processed,
• learn the purpose of processing and whether they are used in accordance with their purpose,
• know the third parties to whom it is transferred domestically or abroad,
• request correction if it is incomplete or incorrectly processed,
• request deletion or destruction if the conditions are met,
• request that the third parties to whom the correction / deletion / destruction processes are transferred be notified,
• object to the emergence of a result against you due to analysis exclusively by automated systems,
• request compensation for the damage if you suffer damage due to unlawful processing.

7. Application Method

You can submit your requests regarding your rights listed in Article 11 of the Law to Cumbalı Plaza Hotel via the following channels:

Your applications will be evaluated within the scope of the relevant legislation and concluded in a timely manner.