EXPLANATION TEXT OF OBA THERMAL OTEL VE TURİZM İŞLETMELERI ANONİM ŞİRKETİ ON THE PROCESSING OF PERSONAL DATA
Our company Oba Termal Otel ve Turizm İşl. A.Ş. attaches great importance to ensuring the security of your personal information that you have transmitted to us, both when using our website and through other means. “Personal Data Protection Law” No. 6698 came into effect. We would like to inform you about the aforementioned legislation and some definitions specified in this legislation.

Personal data: Any information relating to an identified or identifiable natural person

Processing of personal data: Obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available personal data by fully or partially automatic or non-automatic means provided that it is a part of any data recording system, All kinds of operations carried out on the data such as classification or prevention of its use

Data processor: The natural or legal person who processes personal data on behalf of the data controller, based on the authority given by the data controller,

Data registration system: The registration system in which personal data is processed by structuring according to certain criteria,

Data controller: It refers to the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system. Within the scope of the law, our company acts as a data controller.
Our Company, in the capacity of data controller, by the travel agencies we work with, or through our websites and social media pages or all kinds of channels including but not limited to; your personal and/or sensitive personal data; can be obtained, recorded, stored, changed, updated, periodically controlled, rearranged, classified, stored for the period required for the purpose for which they are processed or for the period stipulated in the relevant law, in case of legal or service-related actual requirements. or with public institutions and organizations to which it is legally liable, and/or with third parties, natural persons/legal persons residing in Turkey or abroad, service providers and supplier companies, insurance companies,
Data Controller and Representative

In accordance with the Law on Protection of Personal Data No. 6698 (“Law No. 6698”), your personal data; OBA THERMAL OTEL VE TURİZM İŞL. Inc. may be processed within the scope described below.

For What Purpose Personal Data Will Be Processed
To fulfill our legal obligations, to exercise our rights arising from the current legislation, to make the necessary work for you to benefit from the products and services offered by our Company, to be carried out by our business units, to meet customer needs; ensuring the execution of our company’s human resources policies; It will be processed in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law No. 6698, for the purpose of ensuring the legal and commercial security of our company, determining and implementing our company’s commercial and business strategies. ensuring the execution of our company’s human resources policies; It will be processed in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law No. 6698, for the purpose of ensuring the legal and commercial security of our company, determining and implementing our company’s commercial and business strategies. ensuring the execution of our company’s human resources policies; It will be processed in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law No. 6698, for the purpose of ensuring the legal and commercial security of our company, determining and implementing our company’s commercial and business strategies.
Your personal data will not be used for purposes other than the above-mentioned purposes without your explicit consent, and will not be shared or transferred to third parties, except for legal obligations and official institutions/organizations.

To Whom The Processed Personal Data Can Be Transferred And For What Purpose
Your collected personal data; Realization of processing purposes, carrying out the necessary work by our business units to benefit you from the products and services offered by our company; Suggesting the products and services offered by our company to you by customizing them according to your tastes, usage habits and needs; Ensuring the execution of our company’s human resources policies; Ensuring the legal and commercial security of our company; For the purposes of determining and implementing our company’s commercial and business strategies; to our dealers, business partners (accommodation companies, airline companies, companies providing transportation services including land and sea, car rental companies, insurance companies, transfer personnel and persons and organizations related to the service provided, including but not limited to), our suppliers,
Method and Legal Reason for Collecting Personal Data Your personal data is provided by our Company through different channels (via all kinds of channels including but not limited to our company / travel agencies / website / call center / partner or supplier companies) and based on different legal reasons; It is collected in written, verbal or electronic media by automatic or non-automatic methods in order to develop the products and services we offer and to carry out our commercial activities. Your collected personal data can also be processed and transferred for the purposes specified in articles (b) and (c) of this Clarification Text within the scope of personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698.

Periods of Processing Your Personal Data
In accordance with the KVK Law, your personal data processed for the purposes specified in this “Informative Text on the Processing of Personal Data” disappears when the purpose that requires processing according to article 7/f.1. When the expiration period expires, your personal data will be deleted, destroyed or anonymized by us.

Processing of Private Personal Data

According to the KVK Law, people’s race, ethnicity, political opinion, philosophical belief, religion, sect or other beliefs, disguise and dress, association, foundation or union membership, health, sexual life, criminal conviction and security Biometric and genetic data are personal data of special nature. Our company also takes the necessary precautions determined by the Personal Data Protection Board in the processing of sensitive personal data. In order to provide better service, our company will process the private data of individuals only with the consent of the relevant person and only to serve the purpose of collection.

Situations where your personal data may be processed without your express consent as required by law
Pursuant to Article 5 of the KVK Law, it is possible to process personal data without seeking the explicit consent of the data subject, in the presence of one of the following conditions:
1) It is expressly stipulated in the laws.
2) The person who is unable to express his consent due to actual impossibility or whose consent is not given legal validity is compulsory for the protection of himself or someone else’s life or physical integrity.
3) It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract.
4) It is mandatory for the data controller to fulfill its legal obligation.
5) The person concerned has been made public by himself.
6) Data processing is mandatory for the establishment, exercise or protection of a right.
7) Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Rights of Personal Data Owners Listed in Article 11 of Law No. 6698 As
personal data owners, if you submit your requests regarding your rights to us as described below, our Company will conclude the request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, our company will charge the fee in the tariff determined by the Personal Data Protection Board. In this context, personal data owners;
1. Learning whether personal data is processed or not,
2. Requesting information on personal data if it has been processed,
3. Learning the purpose of processing personal data and whether they are used in accordance with its purpose,
4. Knowing the third parties to whom personal data is transferred in the country or abroad,
5. In case of incomplete or incorrect processing of personal data, their 6. Requesting the
deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law,
7. Requesting notification of the transactions made pursuant to the 5 and 6 requests above, to the third parties to whom the personal data has been transferred,
8. Processing the data exclusively through automated systems Objecting to the emergence of a result against the person himself by analyzing it,
9. He has the right to demand the compensation of the damage in case of loss due to the unlawful processing of personal data
.
Pursuant to the first paragraph of Article 13 of the KVK Law, you must submit your request regarding the exercise of your above-mentioned rights to our Company in “written” or by other methods determined by the Personal Data Protection Board. Since the Personal Data Protection Board has not determined any method at this stage, you must submit your application to our Company in writing as per the mandatory provision of the KVK Law. In this context, the channels and procedures that you will submit your application to our Company in writing within the scope of Article 11 of the KVK Law are explained below.
In order to exercise your above-mentioned rights, you must send a registered letter to the address of 1. Murat Cd No 57 Çekirge Osmangazi BURSA by stating your request, along with the necessary information identifying your identity and your explanations regarding the right you want to use, and specifying which of your rights is related to the use of the right specified in Article 11 of the KVK Law, or You can send it through a notary public or send it to obatermal@hs02.kep.tr by signing with a secure electronic signature within the scope of Electronic Signature Law No. 5070.