AHAMA PRIVACY POLICY
As YASİN İNŞAAT TURİZM GIDA TAAHHÜT VE TİCARET ANONİM ŞİRKETİ (“AHAMA” , “COMPANY”) we respect the personal data you have shared with us and care about the protection of fundamental rights and freedoms, especially the right to privacy. We would like to inform you in detail about the protection of your shared personal data in accordance with the Personal Data Protection Law No. 6698 (“KVKK” , “Law”), the ways your personal data is collected, the purposes of processing, legal reasons and our mutual rights and obligations.
This Privacy Policy applies to information collected on our websites, mobile applications, cloud-based services, or controlled widgets embedded in communication platforms with a link to this Privacy Policy (collectively, the “Site”). It covers how we collect, use, share, and otherwise process personal data as of the date that this Privacy Policy is posted. It does not apply to any other information collected by AHAMA through any other means. By “Personal Data,” we mean information that identifies or can identify you personally.     


COLLECTION OF YOUR PERSONAL DATA
Your personal data may be collected verbally, in writing or electronically, by automatic or non-automatic methods, in order to fulfill legal obligations arising from the relevant legislation and to carry out collection, invoice issuance, reservation and accommodation processes.
We collect your personal data on the Site to enhance the services we offer you, maintain and improve the Site, protect the security of you and our Site, comply with legal obligations, and inform you about other services and products that may be available through us, our affiliated companies, or through our marketing alliances. We collect personal data about you when you interact with or utilize services offered on this Site, such as:
Creating a profile with us;
Making reservations, accommodation requests and payments;
Consenting to marketing communications;
Applying for a job;
Submitting comments, reviews, or other user-generated content;
Connecting or interacting with us through social networks (e.g., Facebook, instagram, Google+, Twitter); or
Requesting customer or technical support.
Personal data includes:
Name;
Postal or billing address;
E-mail address;
Telephone or mobile number;
Payment card information;
Government identification (e.g., passport identification to verify traveler identities);
Location via IP address;
Device being used (for our mobile site);
Cookies and similar technologies;
Member hotel stay information;
Your preferences regarding your member hotel stay (e.g. bed size, smoking versus non-smoking room); and
Other relevant data.
Your date of birth if you provide it to us.
Thus, you consent that the personal data you provide to AHAMA about yourself will be up-to-date, accurate, complete and understandable.          


LEGAL BASIS AND PURPOSES OF THE PROCESSING OF YOUR PERSONAL DATA
AHAMA only processes and share your personal data, including sharing with service providers or other external entities, to the extent reasonably necessary to fulfill your requests and meet our legitimate business and legal objectives. When AHAMA discloses personal data to external entities to perform services for us, we establish by contract that they may access your personal data only for the purposes of performing those services. AHAMA may also use what we know about you to offer you other products and services. AHAMA may combine your online information with information collected from offline or online sources, or information we already have. AHAMA may also use and disclose certain personal data to our affiliated companies and others for any purpose allowed by law.
AHAMA’s main purpose in collecting personal data is to provide you with a safe, ideal, effective and personalized experience.
AHAMA is committed to collecting and processing your personal data lawfully and fairly.
The data processing carried out by AHAMA aims to achieve specific, clear and legitimate purposes.
In particular, your data may be processed to achieve the following purposes:
Provide you with products and services, including authenticating authorized users, and marketing our products and services;
Perform certain services or other transactions initiated by you;
Respond to your questions, complaints, or reviews of our product or services or those of our member hotels;
Send you communications about online transactions, product information, ads and promotions, electronic newsletters, or other notices you requested or offers tailored to you;
Enable our advertisers, where appropriate, to provide you with more personalized content, and track the effectiveness of certain advertising campaigns;
Comply with applicable law, obey judicial orders, cooperate with law enforcement authorities, or prevent any suspected illegal activities;
Help us run our business; or
For any other everyday business purposes, such as product development and Site administration.
AHAMA will process your personal data because third parties manages the Site reservation engine, which allows it to collect your personal data necessary to organize your stay at one of its hotels and transfer this collected data to the relevant hotel.
AHAMA will process your personal data to manage its contractual relationship with you (such as invoicing, payment and reservation management), to carry out marketing activities and to ensure compliance with legal obligations.
 
AHAMA uses sensitive personal data solely for purposes that you would anticipate in providing us the information, for example, if you reserve an accessible room.
PARTIES TO WHICH YOUR PERSONAL DATA IS TRANSFERRED AND PURPOSES OF TRANSFER
 
Your collected personal data, in accordance with the basic principles stipulated by the Law, within the personal data processing conditions and purposes specified in Article 8 of the Law if duly requested, it can be transferred to legally authorized public institutions for the purpose of fulfilling legal obligations.
 
In addition, in accordance with Articles 5 and 8 of KVKK and/or in the presence of exceptions in the relevant legislation, personal data may be processed and shared with third parties without obtaining the consent of the Data Owner. The main ones of these situations are listed below:
 
It is clearly stipulated in the law,
 
It is necessary for the protection of the life or physical integrity of the person or someone else who is unable to express his/her consent due to actual impossibility or whose consent is not given legal validity,
 
It is necessary to process personal data, provided that it is directly related to the establishment or performance of any contract between the data owner and the Company,
 
It is mandatory to fulfill legal obligations,
 
The data has been made public by the owner himself,
 
Data processing is mandatory for the establishment, exercise or protection of a right,
 
It is necessary to process data for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the data owner.
 

APPLICATION TO DATA CONTROLLER AND YOUR RIGHTS
 
You can submit your applications regarding your rights under Article 11 of the Law to our Company in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. You can also submit your applications by mail to the Company’s address “Yanıklar Mahallesi, Muğla Caddesi, No:1, Fethiye/Muğla” or by sending an e-mail to [email protected] If you apply, we will get back to you regarding the application within a reasonable time.
 
We would like to point out that, as a personal data owner, in accordance with Article 11 of the Law, you have the following rights:
 
Learning whether your personal data is being processed or not
Requesting information if your personal data has been processed
Learning the purpose of processing your personal data and whether they are used for their intended purpose.
Knowing the third parties to whom your personal data is transferred at home or abroad.
Requesting correction of your personal data if it has been processed incorrectly or incompletely, and requesting that the transaction be notified to third parties to whom personal data has been transferred.
Requesting the deletion of your personal data in case the reasons requiring processing no longer exist, even though it has been processed in accordance with the law and other relevant legal provisions, and requesting that the transaction carried out within this framework be notified to third parties to whom personal data has been transferred.
Object to the emergence of a result that is unfavorable to the individual by analyzing your processed data only through automatic systems.
Requesting compensation for damage in case of damage due to unlawful processing of your personal data.