In line with the Law on the Protection of Personal Data, No. 6698 (“Law”) published in the Official Gazette dated 07.04.2016 and numbered 29677, Depot Konaklama Hizmetleri A.Ş. (“Company”), as Data Controller, in order to fulfill its obligation of clarification arising from Article 10 of the Law, presents the following matters for information and for the examination by its users and customers, along with this Clarification Text.
This Clarification Text is applicable to all personal data given to the Company by all persons (“Customer”) who visit the website www.thestay.com.tr (“Website”) and/or those who request and receive services from hotels belonging to our Company and all the personal data given to our Company.
1. Clarification by Data Controller
Your name, surname, e-mail address, phone number data and the data required within the scope of the measures taken during the Covid-19 period that you shared during the reservation to be made on the Website are stored and processed by our Company as a data controller.
The Company attaches importance to the privacy and protection of your personal data while providing its services; and in accordance with the Law, your personal data obtained/to be obtained by the Company as Data Controller or shared or to be shared with the Company by you will only be processed by the Company within the scope described below and in the manner set forth in the Law.
2. The method of collecting and processing your Personal Data
Your personal data may be collected verbally, in writing or in electronically in accordance with the Law through channels such as our Company's website, social media accounts, mobile applications, branches/clubs, sales and marketing units, customer forms, channels such as digital marketing, contracts, applications, forms, offers, cookies used in "website" visits. Your personal data collected under the law and other legislation by our Company as Data Controller, by affiliated companies or through websites in written, verbal or electronic environment; can be recorded, stored, retained, preserved, changed in the ways stipulated in the Law; can be shared due to legal justifications, due to law or in line with the requirements of the services provided by our Company with other persons deemed appropriate and/or with third party legal and/or real persons domestically and/or outside of Turkey, can be processed, including transferring it abroad.
3. Purposes and Legal Reasons for the Processing of Your Personal Data
Our Company, as Data Controller, stores and processes your personal data based on the legal grounds that "explicitly stipulated in the Laws" pursuant to Article 5/2a of the Law; and “processing of personal data belonging to the parties of a contract, is necessary provided that it is directly related to the conclusion or fulfilment of that contract” pursuant to Article 5/2c. In this context, to carry out distance reservation transactions; your personal data;
Is being processed by our Company on the legal ground "explicitly stipulated in the Laws" and kept until notified by you and until the legal period and justifications expire according to Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6502 on the Protection of Consumers; Turkish Commercial Code No. 6102 and the rescripts and regulations related to these laws, in order to carry out the invoice process and accounting transactions within the framework of the consumer relationship between the parties, in accordance with the Tax Procedure Law No. 213 and the Turkish Commercial Code No. 6102 to which our Company is subject. In addition, your personal data is stored, preserved and is kept until notified by you and until the legal period and justifications expire by our Company as Data Controller in accordance with the legal ground Article 5/2.c of the Law “processing of personal data belonging to the parties of a contract, is necessary provided that it is directly related to the conclusion or fulfilment of that contract” for establishment of reservation, the performance of the services to be provided within this scope, for the uninterrupted continuation of these services, for ensuring their efficiency, and informing about the changes that will occur in the services or if approval has been given within the scope of the Law on the Regulation of Electronic Commerce No. 6563, within the scope of this law, personal data is processed and preserved until notified by you and until the legal period and justifications expire by our Company as Data Controller, to inform the customers about the campaigns and opportunities or to provide the price, marketing, other opportunities, offers and information about the services, to communicate effectively with members and customers or to control the systems on which services are provided and to develop these systems, to prevent the illegal use of services.
4. Persons and/or Organizations To Which Your Personal Data Can Be Transferred
Persons/Organizations to whom your personal data that you share with the Company can be transferred within the scope of the Law, for the purposes specified in the Law and this Clarification Text:
All kinds of official authorities and institutions, the Company's shareholders and direct/indirect domestic/foreign affiliates, software program-service partner individuals and organizations that the Company receives services from/cooperates with to carry out its activities, banks for collection purposes and/or collections, authorized institutions and domestic/foreign organizations and other relevant third parties to carry out activities related to these purposes.
Cookies are text files containing small pieces of information that are loaded by your internet browser and stored on your computer, mobile phone or tablet when you visit www.thestay.com.tr. The Company will collect and securely store your browsing information, in order to provide better service to the Site Users, to inform the User and customers about the campaigns and advantages, and within the framework of its legal obligations, provided that it is not used on the contrary to the purpose and scope stipulated in this Personal Data Clarification Text and other legislation; and may be shared it with third parties if necessary.
6. Circumstances in Which the Company May Process Your Personal Data without Your Explicit Consent Under the Law
Pursuant to Article 5 of the Law, the Company may process the above-mentioned personal data that it has received in accordance with the law, without your explicit consent, in the following cases:
In cases where it is expressly stipulated in the laws,
In cases when it is necessary to process your personal data for the protection of your or someone else's life or physical integrity such as when as the data owner you are unable to express your consent due to actual impossibility, or in cases where your consent is not legally valid,
In case it is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract,
If it is necessary for the Company to fulfill a legal obligation,
If your personal data has been made public by you,
If data processing is necessary for the establishment, exercise or protection of a right,
In the event that data processing is necessary for the Company's legitimate interests, provided that it does not harm your fundamental rights and freedoms.
7. What Are Your Rights Under the Law?
By applying to our Company in accordance with Article 11 of the Law you have the following rights:
Learning whether your personal data is processed or not,
Requesting information if your personal data has been processed,
To learn the purpose of processing your personal data and whether they are used in accordance with the purpose,
Knowing the third parties to whom your personal data is transferred, in the country or abroad,
Requesting correction of your personal data if it is incomplete or incorrectly processed,
Requesting the deletion or destruction of your personal data within the framework of the conditions stipulated in Article 7 of the Law,
Requesting notification of the transactions made pursuant to subparagraphs (d) and (e) to the third parties to whom your personal data has been transferred,
Objecting to the emergence of a result against you by analyzing the processed data exclusively through automated systems,
Requesting the compensation of the damage in case you suffer damage due to the unlawful processing of your personal data,
You have the opportunity to exercise your rights under this article and your requests for updating and changing your personal data, through a notary public and/or by personally applying to the Company's headquarters, provided that the identity verification has been made, as of 07.10.2016, the effective date of the regulation. In addition, after the other methods to be determined by the Personal Data Protection Board are announced, the Company will announce how the applications will be received through these methods. The Company will conclude your request free of charge as soon as possible and within thirty(30) days at the latest, depending on the nature of the request. However, if the requested transaction requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board will be charged by us within the scope of Article 13 of the Law.
DEPOT KONAKLAMA HİZMETLERİ A.Ş.