PERSONAL DATA PROTECTION NOTICE
As the Kamelya Collection Exclusive Hotels family (Kamelya Fulya Hotel, Kamelya Aishen Club and Kamelya Selin Hotel), we recognize the importance of protecting the personal data of our valued guests. Accordingly, we implement robust security measures to safeguard your personal data against unauthorized access. In order to protect your fundamental rights and freedoms, particularly your right to privacy, we process your personal data within the scope permitted by the Law No. 6698 on the Protection of Personal Data (“KVKK”), the secondary legislation enacted thereunder, Law No. 1774 on Identity Notification, Tax Procedure Law No. 213, Turkish Commercial Code No. 6102, and other applicable legislation, as explained below.
Pursuant to Article 10 of the KVKK regarding the Data Controller’s Obligation to Inform, and Article 11 regarding the Rights of the Data Subject, we would like to inform you, as our guests, visitors, business partners and other individuals or legal entities with whom we communicate, about the purposes for which your personal data are processed, the parties to whom and the purposes for which they may be transferred, the legal grounds and methods for collecting your personal data, and your rights in relation thereto. This Personal Data Protection Notice has been prepared by FSP Turizm ve Yatırım A.Ş., in its capacity as the Data Controller, in order to fulfil its statutory obligation to inform data subjects.
* “This Privacy Notice may be updated from time to time to reflect changes in applicable legislation or our business processes. The most up-to-date version will always be available on our website.”
1. DATA CONTOLLER
Pursuant to the Law No. 6698 on the Protection of Personal Data (“KVKK”), your personal data are processed by FSP Turizm ve Yatırım A.Ş., acting in its capacity as the Data Controller.
Address:MEHMETÇİK MAH. TERMESSOS BLV. İDEA İŞMERKEZİ NO: 4
A MURATPAŞA/ ANTALYA
2. PERSONAL DATA WE PROCESS
If you make a reservation at our hotel, we process the following personal data required for your reservation:
- Identity information (such as your full name, Turkish ID number or passport details);
- Contact information (such as your telephone number, email address and postal address);
- Information relating to your children (such as age and date of birth);
- Financial information (such as invoicing and payment details);
- Reservation, accommodation and travel information (such as your intended stay dates, room preferences and the number of guests); and
- Requests and complaints.
.
If you stay at our hotel, we may also process the following additional personal data:
- Vehicle information (such as licence plate details);
- Visual and audio data (such as CCTV footage and photographs); and
- Health data (such as allergy information)
where you have provided your explicit consent.
**In accordance with the principle of data minimisation, we may collect only limited information relating to minors under the age of 18 accompanying you, namely their name, surname, nationality and date of birth, through you.
Where you contact us via the “Contact Us” section of our website, we process your name, surname, email address and any personal data contained in your message.
Even if you do not actively provide us with any information through our website or other communication channels, certain information may be collected automatically during your visit to our website. For further information, please refer to our Cookie Policy. We use only a limited number of cookies that are strictly necessary to improve your browsing experience and for analytical purposes.
IMPORTANT NOTICE:
IF YOU STAY AT OUR HOTEL, PLEASE SCAN THE QR CODE ON YOUR REGISTRATION CARD TO ACCESS OUR EXPLICIT CONSENT STATEMENTS AND INDICATE AT CHECK-IN WHETHER YOU CONSENT TO THE PROCESSING OF YOUR PERSONAL DATA FOR MARKETING PURPOSES, THE USE OF YOUR VISUAL DATA, AND THE PROCESSING OF YOUR HEALTH DATA (INCLUDING ALLERGY INFORMATION).
3. HOW WE COLLECT YOUR PERSONAL DATA AND THE LEGAL BASIS FOR PROCESSING
We collect your personal data through the completion of the relevant forms on our website, during the hotel check-in process, through various communication channels (including our telephone numbers and email addresses), and via our business partners, by verbal, written or electronic means. Where necessary to better understand and respond to your request, we may contact you to request additional information, either manually or through automated means, in writing or verbally. Any such information will be processed solely for the purposes set out in this Notice.
Your personal data are processed in accordance with Article 5 of the Law No. 6698 on the Protection of Personal Data (KVKK) on the basis of one or more of the following legal grounds:
- Processing is expressly provided for by law.
- Processing is necessary to protect the life or physical integrity of a person who is unable to give consent due to actual impossibility or whose consent is not legally valid.
- Processing is necessary for the establishment or performance of a contract, provided that it is directly related to the contract.
- Processing is necessary for the Data Controller to fulfil its legal obligations.
- The personal data have been made public by the data subject.
- Processing is necessary for the establishment, exercise or protection of a legal claim.
- Processing is necessary for the legitimate interests of the Data Controller, provided that it does not infringe the fundamental rights and freedoms of the data subject.
Your special categories of personal data are processed pursuant to Article 6 of the KVKK, on the basis of one or more of the following legal grounds:
- Your explicit consent (for example, in relation to health data and marketing activities);
- Processing is expressly provided for by law;
- Processing is necessary to protect the life or physical integrity of a person who is unable to give consent due to actual impossibility or whose consent is not legally valid;
- The personal data have been made public by the data subject and processing is consistent with the purpose of such disclosure;
- Processing is necessary for the establishment, exercise or protection of a legal claim; or
- Processing is necessary for the protection of public health, preventive healthcare, medical diagnosis, treatment and care services, or the planning, management and financing of healthcare services, by persons under a legal duty of confidentiality or by competent public authorities and institutions.
Special categories of personal data are processed only where the safeguards prescribed by the Personal Data Protection Board have been duly implemented.
Links to Third-Party Websites
Our website may contain links to third-party websites. Such websites are subject to their own privacy policies and data protection practices, and our privacy policies do not apply to them. We accept no responsibility or liability in relation to such websites. Before sharing your personal data with any third-party website, you should review the relevant privacy notices and other applicable data protection documentation of that website.
When We Collect Your Personal Data
We collect your personal data, which you provide to us either directly or indirectly in connection with the services we offer, through verbal, written or electronic means.
Your personal data may be collected during your interactions with us, including when making room reservations, communicating with tour operators and travel agencies, completing the hotel check-in and payment processes, submitting requests or complaints, completing customer satisfaction surveys and questionnaires, participating in training sessions, seminars or events organized by the hotel, engaging in hotel activities, or visiting our website.
4. PURPOSES FOR PROCESSING YOUR PERSONAL DATA
Your personal data may be processed by FSP Turizm ve Yatırım A.Ş., acting as the Data Controller, without your explicit consent where such processing is necessary for the fulfilment of its legal obligations pursuant to Article 5/2(c) of the KVKK, or for the establishment, exercise or protection of its legal rights pursuant to Article 5/2(e) of the KVKK.
In addition, your personal data may be disclosed to competent public authorities without your explicit consent where such disclosure is required by applicable laws or requested by authorized public authorities in accordance with the relevant legislation. Your personal data may also be used, to the extent necessary, in connection with actual or potential legal disputes involving FSP Turizm ve Yatırım A.Ş., and may be shared with courts and other competent authorities.
Your personal data are collected, recorded, stored, processed and classified for the following purposes:
- To process room reservations and provide accommodation services;
- To fulfil identity notification obligations;
- To comply with applicable legal and regulatory requirements;
- To support quality improvement initiatives;
- To carry out risk management activities;
- To manage guest relations;
- To determine and implement business strategies and commercial activities;
- To carry out marketing and sales activities;
- To conduct routine audits;
- To manage and audit financial processes;
- To plan, monitor and implement information security processes;
- To prevent fraud, misuse and unauthorized activities by employees;
- To receive, assess and respond to suggestions, requests and complaints submitted through any communication channel, and to implement improvements based on such feedback;
- To ensure the security of our premises;
- To improve service quality and carry out marketing activities relating to our services.
.
5. TRANSFER OF YOUR PERSONAL DATA
Your personal data may be transferred, to the extent permitted or required under the Turkish Commercial Code, the Law No. 6698 on the Protection of Personal Data (KVKK), the Identity Notification Law, and other applicable legislation, for the purposes of fulfilling the processing activities described above, ensuring your safety, and enabling our Company to comply with its legal obligations. Such transfers may be made, where necessary, to relevant public authorities and institutions (including the Personal Data Protection Authority, the Ministry of Treasury and Finance, the Ministry of Trade, and the Information and Communication Technologies Authority), judicial authorities, law enforcement authorities (through the Identity Notification System), authorized accounting and financial advisory service providers for invoicing purposes, our business partners, and our suppliers, where necessary.
For the purposes of performing your accommodation agreement, processing your reservation, fulfilling our legal identity notification obligations, and managing room allocation procedures, your personal data may be transferred abroad in accordance with Article 9 of the KVKK. As the international hotel management systems we use (such as Opera Cloud) are hosted on servers located outside Türkiye, such transfers are carried out subject to appropriate safeguards and in compliance with one of the transfer mechanisms prescribed under the KVKK.
Where you have provided your explicit consent, photographs and video recordings containing your image, taken during your stay at Kamelya Collection Exclusive Hotels (including the Mini Club, hotel premises, gardens, retail areas, and any other designated locations for which your consent has been obtained), may be processed by Kamelya Collection Exclusive Hotels, its duly authorized personnel, and its contracted social media and marketing service providers (including Ideawind Agency), as well as software, infrastructure, CRM and IT service providers located in Türkiye and abroad. Such visual content may also be published on social media platforms such as Instagram, Facebook, X (formerly Twitter), YouTube and VKontakte, on the hotel’s information channel, hotel billboards, promotional catalogues, roll-up banners, marketing materials, and on our website at https://www.kamelyacollection.com.
If you do not provide your explicit consent, the necessary precautions and notifications will be made to ensure that you are not included in photographs taken in group settings.
6. RETENTION OF PERSONAL DATA
Your personal data will be retained only for as long as necessary to fulfil the purposes for which they are processed or for the retention periods prescribed under the applicable legislation. Once the relevant processing purpose ceases to exist or the applicable statutory retention or limitation periods expire, your personal data will be deleted, destroyed or anonymized in accordance with the KVKK.
7. YOUR RIGHTS AS A DATA SUBJECT
Pursuant to the KVKK, you have the right to submit a request to the Data Controller regarding the following matters:
- To learn whether your personal data are being processed;
- To request information if your personal data have been processed;
- To learn the purpose of the processing of your personal data and whether they are being processed in accordance with that purpose;
- To know the third parties to whom your personal data have been transferred, whether within Türkiye or abroad;
(Requests for the deletion of personal data may only be fulfilled where the legal basis for processing no longer exists and the applicable statutory retention periods or limitation periods have expired. Until such periods have elapsed, deletion requests cannot be granted.) - To request the rectification of your personal data where they are incomplete or inaccurate;
- To request the deletion or destruction of your personal data in accordance with the conditions set out in Article 7
- To request that the actions taken pursuant to items V and VI be notified to the third parties to whom the personal data have been transferred.
- To object to any outcome to your detriment arising solely from the analysis of the processed data by automated systems
- To request compensation for any damage suffered as a result of the unlawful processing of your personal data.
8. HOW TO EXERCISE YOUR RIGHTS :
You may submit your requests to the Data Controller by completing our Data Subject Application Form and sending it in writing to:
You may send it in writing to the address: Fsp Turizm ve Yatırım A.Ş
MEHMETÇİK MAH. TERMESSOS BLV. İDEA İŞMERKEZİ NO: 4
A MURATPAŞA/ ANTALYA .
Your application must include the following information:
- Your full name and, if the application is submitted in writing, your signature;
- Your Turkish Identification Number (for Turkish citizens), or your nationality, passport number or other identification number (for foreign nationals);
- Your residential or business address for service of notices;
- The subject of your request, together with any supporting information and documents, where applicable.
- The subject of your request, together with any supporting information and documents, where applicable.
FSP Turizm ve Yatırım A.Ş. reserves the right to verify your identity before processing your request.
For further information regarding the application procedure, please refer to: https://www.resmigazete.gov.tr/eskiler/2018/03/20180310-6.htm
