Personal Data Protection Law

Personal Data Protection Law

HANUMAN TOURISM TRANSPORT CONSTRUCTION COMPANY

DISCLOSURE TEXT ON THE PROCESSING OF PERSONAL DATA

This Clarification Text has been prepared by HANUMAN TOURISM TRANSPORT CONSTRUCTION COMPANY ("Company") for the purpose of illuminating the processing of personal data of the Company's customers under the Personal Data Protection Law No. 6698 ("Law").

1. a) Methods of Obtaining Personal Data and Legal Reasons

Your personal data is collected electronically or physically. Your personal data collected for legal reasons specified in this clarification Text may be processed and shared within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Law.

b) Purposes of Processing Personal Data

Planning and execution of the activities necessary for the presentation and promotion of your personal data to the relevant persons by customizing the products and services offered by the Company according to the likes, usage habits and needs of the persons concerned within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Law, The necessary works to benefit the relevant persons from the products and services offered by the Company are carried out by the business units and the related business processes are carried out, the necessary work is carried out by the relevant business units for the realization of the commercial activities carried out by the Company and the related business processes are carried out, the planning and execution of the commercial and/or business strategies of the Company and the legal, technical and commercial-business security of the Company and the persons involved in the business relationship with the Company are carried out.

c) Parties to whom Personal Data May Be Shared and For Sharing Purposes

Planning and execution of activities necessary for the presentation and promotion of your personal data to the relevant persons by customizing the products and services offered by the Company according to the likes, usage habits and needs of the persons concerned within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, the work required to benefit the relevant persons from the products and services offered by the Company, and the execution of related business processes, It may be shared with the Company's business partners and suppliers, legally authorized institutions and organizations, and legally authorized private legal entities for the purposes of carrying out the necessary work and carrying out the relevant business processes, planning and executing the Company's commercial and/or business strategies, and ensuring the legal, technical and commercial-business security of the Company and the persons involved in the business relationship with the Company.

d) Rights of Data Owners and Exercise of These Rights

If you, as personal data owners, submit your requests regarding your rights as specified below to the Company by the methods specified under the title Of Exercise of Rights by Data Subjects, your requests will be evaluated and finalized by our Company as soon as possible and in any case within 30 (thirty) days.

You have the following rights as a personal data owner in accordance with Article 11 of the Law:

To find out if your personal data has been processed,
Requesting information about your personal data if it has been processed,
To learn the purpose of processing your personal data and whether it is used in accordance with its purpose,
To know the third parties to whom your personal data is transferred at home or abroad,
Request correction of your personal data in case of incomplete or inaccurate processing and to request notification of the transaction carried out within this scope to the third parties to whom the personal data are transferred,
Request the deletion or destruction of your personal data in the event that the reasons requiring its processing disappear, even though it has been processed in accordance with the law and other relevant law provisions, and to request that the transaction carried out within this scope be notified to the third parties to whom the personal data are transferred,
Objecting to the emergence of a result against the person himself by analyzing your processed data exclusively through automated systems,
Request compensation for damages in the event of damages due to the unlawful processing of your personal data

Paragraph 2 of Article 28 of the Law outscored the situations in which data owners do not have the right to request;

Personal data processing is necessary for the prevention of criminal or criminal investigation,
Processing of personal data made available by the person concerned,
Personal data processing is necessary for the execution of audit or regulation duties and disciplinary investigation or prosecution by authorized public institutions and organizations and professional organizations that are public institutions on the basis of the authority granted by the law,
Personal data processing is necessary for the protection of the economic and financial interests of the State in relation to budget, tax and financial issues,

rights set out above for the data will not be used.

According to paragraph 1 of Article 28 of the Law, the claims of the data owners will not be processed in terms of this data, as the data will be outside the scope of the Law in the following cases:

Processing of personal data by natural persons entirely within the scope of activities related to themselves or family members living in the same residence, provided that they are not given to third parties and that the obligations related to data security are complied with.
Processing of personal data for purposes such as research, planning and statistics by anonymization with official statistics.
Processing of personal data for artistic, historical, literary or scientific purposes or within the scope of freedom of expression, provided that it does not violate national defense, national security, public safety, public order, economic security, privacy or personal rights or do not constitute a crime.
Processing of personal data within the scope of preventive, protective and intelligence activities carried out by public institutions and organizations authorized by law to ensure national defense, national security, public safety, public order or economic security.
Processing of personal data by judicial authorities or execution authorities in relation to investigation, prosecution, trial or execution.

Exercise of Rights by Data Subjects

Data owners will be able to use the Form (1) of the ‘’Application to the Data Controller by the Personal Data Owner’’ in order to exercise the aforementioned rights.

Applications will be made with one of the following methods, together with documents to identify the relevant data subject.

By filling out the form and obtaining a wet signed copy by hand, through a notary or by registered letter with a return [ÖLÜDENİZ MAH. 227. SK. BELCEKIZ TATİL KÖYÜ NO:2 A İÇ KAPI NO:A FETHİYE/MUĞLA-Türkiye] to be sent to the address in person by application, notary or registered mail with a refund,
The form is signed with a secure electronic signature issued within the scope of the Electronic Signature Law No. 5070 and sent by e-mail registered to the [email protected] address

Monitoring a method prescribed by the Personal Data Protection Board.
The Company responds to the data subjects who wish to exercise such rights within the limits stipulated in the Law within a maximum of thirty (30) days as stipulated in the Law. In order for third parties to request an application on behalf of the owners of personal data, a special power of attorney issued by the data subject by the notary on behalf of the applicant must be found.

The Company responds to the data subjects who wish to exercise such rights within the limits stipulated in the Law within a maximum of thirty (30) days as stipulated in the Law. In order for third parties to request an application on behalf of the owners of personal data, a special power of attorney issued by the data subject by the notary on behalf of the applicant must be found.

Although data subject applications are processed free of charge as a rule, charges can be made at the fee tariff stipulated by the Personal Data Protection Board.

The Company may request information from the person concerned in order to determine whether the applicant is the owner of personal data, and may ask the personal data owner about his application in order to clarify the points stated in the application.