ZORLU YAPI YATIRIM A.Ş. ZORLU CENTER OTELCİLİK ŞUBESİ
- Data Controller and Representative
In accordance with the Personal Data Protection Law No. 6698 (“Law“), your personal data may be processed by Zorlu Yapi Yatirim A.Ş. Zorlu Center Otelcilik Şubesi (“Zorlu” or “Company“) as the data controller within the scope described below.
- Purposes and Legal Reasons for Processing of Personal Data
Your personal data may be processed by our Company in accordance with the basic principles specified by the Law and within the framework of the personal data processing conditions for the following purposes:
|Processed Personal Data||Purposes of Personal Data Processing||Terms of processing of personal data|
- Personal Data Processing Activities Requiring Explicit Consent
Within the scope of the law, the explicit consent of the data owner must be obtained in order to process personal data for some purposes. To act in accordance with the personal data processing requirements in the Law, our Company will only be able to process your personal data for the purposes of processing below if you have consented.
|Processed Personal Data||Purposes of Processing Personal Data||Terms of processing of personal data|
- To Whom and For What Purpose the Processed Personal Data Can Be Transferred
Your collected personal data can be transferred in accordance with the personal data processing requirements specified in Article 8 of the Law for the purposes set out above to:
- Our suppliers who provide the Company with services such as software, maintenance, security and hosting personal data within the scope of information technologies;
- Financial institutions in line with the realization of payment transactions,
- Within the scope of delivering the services offered by our Company to our guests, the agencies who carried out brokerage activities on the behalf and account of our Company,
- Individuals and institutions dealing with the arrangement of your trip and accommodation (group travel organizers, companies you work at, agencies, business partners)
- Zorlu Holding Corporation, which provides services to our Company within the scope of audit, tax consultancy and execution of legal transactions,
- Public institutions and organizations authorized to receive information and documents from our Company in accordance with the provisions of the relevant legislation,
- Private institutions or organizations (independent audit companies, notaries or mediators) which are established in accordance with certain conditions determined by law and continue their activities within the framework determined by law.
- Methods of Personal Data Collection
Your personal data is collected in order to make you benefit from the products and services offered by our Company,
- In line with the reservations you have made online, our relevant business partners, e-mail, contact center/telephone for bookings made through raffles Hotel & Resort Istanbul website and other agencies;
- Through the accommodation card used for booking in a physical environment, the procedures carried out face-to-face during your stay, the gym, restaurant, spa and parking lot and channels or other services in accordance with the legal conditions specified in the second article of this text.
- Personal Data Owner’s Rights Listed in Article 11 of the Law
As a personal data owner, we inform you that you have the following rights in accordance with Article 11 of the Law:
- To find out if your personal data has been processed,
- Requesting information about your personal data if it has been processed,
- To find out the purpose of processing your personal data and whether it is used in accordance with its purpose,
- To find out the third parties to whom your personal data is transferred at home or abroad,
- To request correction of your personal data if it is incomplete or inaccurately processed, and to request the notification of the transaction carried out within this scope to the third parties to whom your personal data is transferred,
- To request the deletion or destruction of your personal data if the reasons requiring its processing disappear, even though it has been processed in accordance with the law and other relevant regulations, and in case of incomplete or inaccurate processing of your personal data to request the notification of the transaction carried out within this scope to the third parties to whom your personal data is transferred,
- To object to the emergence of a result against the Data Owner due to analyzing the processed data exclusively through automated systems,
- To request compensation in case of damage due to unlawful processing of your personal data.
You can submit your applications for your rights listed above by filling out the Data Owner Application Form, which can be accessed on https://www.rafflesistanbul.com/wp-content/uploads/sites/147/2022/03/Data_Subject_Application_Form_24022022_RIS.pdf Depending on the nature of your request, your applications will be finalized free of charge as soon as possible and within thirty days at the latest; however, if the transaction requires a cost, you may be charged according to the tariff to be determined by the Personal Data Protection Board.