Privacy Policy

PRIVACY / PERSONAL DATA PROTECTION POLICY

Protection of personal data is an important issue for niXie Hotel⎟Beach. niXie Hotel⎟Beach adopts the principles stipulated by the Law on the Protection of Personal Data in order to comply with the Law on the Protection of Personal Data No. 6698 [KVKK Law] and fulfills its obligations by processing, deleting, destroying, anonymizing, transferring the data, informing the data subject and ensuring data security. The Privacy and Personal Data Protection Policy issued in this context is submitted to the information of real persons [“Relevant Person”], and our website, company headquarters, or hotel can be visited without sharing any personal data. Personal data collected within the knowledge of visitors can be processed in accordance with the relevant legislation under the conditions specified in this policy.

Scope and Purpose of Privacy and Personal Data Protection Policy

This Privacy and Personal Data Protection Policy explains the procedures of niXie Hotel⎟ Beach listed below;

* Methods of collecting personal data and legal grounds,

* Which group of people’s personal data is processed (Data Owner Categorization),

* Which category of personal data is processed in relation to these groups of persons (Data Categories), and sample data types,

* In which business processes and for what purposes this personal data is used,

* Technical and administrative measures taken to ensure the security of personal data,

* To whom and for what purpose personal data can be transferred,

* Storing personal data,

* What are the rights of the Related Persons over their personal data and how they can use these rights,

* How Relevant Persons can change their positive or negative preferences for receiving electronic commercial messages,

* Explains the sharing of personal data with official authorities.

Personal Data Collection Methods and Legal Grounds

niXie Hotel⎟ Beach’s personal data is gathered in audio, electronic, or written form through printed forms, the data subject himself, Contracts, suppliers, e-mail, Company common areas, Company related departments, administrative and judicial authorities, and other communication channels in accordance with the personal data processing conditions and the legal grounds specified in this Privacy/Personal Data Protection Policy and the Law on the Protection of Personal Data.

Data Subject Person Group Categorization

niXie Hotel⎟Beach categorizes the data subject groups, whose personal data are processed in personal data processing steps and activities related to these processes, as follows. However, in accordance with the personal data processing conditions specified in Articles 5 and 6 of the KVK Law and in line with the legal reasons specified in this Privacy/Personal Data Protection Policy, the personal data of other groups of individuals (suppliers, dealers, consultants) can also be processed.

* Customer,

* Magazines and Interviews

* Supplier or Supplier Employee or Official

Data Categories and Example Data Types
* Magazines and Interviews – Contact data – Identity data – Personal Information
* Service Providers or legal entity suppliers officials
* Financial Data
* Contact data
* ID data
* Customer Data
* Financial Information
* Visual and Audio Information
* Contact data
* Address, E-mail, Company and position, Phone Number, Name Surname
* Educational status
* Bank name/ IBAN No, Signature Circular, Tax Number: Address, E-mail, Telephone Number
* Name Surname, Driver information / guide information, Transfer company vehicle information
* Bank / Credit Card Information, IBAN / account number : Photo
* Mail, Phone Number
* Identity data Contact information in case of emergency, Name Surname, Gender, Invited list information,
* Accommodation Information & preferences / Personal Information of the person staying with, Passport information, TR ID number, Nationality, date of birth
* Personal data
* Special Qualified Personal data
* Personal Information
* Travel Information
* Transaction Security Information / Risk Management Information
* Customer transaction data
* Vehicle Plate Number
* Signature, Camera image recording, Health Issues
* Date of Birth, Wedding Anniversary, Job Title, Occupation
* Accommodation Information & preferences /Personal Information of the person he/she is staying with, Transportation Information
* Traffic information
* Room number

In Which Business Processes and For What Purposes Personal Data Are Used

Collection of Personal data at the hotels operated by Nixie Hotel I Beach

* Product and/or Service Procurement

* Product and/or Service Offering

* Execution of the contract, marketing and promotion activities

* It is used to perform activities related to bid collection, contract creation, purchasing, procurement and all these processes.

Technical and Administrative Measures Taken to Ensure the Security of Personal Data

The following are technical and administrative measures taken to ensure the security of personal data processed by niXie Hotel Beach:

* Authorization management is done in systems containing personal data to ensure Data Security. Access to these systems over the network is controlled.

* In the new projects planned, security requirements are determined in order to ensure data security during the design phase. (Privacy by design)

* The activities and transactions of users and visitors are logged.

* Periodic security scans of all systems where personal data are hosted are performed.

* In order to prevent personal data from leaving the institution unlawfully,

necessary processes and systems have been established.

* By providing training to people who have access to personal data, their awareness is increased and data breaches are

rules to prevent cases are applied.

* By taking necessary security measures in personal data data center and cloud environments

is stored.

* Information security and personal data of software and other products used for service provision

are required to comply with data protection.

* All systems containing data are protected against a possible system crash and cyber attacks.

backed up in order to ensure its protection and business continuity.

* Unauthorized access and illegal data of information systems containing personal data

hash, encryption, transaction log, access

management and physical security measures are taken.

* The network on which all systems containing the website and personal data are located

protected by a firewall.

* All pages from which personal data is obtained through the website are protected with an SSL certificate.

To Whom Personal Data Can Be Transferred And For What Purpose

niXie Hotel⎟Beach transfers personal data to third parties only for the purposes specified in the Privacy and Personal Data Protection Policy and in accordance with Articles 8 and 9 of the KVK Law. Customer data processed within this scope are shared with the relevant departments, and this data can also be accessed by internal departments when necessary.

Customer data also; In line with the commercial electronic message approval of the customer, it is shared with the commercial electronic message tool service provider in order to make promotions, advertisements, and offer benefits and opportunities in line with the preferences, tastes and habits of the customer. Website usage preferences and browsing history are shared with third parties that receive cookies.

In addition to the technical measures to ensure their security, the personal data subject to domestic and international transfers we mentioned above; Considering that the other party of the legal relationship is the data controller or the data processor, it is also legally protected by the provisions in accordance with the KVK Law included in our contracts.

Retention Periods of Personal Data

niXie Hotel⎟Beach preserves the personal data it processes in accordance with the KVK Law for the periods stipulated in the relevant legislation or required for the purpose of processing. In our Personal Data Retention and Disposal Policy, these periods are approximately as follows:
* Information about the customer
* All records related to accounting and financial transactions
* cookies
* Commercial electronic message confirmation records
* As long as the term of the contract continues and after the end of the contract, the data is stored for the longest period of limitation to which the subject is subject according to the law, in terms of the subject of the relevant contract. 1 year from the date of withdrawal of consent
* Law No. 6098, Law No. 6102, Law No. 213, Law No. 6563 and related secondary legislation
* Information and/or CVs received due to job application
* The personal data of the suppliers and the candidate employee data are reviewed once a year and the data of the candidates who have not become employees are deleted.
* As long as the term of the contract continues and after the end of the contract, the data is stored for the longest period of limitation to which the subject is subject according to the law, in terms of the subject of the relevant contract.
* You can review our cookie [Cookie] Policy regarding the storage times of the personal data we obtain through cookies.

What are the Rights of the Related Persons on their Personal Data and How They Can Use These Rights

Law No. 6102, Law No. 6098 and Law No. 213

Profiling and Segmentation

The rights of the Related Person on the personal data processed by niXie Hotel⎟ Beach in accordance with Article 11 of the KVK Law are listed below:

* Learning whether personal data is processed or not,

* If personal data has been processed, requesting information about it,

* The purpose of processing personal data and whether they are used in accordance with their purpose

* Knowing the third parties to whom personal data is transferred in the country or abroad,

* Correction of personal data in case of incomplete or incorrect processing

don’t want,

Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVK Law,

* Requesting notification of the transactions made pursuant to subparagraphs (d) and (e) to third parties to whom their personal data has been transferred,

* Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,

* Demanding the compensation of the damage in case of loss due to unlawful processing of personal data.

In order to use the rights on personal data; It is possible to exercise these rights by making an application through the methods specified in the “Application Form” issued in accordance with Article 13 of the KVK Law on the website operated by niXie Hotel⎟ Beach.

Personal Data Sharing with Official Authorities

niXie Hotel⎟ Beach, personal data processed by niXie Hotel⎟Beach; In order for niXie Hotel⎟ Beach to fulfill its obligation under the law [in cases where niXie Hotel⎟ Beach has a legal or administrative obligation to notify or inform] will be able to share the information with public institutions and organizations authorized to request it.

Cookie Usage and Management

For detailed information about the cookies used by niXie Hotel⎟ Beach, types of cookies, their purposes, storage periods and cookie management, our Cookie Policy can be reviewed.

Terms of Deletion, Destruction and Anonymization of Personal Data

niXie Hotel⎟ Beach stores the personal data it processes through the website for the periods stipulated by the relevant laws and/or for the periods required by the purpose of processing, pursuant to articles 7, 17 of the KVK Law and article 138 of the Turkish Penal Code. In the event that these periods expire, it will delete, destroy or anonymize Personal Data in accordance with the provisions of the Regulation on the Deletion, Destruction or Anonymization of Personal Data.

Deletion of personal data by niXie Hotel⎟ Beach refers to the process of making personal data inaccessible and unusable for the relevant users in any way. niXie Hotel⎟ Beach creates and implements a user-level access authorization and control matrix for this. It takes the necessary measures to perform the deletion in the database.

destruction of personal data by niXie Hotel⎟ Beach; means the process of making personal data inaccessible, irretrievable and unusable by anyone in any way. Anonymization of personal data by niXie Hotel⎟ Beach means that personal data cannot be associated with an identified or identifiable natural person under any circumstances, even if it is matched with other data.

niXie Hotel⎟ Beach; It explains in detail the methods of deletion, destruction and anonymization and the technical and administrative measures it takes within the scope of the Personal Data Storage and Disposal Policy prepared in accordance with the Regulation on the Deletion, Destruction or Anonymization of Personal Data. In this Policy, the period of time for the periodic destruction stipulated by the Regulation is determined as 6 months.

Changes to the Privacy/Personal Data Protection Policy

niXie Hotel⎟ Beach can always make changes to this Privacy/Personal Data Protection Policy without prior notice. These changes will become effective immediately upon the publication of the amended new Privacy/Personal Data Protection Policy.