GENERAL INFORMATION TEXT ON THE PROCESSING OF PERSONAL DATA
This information text has been prepared to inform the relevant persons about the principles regarding the collection, recording, use, storage, sharing with third parties, and processing of your personal data by our Company, Baş-Taş İnşaat Sanayi ve Ticaret Limited Şirketi, in its capacity as data controller. Your personal data, which identifies you as an individual or is associated with you as an identifiable person, is processed in accordance with the Law on the Protection of Personal Data, to provide you with better services.
Definitions:
a) Personal Data: Any information relating to an identified or identifiable natural person.
b) Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.
c) Data Subject: The natural person whose personal data is processed.
ç) Law: The Law No. 6698 on the Protection of Personal Data, dated 24/03/2016.
d) Board: The Personal Data Protection Board.
e) Authority: The Personal Data Protection Authority.
f) Registry: The Data Controllers Registry (VERBİS) kept by the Presidency.
g) Processing of Personal Data: Any operation performed on personal data such as collection, recording, storage, preservation, alteration, rearrangement, disclosure, transfer, acquisition, making available, classification, or prevention of use, fully or partially automatic or through non-automatic means provided that it is part of a data recording system.
h) Recipient Group: The category of natural or legal persons to whom the personal data is transferred by the data controller.
Collected Personal Data:
We collect and process the following personal data related to you:
Name and surname
Date and place of birth
National ID/passport number
Email address
Phone number
Financial data such as credit/bank card numbers
Nationality, passport, visa or other government-issued ID information
Membership or loyalty program data (e.g. co-branded payment cards, partner program memberships)
Employer-related data for business-related bookings
Vehicle plate number
Flight, airport transport, and transfer data
Travel plans, tour group or activity data
Data on previous stays or interactions, purchased goods/services, special requests
Social media account ID, profile photo, and other public data shared via account linkage
Names of family members/accompanying persons and ages of children
Visual, video, and audio recordings via security cameras in public areas of our facilities
Preferences you share with us including interests and requirements
Feedback, opinions, health-related dietary info, restrictions or needs
Special dates such as birthdays or anniversaries, hobbies, and event participation preferences
Personal data of third parties for whom you make reservations
Purposes for Collecting and Processing Personal Data:
Your personal data shared with our company may be processed for purposes such as:
Fulfillment of legal obligations under laws such as the Identity Reporting Law No. 1174, Law No. 5651, Tax Procedure Law No. 213, Turkish Commercial Code No. 6102, and others
Reservation, check-in, and accommodation procedures
Management of day-use services, events, seminars, and activities at our facilities
Customization of services and products based on guest preferences and needs
Creating commercial statistics and analysis for our websites and social media
Informing about events and activities organized by our facilities
Providing requested information and services
Ensuring service provision and product development through R&D and market research
Determining service fees, billing, and payment processes
Informing about loyalty programs and any updates related to them
Improving service quality and company policies
Notifying you about campaigns, promotions, discounts, and benefits
Determining and implementing our business and commercial strategies
Ensuring safety and supporting investigations for criminal activities
Legal consultancy and management of contracts
Maintaining and establishing commercial or rental relationships
Ensuring the safety of our company, guests, employees, and third parties
Responding to availability, pricing, reservations, or cancellations
Emergency response
Receiving and following up on your requests and complaints
Method and Legal Grounds for Data Collection:
Your personal data may be collected by automated or non-automated means through our website, call center, social media, agencies, intermediaries, mobile applications, or other channels, based on the following legal grounds per Article 5(2) of the Law:
Clearly prescribed by law
Necessity for contract performance
Fulfillment of legal obligations of the data controller
Necessity for the establishment, use, or protection of a right
Legitimate interest of our Company, provided that it does not violate your fundamental rights and freedoms
Force Majeure:
In cases such as COVID-19 or other pandemics, natural disasters, war, or emergency situations, your special category personal data such as:
Symptom info (e.g. fever, loss of smell, shortness of breath), chronic illness, allergies, pregnancy, medications, treatments
Blood pressure, pulse, respiratory rate, temperature
HES code, vaccination card, PCR test results
Government-issued permissions or other required health-related data
may be processed for purposes such as:
Protection of public health
Creating a healthy environment under safe tourism certifications
Monitoring guest health status and providing healthcare services
Enforcing isolation or quarantine procedures as per ministry guidelines
Complying with national/international laws
Making necessary arrangements for accommodation or visits
Ensuring business continuity
Transfer of Personal Data:
We may transfer/share your personal data with the following third parties:
Service Providers: For services such as website operations, analytics, orders/payments, reservations, customer support, emails, and marketing
In-Facility and Agency Providers: For services provided at our facilities like spa, restaurants, health clubs, etc.
Partner Institutions: To benefit from discounts or facilitate services during your stay (e.g. airlines, car rental, travel agencies)
Group Companies: To personalize services/products, facilitate operations, and manage loyalty programs
Suppliers and Providers: For enabling services such as secure payment systems, transfers, insurance, and travel booking
Consultants: For legal, financial, investment planning, risk management, etc.
Financial Institutions: For processing payments or managing investment processes
Public Authorities: For compliance with laws, public health, safety, criminal investigations, or force majeure situations
Additionally, your personal data may be transferred internationally due to server systems, cloud storage, bank payment systems, or headquarters of booking platforms being located abroad.
Data Controller and Contact Information:
Data Controller: Baş-Taş İnşaat Sanayi ve Ticaret Limited Şirketi
Representative: ………………
Address: Zeytinli Mahallesi 26. Bölge Sokak, Erdek/Balıkesir
Phone: +90 266 441 10 10
Rights of the Data Subject:
As a data subject, you have the right to:
Learn whether your personal data is being processed
Request information if your data has been processed
Learn the purpose of processing and whether it is used in accordance with its purpose
Know the third parties to whom data is transferred domestically or internationally
Request correction if the data is incomplete or incorrect
Request deletion or destruction of data if processing conditions cease to exist, and request notification to third parties to whom data has been transferred
Request compensation for damages arising from unlawful processing
Requests regarding your rights and implementation of the Law can be submitted in writing to the address: Zeytinli Mahallesi 26. Bölge Sokak, Erdek/Balıkesir. Our Company responds to these requests free of charge up to ten pages; for every page exceeding ten, a fee of 1 TRY per page may be charged. If the response is provided on a CD, flash memory, or other recording media, the cost will not exceed the material cost as specified by the Personal Data Protection Authority.