PERSONAL DATA PROCESSING INFORMATION NOTICE

1. Data Controller, Personal Data Categories and Methods of Collection

Pursuant to the Personal Data Protection Law No. 6698 (“Law No. 6698”); your personal data in the categories of identity, contact, customer transaction, legal transaction, financial and transaction security data are collected from you or third parties through electronic means and written data transfer methods, by fully automated means, and are processed by Fine Otel Turizm İşletmecilik A.Ş. (the “Company”), as the data controller, within the scope detailed below.

2. Purposes and Legal Grounds for Processing Personal Data

Your personal data collected by us are processed for the following purposes and based on the following legal grounds.

Purpose of Data Processing Data Category Legal Ground
Conducting sales of goods/services and after-sales support services Identity, Contact, Customer Transaction, Legal Transaction, Financial Article 5/2-c of Law No. 6698

Processing of personal data belonging to the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract.
Conducting goods/services production and operational processes Identity, Contact, Customer Transaction, Financial Article 5/2-c of Law No. 6698

Processing of personal data belonging to the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract.
Conducting contractual processes Identity, Contact, Customer Transaction, Legal Transaction, Financial Article 5/2-c of Law No. 6698

Processing of personal data belonging to the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract.
Conducting activities in compliance with applicable legislation Identity, Contact, Customer Transaction, Legal Transaction, Financial, Transaction Security Article 5/2-a of Law No. 6698
Expressly provided for by law.

Article 5/2-ç of Law No. 6698
Processing is mandatory for the data controller to fulfill its legal obligation.
Conducting financial and accounting operations Identity, Contact, Customer Transaction, Legal Transaction, Financial Article 5/2-ç of Law No. 6698

Processing is mandatory for the data controller to fulfill its legal obligation.
Conducting legal affairs Identity, Contact, Customer Transaction, Legal Transaction, Financial Article 5/2-ç of Law No. 6698

Processing is mandatory for the data controller to fulfill its legal obligation.
Conducting information security processes Transaction Security Article 5/2-f of Law No. 6698

Processing is mandatory for the legitimate interests of the data controller, provided that this does not prejudice the fundamental rights and freedoms of the data subject.
Conducting communication activities Identity, Contact, Customer Transaction Article 5/2-f of Law No. 6698

Processing is mandatory for the legitimate interests of the data controller, provided that this does not prejudice the fundamental rights and freedoms of the data subject.
Conducting customer satisfaction processes Identity, Contact, Customer Transaction Article 5/2-f of Law No. 6698

Processing is mandatory for the legitimate interests of the data controller, provided that this does not prejudice the fundamental rights and freedoms of the data subject.
Conducting retention and archiving activities Identity, Contact, Customer Transaction, Legal Transaction, Financial, Transaction Security Article 5/2-a of Law No. 6698
Expressly provided for by law.

Article 5/2-f of Law No. 6698
Processing is mandatory for the legitimate interests of the data controller, provided that this does not prejudice the fundamental rights and freedoms of the data subject.

3. Transfer of Personal Data

Your personal data may be transferred to third parties under the following conditions;

Legal Ground for Transfer Purpose of Transfer Recipient of the Transfer
Article 8/2-a of Law No. 6698

Processing is mandatory for the legitimate interests of the data controller, provided that this does not prejudice the fundamental rights and freedoms of the data subject.
Conducting goods/services production and operational processes Business Partners
Article 8/2-a of Law No. 6698

Processing is mandatory for the data controller to fulfill its legal obligation.
Conducting activities in compliance with applicable legislation Authorized Public Institutions and Authorized Private Persons

4. Procedures and Principles for Application

As a data subject, you may submit your requests concerning your rights set forth under Article 11 of Law No. 6698 by completing the Application Form regarding the Protection of Personal Data, which can be obtained from our website, or by submitting an application that meets the minimum requirements stipulated under the Communiqué on the Procedures and Principles of Application to the Data Controller, through the methods specified below. The Company will conclude your application free of charge as soon as possible and within thirty days at the latest, depending on the nature of your request. However, if the transaction requires an additional cost, a fee will be charged by the Company in accordance with the tariff determined by the Personal Data Protection Board.

Application Method Application Address
Electronic communication to be sent via KEP fineotel@hs02.kep.tr
Communication to be sent from your e-mail address registered in our system or with a secure electronic signature or mobile signature kvkk@rixos.com
Application to be submitted in writing in person or through a notary public Meltem Mahallesi, Sakıp Sabancı Bulvarı, No:3 Muratpaşa/Antalya
⁠  ⁠