Protecția datelor cu caracter personal

MIRACLE RESORT HOTEL INFORMATION TEXT

We, as MON INSAAT ve TİCARET LTD. STİ. MIRACLE RESORT HOTEL, would like to advise you that we act in compliance with the Law Nr. 6698 on Protection of Personal Data ("LPPD") with respect to processing, recording, transferring, sharing and storing any and all kinds of personal data and private personal data of our esteemed customers, and also that we exercise due diligence with respect to such matter. We would like to state that the data received by our company is processed in the system only as much as necessary due to the fact that “any data that we will collect is determined based on intended use thereof". Any data, which is provided by our esteemed customers, and/or which is collected automatically or non-automatically, is carefully processed, shared, transferred and stored under the administrative and technical measures taken in order to enhance the quality of the services provided by us, and any unnecessary data is deleted. In accordance with the Section 10 "Obligation of Data Controller to Provide Information" and Section 11 "Rights of the Concerned Person" as provided under the Law Nr. 6698 on Protection of Personal Data (LPPD); we would like to inform you through this "Information Text" that is drawn up by us with respect to the purpose of processing of your personal data, and the persons, to whom your personal data may be transferred, and the purpose of such transfer, and the method and legal reason for collection of your personal data, and also the rights owned, in order to fulfill our obligation to provide information to our customers, business partners and real or legal persons, with whom we communicate, as MON INSAAT ve TICARET LTD. STI. MIRACLE RESORT HOTEL (“the Company”) operating in the capacity of data controller.

1 - The Purpose of Processing of Your Personal Data, the Persons, to Whom Your Personal Data will be Transferred, and the Purpose of Such Transfer

Processing the data

Our Company processes your personal data, which it has obtained by means of one of the collection methods as specified under the 3rd heading hereof, upon your explicit consent in order to carry out the main activities of the company, and to plan and implement the marketing processes of the products and services, and to carry out the reporting and analysis activities, and to provide and announce the products and services to the customers by customizing the same, and to carry out promotional activities with respect thereto, and to share with and disclose to the third persons, to whom it is required to be transferred due to the activities of the company.

Transferring the data

For the purpose of enabling you to utilize the products and services, which are provided by us to you by customizing the same based on the inclination and habits of our esteemed customers, with the high quality of service; we collect your personal data within the limits set out under the statutory regulations, and we process the same under the terms and purposes as specified in the Section 5 and 6 of the Law Nr. 6698. We disclose your personal data to our national and international subsidiaries, and our direct and indirect affiliates, and our joint ventures, or the public institutions and organizations that are authorized to request such data in accordance with any statutory requirement, and the other contracted institutions, suppliers, authorized dealers and our business partners in order to provide value added services, chances and opportunities to our customers and to enhance the quality of service.

2 - Cases in which the Personal Data may be Processed without any Explicit Consent as required by the Laws

Our Company may process your personal data, which is specified above, and which has been obtained by our Company in compliance with the law, without your explicit consent pursuant to the Section 5 of the LPPD in the event that:

• It is prescribed explicitly under the applicable laws;
• It is necessary to protect the life or bodily integrity of the concerned person or any other person, who may not grant her/his consent since it is actually impossible or the consent of whom is not recognized in legal terms;
• It is necessary to process any personal data of the parties to the agreement to the extent that it is directly associated with establishment or performance of any agreement,
• It is mandatory for the data controller in order to fulfill its statutory obligation therefor;
• Any such data is already made public by the concerned person;
• Any such data is required to be processes in order to establish, exercise or protect any right;
• The data processing is required for legitimate interests of the data controller to the extent that the fundamental rights and freedoms of the concerned person are not damaged;

3. Collection of Personal Data, and the Method and Legal Grounds thereof

Your personal data, which varies based on the service, product or business provided, are collected automatically or non-automatically, or means of the offices, branches, dealers, call centers, websites, social media, mobile application and similar methods for the purposes as specified above in order to be able to provide and carry out the products and services with the highest quality of service and on legal basis, and accordingly to enable our Company to fulfill its liabilities, arising from any agreement executed with its business partners and from the law, in a complete and proper manner.

4 - Duration of Storage of Personal Data

Your personal data, which has been processed for the purposes as specified under this "Information Text on Processing of Personal Data", will be deleted and disposed by us in compliance with the LPPD, or it will be continued to be used by being anonymized, upon disappearance of the purpose requiring processing thereof in accordance with the Section 7/f.1 of the LPPD, and/or upon expiration of the period of limitation, during which we are required to process your date pursuant to the regulations.

5 - Rights of Personal Data Owners

We inform you that you have the following rights with respect to your personal data in accordance with the Section 11 and entire of the LPPD:

• to inquire whether their personal data have been processed, or not; and
• to ask for information regarding any such processed personal data; and
• to be informed about the purpose of processing of any such data, and also about the fact that whether such data have been used as appropriate to the purpose thereto; and
• to be informed about the 3rd parties to which any such data has been transmitted either domestically or internationally; and
• to ask for correction thereof, in case any personal data has been processed imperfectly or inaccurately; and
• to ask for deletion or disposal of any such personal data in accordance with the terms and conditions prescribed under the Article 7 thereof; and
• to ask for notifying any third party, to which any such personal data has been transmitted, of the actions taken as per the sub-paragraphs (e) and (f) herein; and
• to raise an objection against such outcome in case of emergence of an outcome that is to the detriment of you upon the analysis of any such processed personal data solely by any automatic systems; and also
• to claim for compensation of any and all damage and/or loss that might have been incurred in case any such personal data has been processed in breach of the law.

In the event that you intend to exercise your rights as specified under the Section 11 of the Law on Protection of Personal Data, you are required to complete the LPPD Information Application Form available in our web page, and to send such form personally or to our registered electronic mail (REM) address moninsaat.miraclehotel@hs03.kep.tr. Your requests available in your application will be concluded free of charge within a period of 30 days, at the latest, based on the nature of the requests. However; in the event that the transaction requires any additional cost for the Company, then the amount, which is determined by the Personal Data Protection Board under the Communiqué on the Procedures and Principles of Filing an Application with the Data Controller, may be collected.