Privacy Notice

This disclosure text, prepared in accordance with the Law on the Protection of Personal Data (KVKK) No. 6698 and the KVKK Policy prepared and implemented by BURAK TURİZM YATIRIM İŞLETMECİLİK PAZARLAMA VE TİCARET AŞ (hereinafter referred to as "KIRMAN HOTELS"), the data controller, regarding the explanations contained herein can be accessed from the Data Controller KVKK Policy and its annexes. Accordingly;

1. Processed Personal Data:
2. a) Identity and Family Information [Name-surname, ID number, Passport number, place of birth – date of birth, marital status, gender, children's names, number, age and date of birth, signature, voucher (travel card) information, register card (accommodation card information), room type and number, flight number, hotel stayed, accommodation dates and amount]
3. b) Contact Information [address, telephone number, email address]
4. c) Customer Transaction Information [Vehicle plate, survey form, records related to product and service presentation, requests, instructions, photos, marriage, birth special days anniversary, invoice information, order information, request information]
5. d) Physical Space Security Information [Customer and visitor entry-exit record information, camera records]
6. e) Transaction Security Information [IP address, hotspot records, password information, internet site entry-exit information, log and digital traffic records]
7. f) Financial Information [Credit card number, CVC code, expiration date]
8. g) Visual and Audio Records and Information [Visual and audio records and information]
9. h) Health Information [Information about disability status, chronic illnesses, diseases suffered, asthma, diabetes, heart, hypertension diseases, personal health information]
10. Methods and Legal Grounds for Processing Your Personal Data:

According to this disclosure text, your personal data is obtained verbally, in writing, or electronically through information, documents, and similar ways transmitted by third parties with whom we have a contractual relationship, and by third parties with whom we have a contractual relationship, in cooperation, and as a necessity of performing activities with solution partners within the framework of the principles stipulated in Article 5 of Law No. 6698 on the Protection of Personal Data. These data can be processed directly if the following conditions exist, even if your explicit consent is not required:

1. a) Clearly stipulated in the laws.
2. b) It is compulsory to protect life or physical integrity of the person or someone else who cannot express his/her consent due to actual impossibility or whose consent is not legally valid.
3. c) It is directly related to the establishment or performance of a contract, provided that it is necessary for the processing of personal data of the parties to the contract.
4. d) It is necessary for the data controller to fulfill its legal obligation.
5. e) It has been made public by the data subject himself/herself.
6. f) It is necessary for the establishment, exercise, or protection of a right.
7. g) It is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Your special categories of personal data other than health and sexual life within the scope of Article 6 of Law No. 6698 on the Protection of Personal Data can be processed with your explicit consent or in cases stipulated in the law in accordance with the same article. In case of absence of explicit consent, your personal data related to health and sexual life can only be processed by persons or authorized institutions or organizations under the obligation of confidentiality for the purpose of protecting public health, carrying out preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and their financing, without requiring the explicit consent of the data subject.

3. Purpose of Processing Your Personal Data:

Your personal data is processed within the framework of the principles set forth in Articles 4, 5, and 6 of Law No. 6698 on the Protection of Personal Data, such as compliance with the law and honesty rules, being accurate and up-to-date when necessary, being processed for specific, clear, and legitimate purposes, being relevant, limited, and proportionate to the purposes for which they are processed, and being kept for the period stipulated by the relevant legislation or required for the purpose for which they are processed. The purposes for which they are processed include the following:

1. Management of Emergency Response Processes
2. Execution of Information Security Processes
3. Conducting Activities in Compliance with Legislation
4. Conducting Financial and Accounting Affairs
5. Conducting Loyalty Processes to Company / Product / Services
6. Ensuring Physical Space Security
7. Pursuit and Execution of Legal Affairs
8. Execution of Communication Activities
9. Execution of Sales Processes for Goods / Services
10. Execution of Product / Service Production and Operation Processes
11. Management of Customer Relations Processes
12. Conducting Activities for Customer and Guest Satisfaction, Service Quality
13. Organization and Event Management
14. Execution of Advertising / Campaign / Promotion Processes
15. Execution of Storage and Archive Activities
16. Execution of Contract Processes
17. Tracking Requests / Complaints
18. Ensuring Data Controller Operations Security
19. Execution of Investment Processes
20. Providing Information to Authorized Individuals, Institutions, and Organizations
21. Execution of Management Activities
22. Creation and Tracking of Visitor Records

Your personal data is not processed for purposes other than those mentioned above. All necessary technical and administrative measures are taken by the enterprise to prevent the unlawful processing or access of personal data.

4. Transfer of Your Personal Data:

Your personal data may be transferred abroad or domestically in accordance with Articles 8 and 9 of Law No. 6698 on the Protection of Personal Data under the following conditions:

Personal data may be transferred to natural or legal persons with whom we have contractual relationships, solution partners with whom we have contractual relationships, and third parties from whom services are received or to whom services are provided, in accordance with Articles 8 and 9 of

Veri Sorumlusunun Kimliği

Application Address and Contact Information: