CUSTOMER DISCLOSURE STATEMENT ON THE PROTECTION AND PROCESSING OF PERSONAL DATA
As ACAR Tourism and Trade Joint Stock Company, we attach utmost importance to the processing, storage, and transfer of your personal data within the scope of our hotel management and tourism activities, in compliance with the Law on the Protection of Personal Data No. 6698 (“KVKK”) and relevant legislation, and we take all necessary measures accordingly. This disclosure statement has been prepared to inform and enlighten our customers.
This “Customer Disclosure Statement within the Scope of the Law on the Protection of Personal Data” has been prepared in accordance with Article 10 of KVKK titled “Obligation of the Data Controller to Inform,” in order to transparently inform you about the identity of the data controller, the method and legal grounds for collecting your personal data, the purposes for which such data will be processed, to whom and for what purposes it may be transferred, the duration of data processing, and your rights listed under Article 11 of KVKK.
Your personal data shall be processed:
In compliance with the law and the principle of good faith,
In connection with, limited to, and proportionate to the purposes for which they are processed,
Accurately and, where necessary, kept up to date,
For specific, explicit, and legitimate purposes,
Retained for the period stipulated in the relevant legislation or required for the purpose for which they are processed.
Customer: Individuals who receive products or services from the Company.
Company: ACAR Tourism and Trade Joint Stock Company.
Data Subject: The natural person whose personal data is processed (e.g., employees, suppliers, customers, visitors).
Personal Data: Any information relating to an identified or identifiable natural person (e.g., name-surname, ID number, email, address, date of birth, credit card number).
Processing of Personal Data: Any operation performed on personal data such as collection, recording, storage, preservation, alteration, reorganization, disclosure, transfer, acquisition, making available, classification, or prevention of use, whether wholly or partially by automated means or by non-automated means provided that it is part of a data recording system.
Special Categories of Personal Data: Data relating to race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data.
Board: Personal Data Protection Board.
Law: Law No. 6698 on the Protection of Personal Data.
Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system. Within the scope of this document, the Data Controller is ACAR Tourism and Trade Joint Stock Company, located at Çıldır Neighborhood, 232 Street, Nergis 1 Apartment No:3, Marmaris/Muğla.
Data Recording System (VERBIS): A recording system in which personal data is structured and processed according to certain criteria.
Explicit Consent: Consent that is specific, informed, and freely given.
Data Controller: ACAR Tourism and Trade Joint Stock Company, registered with Marmaris Tax Office (Tax No: 0040037007), located at Çıldır Neighborhood, 232 Street, Nergis 1 Apartment No:3, Marmaris/Muğla.
Email: kvkk@premiernergis.com
Phone: +90 (252) 417 67 47
Website: https://www.premiernergis.com
Contact Person:
Name: Mehmet ACAR
Title: Deputy General Manager
Email: mehmet.acar@premiernergis.com
Phone: +90 552 333 67 47
Your personal data is collected securely in accordance with KVKK to fulfill our legal obligations and to provide you with better service. The categories of personal data processed are listed below:
1. Identity Information
Processed Data: Name, surname, Turkish ID number, date of birth, nationality, passport details, family and relative information.
Purpose: Marketing activities, customer relationship management, complaint tracking, contract processes, and customer satisfaction.
Legal Basis: Necessary for the establishment or performance of a contract (Article 5 of KVKK).
2. Contact Information
Processed Data: Email, home/work address, phone number, social media accounts.
Purpose: Communication, marketing, customer relations, and complaint tracking.
Legal Basis: Necessary for contract performance.
3. Financial Information
Processed Data: IBAN, credit card details, security code, billing/debt information, tax certificate.
Purpose: Financial and accounting processes, service sales, contract management.
Legal Basis: Contract necessity and legal obligation.
4. Health Information (Special Category)
Processed Data: Allergy, illness, disability information.
Purpose: Service provision and customer satisfaction.
Legal Basis: Explicit consent and contract necessity.
5. Audio-Visual Data
Processed Data: Camera recordings.
Purpose: Customer satisfaction and security.
Legal Basis: Legitimate interest.
6. Customer Transaction Data
Processed Data: Check-in/out dates, preferences, room number.
Purpose: Service delivery and operational processes.
Legal Basis: Contract necessity and legal obligation.
7. Personnel Records
Processed Data: Similar operational and service-related records.
Purpose: Operational processes.
Legal Basis: Contract necessity and legal obligation.
8. Physical Security Data
Processed Data: Vehicle plate, CCTV records, car brand.
Purpose: Security of premises and assets.
Legal Basis: Legitimate interest.
9. Transaction Security Data
Processed Data: IP address, MAC address, identity data.
Purpose: Information security and legal compliance.
Legal Basis: Legal obligation and contract necessity.
Your personal data will be retained for the duration required by applicable legislation and for as long as necessary for the purposes for which they are processed.
Your personal data is collected through written, verbal, or electronic means such as forms, emails, phone calls, and face-to-face interactions during service provision.
Under Article 11 of KVKK, you have the right to:
Learn whether your personal data is processed,
Request information if processed,
Learn the purpose of processing,
Know third parties to whom data is transferred,
Request correction of incomplete/incorrect data,
Request deletion or destruction of data,
Request notification of such actions to third parties,
Object to automated decision-making,
Claim compensation for unlawful processing.
You may submit your requests via the application form available at www.premiernergis.com, by sending a signed written request to our address or via email to kvkk@premiernergis.com. Requests will be concluded within 30 days free of charge unless additional costs arise.
Your personal data will be deleted, destroyed, or anonymized once the purpose of processing ceases or legal retention periods expire, in accordance with Article 7 of KVKK. Detailed information is available in our “Data Retention and Destruction Policy” on our website.
The Company reserves the right to amend this disclosure statement in accordance with legal requirements. Any updates will become effective upon notification.
