BHM OTELCİLİK A.Ş. SANDU BRANCH

PROTECTION OF PERSONAL DATA

CUSTOMER, VISITOR AND MEMBER DISCLOSURE TEXT

Dear Guests,

At Bhm Otelcilik A.Ş. Sandu Branch, we place great importance on the protection of your personal data and handle it with the utmost care.

In line with this commitment, Bhm Otelcilik A.Ş. Sandu Branch processes your personal data as a "Data Controller," as defined under Law No. 6698 on the Protection of Personal Data (“PDPL”), strictly adhering to the purposes and methods outlined in the PDPL, within the limits established by legislation, and in compliance with data retention and destruction requirements and deadlines.

 

1. Your Personal Data We Process

·      Identity Information: Name, surname, date of birth, Turkish ID number, Passport number, date of birth,

·      Contact Information: Address, postal code, e-mail address, telephone number,

·      Financial Information: e-invoice information, TR ID number, tax number, private company information, detailed breakdown of expenses, bank account information, your credit card information in order to receive the payment if you want to make your payment by credit card (credit card information is transferred to the payment institution without being recorded and other payment information,

·      Physical Space Security: At Bhm Otelcilik A.Ş. taken during your visits to Bhm Otelcilik A.Ş. Sandu Branch, your entry and exit dates and information

·      Transaction Security Information: username, password, browsing information, IP address, browser information, location data obtained when you log in with your username and password during the use of our website and application,

·      Customer comments, feedback and complaint data: reviews, opinions or complaints about our website, comments and responses shared for the purpose of evaluating services, order-related information,

·      Preference information: Details about your use of the Site, (such as your behavior on the website, transactions, preferences, products visited)

·      Marketing: Shopping history, cookie records, special day information, likes and related comments in case you give permission for electronic commercial communication, campaigns utilized, information obtained as a result of surveys

2. Purpose of Processing Personal Data

·      Creating the Membership Process: Realization of the membership process, execution of the membership contract we will execute with you, entering your membership information into the system, confirming your identity and contact information,

·      Creating the Order and Fulfillment of Your Related Services: Processing of purchase date, quantity, ordered product contents and detailed payment details in order to manage and provide services for order planning and fulfillment activities, view your order history, view your shopping information and make transactions,

·      Establishing Communication and Ensuring Product Delivery: Interviews with you in order to convey your order information, provide support, convey payment information to you, plan to deliver the orders you have placed to the addresses you have specified, and ask for information about the products,

·      Evaluation of Your Requests and Comments: Measuring, increasing and researching customer satisfaction, planning and execution of customer relationship management processes, receiving and evaluating requests and complaints,

·      Fulfillment of Legal Obligations: Ensuring compliance with national and international legislation to which Bhm Otelcilik A.Ş. Sandu Branch is subject and fulfilling the obligations arising from the relevant legislation, following up and executing its legal affairs, responding to the applications of the relevant persons in accordance with the legislation and taking the necessary actions, fulfilling the requests of official institutions,

·      Execution of Accounting and Finance Processes: Carrying out finance or accounting operations, forwarding financial information or invoice to the e-mail address you specified during registration, receiving payments and making refunds if necessary, planning payment preferences,

·      Ensuring Physical Space Security: Ensuring compliance with Bhm Otelcilik A.Ş. Sandu Branch premises and/or facilities, creating and monitoring visitor records

·      Ensuring Transaction Security: Browsing information, IP address, browser information, location data obtained when you log in with your username and password during the use of our website and application,

·      Data Processing for Advertising Purposes: Your personal data may be processed, in accordance with the consent you have provided, to share information about products, promote and market goods and services, enhance brand awareness, or convey messages such as celebrations and well-wishes. In line with the permission you have given, to ensure that you are also informed about the campaigns of our business partners within Bhm Otelcilik A.Ş. Sandu Branch.

Your personal data, obtained and processed in compliance with the relevant legislation for these purposes, may be stored in the physical archives and/ or information systems of Bhm Otelcilik A.Ş. Sandu Branch and retained in both digital and physical formats.

3. To Whom and For What Purpose Your Personal Data Will Be Transferred

·      Fulfillment of Legal Obligations: To fulfill its legal obligations, our Company may share your personal data with public institutions and organizations, such as judicial authorities, the General Directorate of Security, other law enforcement agencies, and the Personal Data Protection Authority, in accordance with the Law on the Protection of Personal Data, the Law on Consumer Protection, and other applicable legal regulations.

·      Sharing with Our Lawyers: Your personal data may be shared with our legal advisors for purposes such as fulfilling legal obligations or obtaining information, provided it is limited to the relevant subject matter.

·      Our Business Partners We Are Working With: Your personal data may also be shared, within the scope of the relevant subject, with third-party service providers, such as banks and electronic payment institutions (excluding credit card information), internal operating system application providers, website management companies, service providers and business partners for marketing, advertising, and analysis activities, electronic message intermediary service providers, and cargo and courier companies.

·      Sharing with Your Authorized Legal Representative: Your personal data may be shared solely within the scope of the request and authorization of your legally authorized representative, in accordance with their legal request.

·      Use of Applications and Websites: Your personal data may also be shared with companies that process data on behalf of our company, websites and information technology servers utilized by our company and their service providers, as well as companies providing cloud computing services, when cloud computing is employed.

·      For the Realization of Audit Processes: Your personal data may be shared with audit firms, information security firms, and regulatory or supervisory institutions to facilitate necessary quality, confidentiality, and standard audits, as well as to conduct internal and external audits.

4. Method of Collection of Your Personal Data and Legal Reasons

Your personal data may be collected and processed by the relevant units of Bhm Otelcilik A.Ş. Sandu Branch, in accordance with the Law, either automatically or non-automatically, through verbal, written, or electronic means, depending on the nature of the service provided. This includes collection through physical media, order forms, communications such as interviews or messages, our mobile application, requests and communications during your shopping experience, software, various contracts, email, social media platforms, and in-house security cameras, for the purposes outlined in paragraph (2) of this text.

By the methods mentioned above;

·      Your personal data may be processed based on the legal grounds that "it is stipulated by law," "data processing is necessary for the establishment and performance of the contract," "fulfillment of legal obligations" concerning retention requirements under applicable legislation, and "data processing is mandatory for the legitimate interests of the data controller."

·      Personal data collected through security camera recordings within the company is processed under the legal grounds of "ensuring the security of the building, facilities, and premises," "fulfillment of the data controller's legal obligations," and "data processing is mandatory for the legitimate interests of the data controller, provided it does not infringe on the fundamental rights and freedoms of the data subject."

 

5. Scope and Amendment of the Personal Data Protection and Processing Policy

This Clarification Text, prepared by BHM Otelcilik A.Ş., has been drafted in accordance with Law No. 6698 on the Protection of Personal Data. BHM Otelcilik A.Ş. reserves the right to amend this Clarification Text on the Protection of Personal Data, provided such changes comply with the Law and board decisions, to ensure better protection of personal data.

6. Information on Commercial Electronic Messages

Pursuant to Law No. 6563 on the Regulation of Electronic Commerce and the Regulation on Commercial Communication and Commercial Electronic Messages, your personal data may be processed to inform you about our services, promote our goods and services, and keep you updated on our campaigns. In compliance with the relevant legislation, your commercial electronic message permissions must be recorded in the Message Management System (IYS). Accordingly, data such as your contact information (email address and/or telephone number), permission date, communication channel, recipient type, and permission source will be shared with IYS. For more detailed information about the IYS, please visit https://iys.org.tr/.

 

7. Your Rights Regarding the Protection of Your Personal Data

You may exercise your rights under Article 11 of the Law regarding your personal data processed by Bhm Otelcilik A.Ş. Sandu Branch by applying to us at any time. Under this article, you have the following rights:

·      “To learn whether your personal data is being processed”,

·      “To request information about the processing of your personal data”,

·      “To understand the purpose of processing your personal data and whether it is being used for its intended purpose”

·      “To know the third parties to whom your personal data is transferred, domestically or internationally”,

·      “To request the correction of your personal data in case of incomplete or incorrect processing and to request notification of such corrections to third parties to whom the data has been transferred”,

·      “To request the deletion or destruction of your personal data if the reasons for processing no longer exist, and to request notification of such actions to third parties to whom the data has been transferred,”,

·      “To object to unfavorable outcomes that may result from the processing of your personal data through automated systems”

·      “To request compensation for damages if you suffer harm due to the unlawful processing of your personal data”,

 

 

Application Method

You can submit your requests within the scope of the Law;

·      in person to Akkuyu Mah.Anadolu Cad.C Blok No:154CC Konyaaltı/Antalya by filling out the “Application Form in accordance with the Law on the Protection of Personal Data” at “https://www.sandu.com.tr”,

·      send it through a notary public,

·   send it to info@sandu.com.tr with secure electronic or mobile signature, via registered e-mail address or your electronic e-mail address registered in our system.

Depending on the nature of your request, your applications will be processed free of charge and finalized as quickly as possible, within a maximum of thirty days; however, if the transaction incurs additional costs, a fee may be charged in accordance with the tariff set by the Personal Data Protection Board.

Please note that the request must comply with the conditions outlined in the Communiqué on the Procedures and Principles of Application to the Data Controller.