Point HOTEL Management A.Ş. (hereinafter referred to as "HOTEL") processes the personal data of our HOTEL visitors as the data controller under the Law No. 6698 on the Protection of Personal Data (hereinafter referred to as "KVKK").
This text has been prepared in accordance with Article 10 of the KVKK to inform you about the personal data processed during your visit to the HOTEL as the "Data Controller"; our purposes for processing your personal data, to whom and for what purposes we transfer your personal data, our methods and legal grounds for processing your personal data, and your rights as a data subject.
1-) DATA CONTROLLER:
ADDRESS: Yıldız Posta Cd. No: 33 34394 Şişli / Istanbul
Phone Number: 0212 337 30 00
Email: kvkk@pointhotel.com
Registered Electronic Mail (KEP): pointhotel@hs01.kep.tr
Mersis Number: 0730036964500036
2) Scope of the Information Text:
This text covers individuals whose personal data is processed in the Hotel Visitor Register during their daily visits to the Hotel, whether they are guests staying at the Hotel or Hotel personnel.
3) Personal Data Processed and Purposes of Processing Personal Data:
The categories of personal data processed for daily visitors of the Hotel are listed below, and each data category is processed for the purposes stated opposite it.
Personal Data
Purposes of Processing Personal Data
Identity Information: Name – Surname, Turkish Republic Identity Number
To prevent unauthorized entry and exit from the HOTEL and to ensure security.
Contact Information: Telephone Number.
To ensure contact with relevant individuals in urgent and important situations during daily visits and to ensure security.
Camera Footage: Cameras inside the HOTEL.
To ensure the physical security of the HOTEL, to protect the legitimate interests of the employer, to protect the life and property of guests, personnel, daily visitors or third parties, and to obtain evidence suitable for proof in possible disputes.
License Plate Information: Vehicle.
To create records of daily visitors to the HOTEL, to ensure their tracking, and to control the entry and exit of the HOTEL.
4-) PARTIES TO WHOM PERSONAL DATA MAY BE TRANSFERRED:
The parties to whom the personal data subject to this disclosure text may be transferred are listed below.
Your personal data may be transferred domestically or internationally in accordance with the personal data transfer conditions set forth in Articles 8 and 9 of the KVKK (Law on Protection of Personal Data) for the purposes stated below.
Categories of Personal Data
Parties
Identity
Judicial Authorities, Law Enforcement Authorities and Authorized Public Institutions.
Contact Information
Judicial Authorities, Law Enforcement Authorities and Authorized Public Institutions.
Camera Images
Judicial Authorities, Law Enforcement Authorities and Authorized Public Institutions.
License Plate Information
Judicial Authorities, Law Enforcement Authorities and Authorized Public Institutions.
5-) PROTECTION OF PERSONAL DATA:
In accordance with Article 12 of the KVKK; as the data controller, we take all necessary technical and administrative measures to prevent the unlawful processing of your personal data, to prevent unlawful access, to preserve personal data and to prevent it from falling into the hands of unauthorized persons. The main measures taken in this regard are as follows:
ADMINISTRATIVE MEASURES:
• Personnel Data Protection Awareness Training: Hotel personnel are periodically trained on the protection of personal data; awareness is ensured among personnel in accordance with current GDPR legislation and principles.
• Authorization Matrix: Within the hotel, access to personal data is restricted only to authorized persons who have the necessary access to the relevant data.
• Data Destruction Policy: The retention periods for each personal data processed belonging to personnel and customers within the hotel are determined, and personal data whose retention period has expired are periodically deleted, destroyed, or anonymized in accordance with our "Personal Data Retention and Destruction Policy".
TECHNICAL MEASURES:
• Physical Security: Physical archives and server rooms where data is stored are protected against natural disasters such as fire, flood, and earthquake; entry and exit to these areas are restricted to authorized personnel.
6-) METHODS AND LEGAL GROUNDS FOR COLLECTING PERSONAL DATA:
Your personal data is collected during your visit to the HOTEL by being recorded in the HOTEL Visitor Register and through security cameras located in the HOTEL.
Methods of Personal Data Collection
Legal Grounds:
Personal data regarding the identity information of daily visitors to the HOTEL is processed manually by filling in the HOTEL Visitor Register with the personal data of the relevant person during their visit to the HOTEL.
In accordance with Article 5/2 - (f) of the KVKK (Personal Data Protection Law), "Provided that it does not harm the fundamental rights and freedoms of the data subject, the data controller..."
"Processing data is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject."
Personal data regarding the contact information of daily hotel visitors are processed manually by filling in the Hotel Visitor Register during the hotel visit.
In accordance with Article 5/2 – (f) of the KVKK (Personal Data Protection Law), "Processing data is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject."
Personal data regarding the camera footage of daily hotel visitors are processed automatically through the hotel's security cameras during the hotel visit.
In accordance with Article 5/2 – (f) of the KVKK, "Processing data is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject."
Personal data regarding the license plate information of daily visitors to the HOTEL is processed manually by filling in the HOTEL Visitor Register with the relevant person's personal data during their visit.
In accordance with Article 5/2 - (f) of the KVKK (Personal Data Protection Law), "Processing of data is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject."
7) STORAGE AND DESTRUCTION PERIODS OF PERSONAL DATA:
The storage periods for personal data, categorized by data type, are listed below, and personal data will be destroyed at the end of these periods.
PERSONAL DATA
STORAGE PERIODS
DESTRUCTION PERIODS
Identity
3 months.
At the first periodic destruction period following the end of the storage period
Contact
3 months.
At the first periodic destruction period following the end of the storage period
Camera Images
3 months.
At the first periodic destruction period following the end of the storage period
License Plate Information
3 months.
At the first periodic destruction period following the end of the storage period
8) RIGHTS OF THE DATA SUBJECT:
The natural person whose personal data is processed is defined as the data subject and has the following rights by applying to the workplace:
a) To learn whether personal data is being processed, b) The right to request information regarding the processing of personal data, c) The right to learn the purpose of the processing of personal data and whether it is used in accordance with its purpose, d) The right to know the third parties to whom personal data has been transferred, domestically or abroad, e) The right to request the correction of personal data if it is incomplete or inaccurate, f) The right to request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7, g) The right to request that the actions taken pursuant to clauses (d) and (e) be notified to the third parties to whom personal data has been transferred, h) The right to object to a result that is detrimental to the individual arising from the analysis of processed data exclusively through automated systems, i) The right to demand compensation for damages incurred as a result of the unlawful processing of personal data.
In accordance with Article 11 of the Law No. 6698 on the Protection of Personal Data, titled "Rights of the Data Subject," you can submit your requests regarding your personal data in writing to Yıldız Posta Cd. No:33 34394 ŞİŞLİ / İSTANBUL or to our email address kvkk@pointhotel.com. Your requests will be responded to free of charge in writing or electronically as soon as possible, and no later than thirty days, depending on the nature of the request.
This Privacy Notice may be revised by the HOTEL as deemed necessary.
I have read and understood this privacy notice prepared by Point HOTEL Management A.Ş.