Privacy Policy

Privacy Policy


1. What is this Data Privacy Policy about?

Privacy is a matter of trust, and your trust is important to us. That is why we are publishing this Data Privacy Policy. With regard to the new European General Data Protection Regulation ('GDPR'), this policy explains what personal data we process, by what methods and for what purposes. It is important to us that you are fully informed about the processing of your personal data. This Data Privacy Policy therefore provides you with information about how and why we collect, process and use your personal data. It's important to us that you understand:

 

What personal data we collect and process about you;

When we collect your personal data;

Purpose of data processing;

How long we keep your personal data;

Who has access to your personal data;

What rights you have in relation to your personal data.

You will find the relevant notes and explanations below. If you have any questions, you can contact us at: akyuzkardesler@hotmail.com

 

2. Who are we?

When data is processed, a specific company is responsible for the protection of data. In each case, it is this company that decides whether certain data should be processed, e.g. the processing of data within the scope of a service, whether this is done using a website, etc., the purpose of the processing and the principles to be applied (if these decisions are made jointly by several companies, these companies may be jointly responsible). Akyüz Hotel is responsible for every website (including online stores and mini-sites for special offers), all social media presence, multimedia portals, chatbots and every application (one for each website).

 

Unless otherwise stated in this Data Privacy Policy, Akyüz Otel, Oberneuhofstrasse 12, 6340 Baar, Switzerland, is responsible for the processing of your personal data.

 

In some cases, a different company is responsible:

 

If you contact another Akyüz Hotel company, e.g. Customer Support, that company will be responsible for the relevant data processing, unless otherwise specified in this Data Privacy Policy.

We may transmit your personal data to another company of Akyüz Otel or to third parties so that these recipients can process your personal data for their own purposes (e.g. without acting on our behalf). This includes the competent authorities. In such cases, the relevant buyer will be the auditor. Information about this controller can be found in the recipient's privacy policy, which you can usually find on their website.

You can always contact Akyüz Otel for any questions, requests or problems regarding data privacy by sending an e-mail to the following address: akyuzkardesler@hotmail.com.

 

3. What is 'personal data' and what does 'processing' mean?

Data protection law regulates the processing of personal data. Personal data is all information that can be associated with a specific natural person. This may include, for example, the following information:

 

Contact details, e.g. name, postal address, email address, telephone number;

Additional personal data, e.g. gender, date of birth and age, marital status, nationality;

Job-related information, e.g. occupation, title, position, education, previous employers, skills and experience, permits and endorsements, and memberships;

Booking information, e.g. information about reservations, reservations, booking history, preferred hotels and resorts and length of stay, preferences and affinity for specific offers;

Financial information, e.g. credit card number, account information, credit reputation;

Health data, e.g. information about physical and mental ailments;

Visual, audio and video recordings;

Records of your visits to websites and application usage.

Some personal data are particularly protected by law. These include 'particularly sensitive personal data' (and are referred to as special categories of personal data). This data includes data indicating racial or ethnic origin, political opinions, religious or ideological beliefs or affiliations, genetic data, biometric data revealing precise identity, health and gender or sexual orientation data, and finally data for criminal convictions and offences and, in some cases, data for wealth measurements.

 

We do not always process all the categories of personal data mentioned in this section. Certain information relating to the personal data we process may be accessed in accordance with Articles 5 and 14 of this Data Privacy Policy. It can be accessed from the sections. Depending on the type of processing, we will inform you by a separate data privacy policy or notice, in particular if the specific type of data processing is not so clear as to require disclosure.

 

'Processing' means any use of your personal data.

 

This may include, for example, the following actions:

 

Collection and storage;

Organization and management;

Adaptation and modification;

Use and utilization;

Transfer and disclosure;

Combination;

Limiting;

Erasure and destruction.

 

4. Who is this Data Privacy Policy for and for what purposes?

This Data Privacy Policy applies to the personal data we process in all fields of activity of Akyüz Hotel. It applies to the processing of personal data that has already been collected, as well as personal data that will be collected in the future. Additional data protection periods may also apply for certain services.

 

In particular, the processing of data may affect the following persons ('data subjects'):

 

People who write to us or contact us;

Customers in our hotels and resorts;

Visitors to our facilities;

Customers on our online booking platforms;

Users of online services and applications;

People who use or come into contact with our services;

Visitors to our website;

Recipients of information and marketing communications;

Participants in contests, sweepstakes and customer events;

Participants in market research and opinion surveys;

Job applicants with our suppliers' liaisons, customers and other commercial partners.

For more information on data processing for individual services, please refer to the general booking conditions, terms and conditions of participation and similar conditions.

 

5. What personal data do we process and for what purposes?

We process different personal data depending on the situation and purpose. You can find more information in this section and also in the general booking conditions, terms and conditions of participation and additional data privacy policies. We collect your personal data directly from you, e.g. when you submit your data to us, contact us or use our Wi-Fi login details. However, data may also be collected from third parties, such as credit reporting agencies, and from online service providers, such as Internet analytics service providers. Among other things, we may also process personal data for purposes such as payment, official register, etc., which are particularly sensitive in the following cases:

 

Communications: We process personal data when you contact us or communicate with you; e.g. when you contact customer service, write to us or call us. Data that may include personal data of third parties, such as name and contact details, the time of writing of the relevant messages and their content, are also generally sufficient for us. We use this data to provide you with information or messages, to process and communicate with your requests, and for quality assurance and training purposes. We also forward notices to the responsible corporate offices, e.g. if your request relates to another company.

Online reservations on the website and use of services: We also process your personal data when you use our services, e.g. when you buy products from us, book a room or purchase another service. We process your personal data when we act in this way, for example when processing your orders and reservations and for the purpose of providing services and invoices. In the case of online booking and the use of a customer or loyalty card, we also collect and process personal data relating to your credit rating, booking and payment behaviour. For example, we collect third-party credit ratings when deciding whether or not to offer you on-site reservations, and we process information about when and how often, at which hotels and resorts, or on which online booking platforms, you make reservations, in order to provide you with information about your preferences and affinity for certain hotels, resorts and services. This information helps us to inform you in particular about additional opportunities and to tailor our services to the needs.

Loyalty and customer programs: We process personal data as part of our loyalty and customer programs 'Advantage M and Circle M'. In addition to contact data, we also process personal data relating to programme use by you and others with whom you live in the same household, as well as other information that helps us provide you with targeted information about deals and help our services meet requests more effectively, such as your booking habits, preferences and affinities towards certain hotels or resorts and services. You can find detailed information in this Data Privacy Policy under the heading 'Online bookings on the website and use of services' and in the respective general terms and conditions or conditions of participation

Visiting websites: When you visit our websites, we process your personal data depending on the service and function. This data includes technical data such as the time our website was visited, the duration of the visit, the pages accessed and the device information used (e.g. tablet, computer or smartphone, 'end device'). We use this information to provide website services, to make the website more user-friendly and for IT security reasons. We also use 'cookies', which are small packets of data that your browser automatically generates and are stored on your device when you visit our website. Cookies are necessary in many cases for the functionality of the website and are automatically deleted after the visit. Other cookies are used to personalize the service provided and allow us to show you targeted advertisements from third parties. We also use analytics services from service providers such as Google in the US and worldwide. In doing so, the provider does not receive any personal data from us, but on the basis of this data we may collect information about the behaviour on the website in question so that they can provide us with analysis. We may also integrate certain features from providers such as Facebook into our own systems as a result of which the provider may receive data about you. But in most cases we don't know the name of the website visitors.

Online services and applications: If you use our online services, we may process personal data (even if you do not purchase any products or services) for the purpose of providing, improving and further developing those services. Depending on the type of service, it includes information on the installation and use of mobile applications ('apps') as well as information about a customer account and its use.

Information and direct marketing: Unless you object to such processing, we process personal data to send you informational and advertising communications. For example, if you have signed up for a newsletter or SMS service, we will process your contact information in order to get to know you better, to tailor our offers to you and to improve our services in general.

Contests, sweepstakes and similar events: From time to time we organize contests, sweepstakes and similar events. In doing so, we process your contact information and information about your participation in order to facilitate contests and sweepstakes in order to communicate with you and, if relevant, for advertising purposes. Detailed information can be found in the respective conditions of participation.

Visiting our premises: When you visit our premises, we may create video recordings in designated sections for security and evidence purposes. You can also use the Wi-Fi service. In such a case, we will collect device-specific information during the registration process and ask you to register by entering your name and email address or mobile phone number if necessary.

Customer events: We also process your personal data when we carry out customer events (e.g. promotional events or sponsorship events). This includes the name and postal or e-mail address of the participants or interested parties and, where necessary, additional data. We process this information for the purpose of facilitating customer activities as well as communicating with you and getting to know you better. Detailed information can be found in the respective conditions of participation.

Market research and media observation: We process personal data for market and opinion research. For this purpose, we may use information about your booking behaviour (more information can be found in 'Online bookings on the website and use of services'), as well as information from surveys and studies, as well as other information such as media, social media, the Internet and other publicly available sources. We may use media monitoring services and may also carry out our own media observations and process personal data.

Commercial partners: We work with a variety of companies and commercial partners, such as suppliers, business service buyers, cooperation partners and service providers (e.g. IT service providers and travel agencies). In doing so, we also process personal data of contact officers in these companies, such as name, assignment, title and their communication with us, for the purpose of initiating and processing contracts for planning, accounting and other contractual purposes. Depending on the field of activity, we need to examine the company in question and its employees in more detail, for example through a security assessment. In such a case, we collect and process additional information from third-party providers. We may also process personal data in order to improve ourselves in terms of customer focus, customer satisfaction and customer retention (Customer Relationship Management).

Administration: We process personal data for our own administration and for intra-group administration. For example, we may process personal data as part of IT management. We also process personal data for accounting and archiving purposes and in general to review and improve internal processes.

Corporate transactions: We may also process personal data for the purpose of preparing for and carrying out corporate acquisitions and sales, as well as the purchase or sale of assets. The subject and scope of the data collected or transmitted depends on the stage and subject of the processing.

Job Applications: We also process personal data when you apply for a job with us. For this purpose, we need standard information and documents, which are usually indicated in the job advertisement, and these may also include personal data of third parties.

Compliance with legal requirements: We process personal data for the purpose of complying with legal requirements and detecting and preventing breaches. These include the receipt and processing of complaints and other notices, internal investigations or the sharing of documents with an authority if we have a good reason or are legally obliged to do so. In doing so, we may also process personal data of third parties.

Legal defence: We process personal data in different combinations in order to protect our rights, for example to bring a claim in court, to settle without litigation or when dealing with authorities in Germany or abroad or to defend ourselves against lawsuits. For example, we may ask for clarification of the possibilities of judicial proceedings or submit documents to an authority. We may process personal data relating to you or third parties or to the extent necessary and permissible to transmit personal data to third parties in Germany and abroad.

Article 14 of this Data Privacy Policy This section details the types of personal data we collect and process about you, how, for what purposes and on what legal basis we use it, and whether you are required to disclose personal data.

 

6. With whom do we share your personal data?

Our employees have access to your personal data to the extent necessary for the purposes described, and your data is only shared with those employees who are necessary to perform their duties. These include employees in other departments and support areas such as IT. In doing so, our employees are acting in accordance with our instructions and are obliged to maintain confidentiality and privacy when working with your personal data.

 

We may also transfer your personal data to other companies within Akyüz Otel for internal administration and various processing purposes. Your personal data may therefore be processed for related purposes and associated with personal data received from other Akyüz Hotel companies.

 

When we want to use their services, we may also disclose your personal data to third parties within and outside Akyüz Otel ('Processors'). This is particularly relevant to services in the following areas:

 

Business management services (e.g. accounting and asset management)

Consulting, e.g. tax advisory services, lawyers, business consultants, consultants in the field of personal recruitment and placement;

IT services, e.g. data hosting services, cloud services, email newsletters, data analysis and amplification, etc.;

Credit checks, e.g. when you want to make an offset purchase;

By carefully selecting the order data processor and entering into appropriate contractual contracts, we ensure the protection of your personal data by third parties for the entire period of its processing. Our order data processors are obliged to process personal data only on our behalf and in accordance with our instructions.

 

It may also be possible to (also) transfer personal data to other third parties for their own purposes. In such cases, the data importer is an auditor under data protection law. This applies, for example, to the following situations:

 

When reviewing or carrying out transactions, such as business mergers and the purchase or sale of certain parts of a company or its assets, in this context, we are required to transfer personal data to another company.

If required by law, we may need to share your personal data with third parties (e.g. courts and authorities in Switzerland and abroad). We also reserve the right to process your personal data if we believe it is necessary to comply with a court order or to make or defend legal claims or for other legal reasons. In doing so, we may also share your personal data with other parties involved in litigation.

We may share your personal data with your former employers if you apply to us (for reference purposes) or with your future employers when you apply for a new job. However, we will not do so unless you request such sharing or obtain your permission.

When transferring claims against you to other companies, such as collection agencies.

 

7. When do we send your personal information abroad?

The recipients of your personal data may be located abroad, including outside the EU or ERA. The countries concerned may not have laws that protect your personal data at the same level as Switzerland, the EU or the EEA. When we transfer your personal data to one of these countries, we are obliged to ensure that your personal data is appropriately protected. One way to do this is to enter into data transfer agreements with the recipients of your personal data in third countries that provide the necessary data protection. These include agreements approved, published and accepted by the European Commission and the Federal Data Protection and Information Commissioner and are seen as standard contractual clauses. Similarly, transfers may be made to recipient parties subject to the U.S. Privacy Shield Program. If you would like to receive a copy of our data transfer agreements, please contact us. In exceptional cases, transfers to countries that do not have an adequate level of protection are also permitted, e.g. on the basis of express consent, to enter into a contract with the data subject or to process contract applications, to enter into a contract with another for the benefit of the data subject, or to establish, pursue or defend legal claims.

 

8. Do we create profiling and automated individual decisions?

'Profiling' means the process by which personal data is automatically processed for the purpose of evaluating, analysing or predicting personal characteristics. We carry out profiling when analysing booking behaviour, etc.

 

'Automated decision on a case-by-case basis' means, for example, automatically generated decisions without relevant human influence that have adverse legal effects or other similar adverse effects on you. We will inform you separately when we make use of automated personal decisions on a case-by-case basis in individual cases and if this is required by law.

 

9. How do we protect your personal data?

We take appropriate security measures of a technical (e.g., encryption, obfuscation, logging and access restriction, data protection, etc.) and organizational (e.g., instructions to our employees, confidentiality agreements, reviews, etc.) nature to ensure the security of your personal data in order to protect against unauthorized and unlawful processing and to eliminate the risk of loss, unintentional alteration, unwanted disclosure or unauthorized access. But security risks often can't be completely eliminated; The specific risks that remain are usually unavoidable.

 

10. How long do we keep your personal data?

We retain your personal data in an individual-related format for as long as is necessary for the purpose for which it was collected; In the case of a contract, this period usually lasts at least for the duration of the contractual relationship. We also retain personal data if we have a legitimate interest in storing that data. This may be particularly the case where we need to use personal data to make or defend claims, for archiving purposes or to ensure IT security. We retain your personal data for as long as it remains subject to a statutory retention obligation. For example, the ten-year laundering period applies to certain types of data. Short retention periods apply to other data, such as security camera recording or private transaction records (log data) on the Internet. In certain cases, we will ask for your consent when we want to keep your personal data for a longer period of time (e.g. job applications that we want to keep a record of). After the specified expiration dates have passed, we will delete or anonymize your personal data.

 

11. What rights do you have in relation to the processing of your personal data?

You can object to data processing at any time and generally withdraw your consent to data processing freely. In particular, you have the right to object to data processing directly related to advertising (e.g. advertising emails).

 

To the extent that the relevant requirements are met and there are no statutory exceptions, you also have the following rights:

 

Right to information - You have the right to be informed transparently, clearly and comprehensively about how we process your personal data and what rights you have in relation to the processing of your personal data. We comply with this obligation by complying with this Data Privacy Policy. For detailed information, you can contact us at the following e-mail address: akyuzkardesler@hotmail.com

Right to information - You have the right to request information at any time about your personal data that we hold about you free of charge if we process your data. This right enables you to review the personal data we process about you and how we use that data in accordance with applicable privacy policies. In individual cases, the right to information may be restricted or denied in particular in the following cases: • If we have doubts about your identity and you are unable to prove your identity; • For the protection of others (e.g. to comply with confidentiality obligations or to protect the data protection rights of third parties); • Where the right of access is excessively exercised (instead, we may charge a fee for the information); or • where full disclosure would result in an undue expense.

Right to request rectification of data - You have the right to request the rectification or completion of inaccurate or incomplete personal data and to be informed about the report.

Right to request erasure of data - You have the right to request the erasure of your personal data. You can request the deletion of your personal data in the following cases:

- The personal data is no longer necessary for the intended purposes;

 

- you have effectively withdrawn your consent and have lodged an objection to data processing that has legal consequences;

 

- If the personal data is processed in an unlawful manner.

 

In individual cases, the right to information may be restricted or denied in particular where data processing is necessary in the following cases:

 

- To exercise the right to freedom of expression;

 

- To perform a legal duty or in the interest of the public;

 

- To benefit from legal rights.

 

Right to request restriction of data processing - In certain circumstances, you have the right to request the restriction of the processing of your personal data. This may mean, for example, that personal data is not (temporarily) processed or that published personal data is (temporarily) removed from a web page.

Right to request the transfer of data - You have the right to receive the personal data you have provided to us free of charge and in a readable format, but:

- special data processing must be subject to your consent and be necessary for the performance of the contract;

 

- The processing of the data must be carried out by automated methods.

 

Depending on each case, your personal data may be transferred to you or directly to a third party.

 

Right to lodge a complaint - You have the right to lodge a complaint with a competent regulatory authority regarding the way in which your personal data is processed. In Switzerland, the responsible body is the Federal Data Protection and Information Commission (FDPIC).

Right of withdrawal - You have the right to withdraw your consent at any time. However, data processing activities carried out in the past on the basis of your consent will not become illegal as a result of your withdrawal of consent.

 

12. What other aspects need to be considered?

The processing of personal data is authorised, in particular, in the following cases:

 

If this is necessary for the performance of a contract of the data subject or for pre-contractual measures based on your research (e.g. review of your contract application);

If necessary due to legitimate interests. Our legitimate interests include our own interests and those of third parties. These are quite diverse and include, for example: interests in good customer service, maintenance of communication and other forms of communication with customers, even outside the contract; advertising and marketing activities; to get to know our customers and others better; to improve products and services and to develop new products and services; within the scope of intra-group management and intra-group traffic required for a collaborative company; for example, in connection with online bookings, the fight against fraud and the prevention and investigation of crime; protection of customers, employees and other persons, as well as the data, secrets and assets of Akyüz Hotel; ensuring IT security, in particular in relation to the use of websites, applications and other IT infrastructure; to facilitate and organize the realization of business activities, including the operation and development of websites and other systems; corporate governance and development; sale or acquisition of companies, certain divisions of corporations and other assets; legal claims and defenses; compliance with applicable laws and internal rules;

is based on a valid unwithdrawn consent;

If necessary to comply with legal requirements.

In particular, the processing of sensitive personal data is further restricted. Among other things,

 

Permission is granted on the basis of a valid permission that has not been withdrawn;

If it relates to personal data that the data subject has explicitly shared with the public;

If it is necessary for legal protection;

If it is necessary to comply with certain legal requirements;

Only under certain circumstances is the transfer of data to foreign countries permitted. Detailed information 7. It is given in the section.

 

Section 14 of this Data Privacy Policy at the end of this Data Privacy Policy. The section provides additional information on the legal basis for the relevant data processing. However, due to the complexity of the data processing process in many cases, it is not possible to exclude other legal bases that, depending on the circumstances, may apply in individual cases.

 

As a rule, there is no legal obligation to disclose personal data unless you have any contractual relationship with us that forms the basis of the obligation. However, we are required to collect and process the necessary personal data or to arrange and implement a contractual relationship for the purpose of fulfilling the relevant obligations and to comply with legal requirements. In the event of a contract, we will not be able to conclude or maintain the said contract. The processing of certain data is mandatory when using the websites. You can block cookies (detailed information is contained in this Data Privacy Policy). The recording of certain data, such as your IP address, which is usually not personal data, cannot be prevented for technical reasons.

 

You may or may not want us to transfer personal data of third parties. In such a case, we would like to remind you that you are obliged to inform the data subject about this data transfer and this Data Privacy Policy and to ensure the accuracy of the relevant personal data.

 

13. Changes to this Data Privacy Policy

This Data Privacy Policy may be amended over time, in particular when we change our data processing methods or a new regulation comes into force. In general, the Data Privacy Policy in the version available at the beginning of the respective data processing process applies to data processing.

 

14. Reasons for data collection; scope, purpose and obligation to provide information; Legal basis of data processing

Communication

1. Processed personal data

 

When you contact us by writing, electronically or by phone, or when we contact you, we collect and process personal information. For example, when you contact customer service and write to us via email/post or call us by phone. We process contact and contact information, in particular the following personal information:

 

Name;

Depending on the contact method used, contact data such as postal address, email address and telephone number;

If applicable, information about third parties mentioned in the communication;

The time and content of communications, which may include personal data of third parties.

The exact scope of personal data depends largely on the content of the communication. When you provide us with sensitive personal data, we will also process that data. Your telephone conversations with us are recorded if necessary and with prior notice to you.

 

2. Reasons for data collection and obligation to provide information

 

In this context, we process personal data in particular for the following purposes:

 

Communicating with you;

Customer service and relationships;

Quality assurance and training;

All other processing purposes to the extent required by the communication (e.g. entering into a contract).

As a rule, you are not obliged to provide us with certain information. However, in most cases, we may respond to you, process your request, and contact you when we are able to process certain minimum information. If you do not want us to record phone calls, you have the option to end the phone call at any time and contact our customer service using another method (e.g. email).

 

3. Legal basis

 

When communication takes place on your initiative, we consider this as consent to process your personal data. Customer service and communication in most cases are based on our legitimate interests, as they enable us to communicate with customers and others, improve the quality of our services, avoid errors in our operations and achieve greater customer satisfaction.

 

4. Company responsible for data processing

 

Akyuz Hotel

 

Online reservations on the website and use of services

1. Processed personal data

 

When you use our services, for example when you make an online booking or receive a service, we process personal data in connection with your booking and payment behaviour. In particular, this includes the following personal data, which may require special protection:

 

Name, address, contact details, billing address(es);

Credit and payment information from providers such as credit intelligence agencies;

Information about which bookings you make, when and how often you make them, and which payment method you use at which hotels, resorts and online booking platforms;

Information about your behaviour on an online booking platform (confirmed and cancelled reservations, shopping lists, services browsed such as room categories, etc.).

However, this requires you to make the booking online and use a customer or loyalty card or other method of identification. You can also use certain services in our hotels and resorts without us knowing your name.

 

We may also evaluate information about bookings and behaviour at our properties and on the online booking platform and link this information with other personal information, such as non-personal statistics and personal data we collect about you. We can also check your credit rating in connection with the contract. For this purpose, we often receive information from specialized companies called credit reporting agencies.

 

To prepare for your stay, we may collect your photos from publicly available sources. This way we can get to know you and provide you with outstanding customer service. If you are making your booking online, please also refer to the conditions in the 'Use of online services' section of this Data Protection Notice.

 

2. Reasons for data collection and obligation to provide information

 

In this case, we process your personal data in particular for the following purposes:

 

Contract initiation and processing: We process your personal data for the purpose of deciding whether and how to conclude a contract with you (e.g. on what payment terms) in order to be able to record reservation and service fees, to manage and fulfil reservations and in general to be able to prepare and conclude the contract when it is necessary to conclude the contract;

Information about your booking behaviour: We analyse our customers' booking behaviour and collect information about their preferences and affinities towards certain products and services, together with additional information (room categories, location selection, etc.) that we take into account when improving our services. This information enables us to tailor our services to the needs of our clients (in general and individually) and to give you the most appropriate response to your enquiry.

Statistical purposes: We process your personal data for statistical purposes, such as evaluating information about interactions between us and customers on a non-personal basis. This also makes it easier for us to better respond to the needs of our customers. In this way, we also learn which products are preferred and how we can improve our services.

You are not required to disclose your personal information. However, when we do not process your personal data, reservations and services as well as the purchase of certain products are not possible. Booking via the website also means that we need to process the necessary personal data.

 

3. Legal basis

 

We base data processing on our right to process personal information for the purpose of administering your contract execution and fulfilling contracts. Data processing also serves our legitimate interests, such as delivering products to third parties (such as gifts), and by evaluating information about your shopping and booking behavior, we can more effectively personalise our services and expand and improve our offers to meet your needs and interests. This is important to us, as it allows us to compete successfully in the market. Our processing of sensitive personal data is generally based on your explicit consent.

 

4. Company responsible for data processing

 

Akyuz Hotel

 

Loyalty or customer programs

1. Processed personal data

 

When you register for Akyuz Hotel loyalty programs, we collect and process contact information and the following other personal information:

 

Appellation;

Company;

Name;

Postal address;

Email address;

Telephone number;

Nationality;

Credit card information;

Date of birth;

When you use your loyalty or loyalty card for bookings and payments, in particular, we process transaction data, which may be confidential and may include the following personal data:

 

Information about reservations and purchases of products and services;

What is, time and place of your bookings and purchases;

Your reservation and purchase amounts.

We may also evaluate your personal data and associate it with other personal information, such as non-personal statistics and personal data we collect about you, in order to determine information about your preferences and affinity for certain products and services. You can find detailed information in this Data Privacy Policy under the heading 'Online bookings on the website and use of services' and in the respective general terms and conditions or conditions of participation.

 

2. Reasons for data collection and obligation to provide information

 

We process your personal data within the scope of the programmes, in particular for the following purposes:

 

Administering programmes: We use your personal data to prepare you for a personal loyalty or loyalty card, etc., and send it to your home. We also need personal information to be able to quickly notify you of changes and additional opportunities, either electronically or by mail.

Optimizing our services: We analyse the personal data we receive when the card is used in order to understand the booking and purchasing behaviour of our customers and to create information that we can use to manage our services (deal design, location preference, etc.).

Tailoring our services to meet your needs: By participating in one of the programmes and taking advantage of its benefits and services (see the programme's general terms and conditions for details), we will learn more about your behaviour (in particular information about when, where and how often you make your booking and purchase). This makes it possible for us to more effectively tailor our services to the overall needs of our customers and meet their different requirements. In this way, we can coordinate our services and promotions according to demand.

Marketing: We process your personal data in order to be able to specifically inform you about products and services, sales, competitions and other special offers that match your interests.

Statistics: We also process your personal data on a non-personal basis for statistical evaluation.

Participation in the programmes is voluntary, but requires us to be able to process certain personal data. The use of data is also voluntary. For example, if you do not want us to process personal data about your booking and shopping habits, you can refrain from using the programs. As a result, you may miss out on special benefits associated with the programs, such as loyalty program deals.

 

3. Legal basis

 

We need to accept your application in order for you to participate in the programs. By doing so, a contract is entering into between you and us. The processing of personal data is permitted for the processing of the application and the performance of programs such as the receipt and redemption of points. The processing of the data is necessary for legitimate interests. This allows us to operate the programs and reward customers for their loyalty, and with the personal data collected through the programs, we can better and more specifically tailor our services to your needs and interests, and expand and improve our services. Our processing of sensitive personal data is generally based on your explicit consent.

 

4. Company responsible for data processing

 

Akyuz Hotel

 

Visiting our website

1. Processed personal data

 

Technical specifications: For technical reasons, certain data is automatically collected each time you visit our websites and stored in log files. This includes, for example, the following data:

 

IP address and device-specific information, such as the device's MAC address and operating system;

User's Internet service provider;

The content accessed and the date and time of the website visit.

Cookies: Depending on the function, we may store cookies. Cookies are small packets of data that your browser automatically generates and stored on your device (tablet, computer, smartphone, etc.) when you visit our website. We use session cookies, which have a unique identification number, called a session ID, and contain information about the origin of the cookie and the storage period. These cookies are automatically deleted after your visit to our website. We use cookies to store, for example, a shopping cart. We also use persistent cookies, which continue to be stored even after the browser session has ended. These types of cookies are used to remember a visitor on a subsequent visit. Some cookies come from third parties. This is the case when we use functions offered by third parties on our website. This applies to evaluation services, which also work with cookies.

 

Technical data and cookies often do not contain personal data. It is generally not possible for us to associate the information collected with a specific person.

 

User behavior evaluations: On our website, we use web analysis tools such as Google Analytics, the analysis service of Google LL in the USA. Google uses cookies for this process, which make it possible for Google to analyse website usage. As a result, Google does not obtain any personal data about us, but does collect information about your behaviour on our website and the device you use for this purpose (tablet, computer, smartphone, etc.). This includes, for example, the following usage data:

 

Browser type and version;

The address (URL) of the website from which you accessed our website;

The name of your service provider;

Terminal IP address;

The date and time you accessed our website;

Pages visited and the length of time they stay on the pages.

This information is usually transferred to a Google server in the USA and stored there. If you have activated the anonymized IP function, your IP address will be shortened in the EU or EEA. Only in exceptional cases will your full IP address be transferred to the USA. Google is subject to the Privacy Shield Program in the United States. We receive reviews from Google on the basis of this data. Google Analytics also makes it possible for us to assign data, sessions and interactions between multiple devices to a pseudonymous user ID and thus analyze the activities of an unidentified user across various devices. Further information can be found in the terms of use and Google's data privacy policy.

 

We also receive similar services from other providers around the world. These providers generally do not receive personal data, but may record the user's use of the website, for example through the use of cookies and other technologies. These records may be associated with similar information from other websites. The behavior of a particular user can be recorded on a large number of websites and devices. The respective provider may also use this data for its own purposes, e.g. for personalised advertising on its website and on other websites to which it offers advertising. If a user is registered with the provider, the provider can associate usage data with that person. As a rule, it will ask for the consent of the data subject and give users the right to revoke this consent in accordance with the provider's instructions. This personal data is processed by the provider on its own responsibility and in accordance with its own privacy policy.

 

Social plugins: We use social plugins on our websites, for example from providers such as Facebook, Twitter, Instagram, Google+, Youtube, Pinterest, Foursquare and Weibo. The buttons of the respective providers are therefore displayed and the content of the respective providers is integrated into the website. When you visit a website that contains such social plugins, your browser establishes a direct connection with the respective providers. The content of the social plugin is transmitted to your browser by the respective provider and placed on the respective website by the provider. As a result of this process, the provider in question collects in particular the following data:

 

Notification that your browser has accessed the website in question;

The IP address of the device you are using, even if you do not have an account with the provider.

If you are also logged in with the respective provider, they can associate your visit with your personal profile. If you interact with a social plugin, for example by clicking on the 'Like' button or leaving a comment, the corresponding information is transmitted directly from your browser to the respective provider and stored there. Your interaction may also appear on your profile with the provider and may be visible to people on your list.

 

2. Reasons for data collection and obligation to provide information

 

In connection with this, we process your personal data in particular for the following purposes:

 

Provision of the website: The storage of certain log files and cookies is inevitably associated with the provision of the website and its functions for technical reasons. Other cookies help us to provide and secure various functions and opportunities on our website.

Personalisation of the website: Some cookies are used to tailor our online services to your needs (e.g. by saving your language preference).

Website administration: The storage and processing of log files and cookies helps us maintain and troubleshoot our website, ensure the security of our website and fight fraud.

Third-party cookies make it possible for the respective companies to provide services and send you advertisements that may be of interest to you.

The collection of said data is not mandatory, but in many cases is necessary for the use of the website and certain functions. You can configure your device to always be notified when a new cookie is created. This also makes it possible for you to refuse cookies. You can also delete cookies from your device. In addition, by downloading and installing the relevant browser plug-in, you have the option to prevent the collection and processing of the data generated by the cookie (including your IP address). However, rejecting or disabling cookies may mean that you will not be able to use all the features of our website.

 

This information is used, in particular, to better understand the use of our website and to improve its content, functionality and discoverability. For example, we can see from which pages visitors come to our website the most, which pages are visited the most, and from which page visitors leave the website the most. We may also evaluate personal data and associate it with other personal information, such as non-personal statistics and personal data we collect about you, in order to determine information about your preferences and affinity for certain products and services. You can prevent the use of Google Analytics by installing a browser add-on: tools.google.com/dlpage/gaoptout. You have the option to withdraw any consent given to the providers or to object to the data processing carried out by these providers.

 

In particular, we use social plugins to make our website more attractive and to facilitate interaction with our services, such as 'liking' a page. This helps us to achieve a greater reach for our website. Detailed information on the processing of such data can be found in the data privacy policy of the respective provider.

 

If you do not want the respective provider to collect data about you via our website, you must log out of your account with the respective provider before visiting our website. Even if you are logged out, the providers collect anonymous data via social plugins. This data may be associated with your profile if you subsequently log in to your account with the respective provider. In such cases, the respective provider processes the personal data under its own responsibility and in accordance with its own data security policy. If you want to prevent the provider from associating the data with your profile, you must delete the corresponding cookies. You can also completely block the installation of social plugins by installing plug-ins for your browser.

 

3. Legal basis

 

The processing of log files and cookies for the stated purposes is in our legitimate interests. Some cookies are necessary, for example, to save personal settings or to provide booking offers. This personalization is also in the interest of visitors to our websites. The analysis of the use of our website also constitutes our legitimate interest. The stated purposes for data processing are within our legitimate interests. Our websites are very important tools for customer communication and customer acquisition. That's why it's important for us to make our websites functional, interesting and personal. The stated purposes for data processing are within our legitimate interests. It is important to us to make our website impressive and increase the interaction with our visitors. The use of social plugins is an important tool.

 

4. Company responsible for data processing

 

Akyuz Hotel

 

Online services and apps

1. Processed personal data

 

Online services: If you use our online services, we process your personal data even if you do not make a reservation. For example, when you register with us, we process contact information and service-related data, including but not limited to the following personal information:

 

Your name;

Your postal address;

Your email address and mobile phone number, if applicable;

Date and time of registration.

If you access our website using Facebook Connect or when you are logged in to another third-party provider (e.g. Google or LinkedIn), then we will have access to certain data stored with the respective provider, such as your username, profile photo, date of birth, gender and other information. Further information on this can be found in the data privacy policy of the respective provider.

 

Apps: We may also offer mobile applications (apps). In such a case, we collect and edit personal information when you install the application, use the application and its available features, and update the application. In particular, this data includes the following information:

 

Installation date, time and duration;

Device-specific information, such as device type and the current version of your operating system;

Information about application usage.

Depending on the type of service, we may also process additional personal data. This includes the following personal data, which may include sensitive personal data:

 

Information about the use of a user account;

Your age;

Your booking behavior;

Location;

Health information;

We may also evaluate this personal data and associate it with other information, such as non-personal statistics and personal data we collect about you, in order to determine information about your preferences and affinity for certain products and services. Additional information can be found in the applicable terms of use and in this table under 'Visit our website'. If you make a purchase from us in an online shop, additional information can be found under 'Purchasing products and using services'.

 

2. Reasons for data collection and obligation to provide information

 

We process your personal data in relation to online services and applications for the following purposes:

 

Provision of services: We process personal data in order to provide the service online or via an application and to be able to process the service. This may include opening and managing a user account on your behalf.

Evaluation and personalization: We process personal information related to online services and applications to better understand behavior within those services and applications and generally to understand the interests and tendencies of our customers, to provide personalized offers, and to improve our services and applications. For example, we record which applications you download, how you use them, how long they have been installed, and which services you use.

The processing of personal data also helps us to combat fraud.

The use of online opportunities is voluntary. However, if you decide to use it, this is usually not possible without the relevant processing of personal data (e.g. mandatory information in online forms).

 

3. Legal basis

 

Online offers are generally only available if you agree to the terms of use. By doing so, a contract is entering into between you and us. The processing of personal data is permitted for the performance of the contract. Data processing also serves our legitimate interests. By doing so, we can better tailor our services to your needs and interests, and expand and improve our services. This is important to us, as it allows us to compete successfully in the market. Depending on the specifics of the online offer, we may ask you for additional permission.

 

4. Company responsible for data processing

 

Akyuz Hotel

 

Information and direct marketing

1. Processed personal data

 

In particular, when you sign up for an electronic newsletter or other electronic notifications, we will process the following personal information:

 

Your name;

Your email address and/or mobile phone number;

Information about whether you have consented or objected to receiving such notifications.

We may also process information about your use of and response to such notices, including the following personal information:

 

Delivery of the message;

Opening and (if applicable) transmitting the message;

Clicked links (destination, date, and time).

We may also evaluate your personal data and associate it with other personal information, such as non-personal statistics and personal data we collect about you, in order to determine information about your preferences and affinity for certain products and services.

 

2. Reasons for data collection and obligation to provide information

 

We process your personal data to send you electronic communications and advertising. We process personal data about your use of and response to these messages in order to get to know you better and to send you more relevant opportunities. This data processing is voluntary for you. However, if you do not provide us with your personal data, in particular your email address, we will not be able to provide you with this service. You may withdraw your consent to electronic newsletters at any time by unsubscribing from this service. You can do this by clicking on the link provided in each electronic newsletter. Alternatively, you can request information about the personal data we hold about you at any time or request that this data be corrected or deleted by contacting us at the address below. akyuzkardesler@hotmail.com

 

3. Legal basis

 

We consider your subscription to an electronic newsletter as consent to the processing of personal data for the specified purposes. We also have a legitimate interest in direct advertising and in evaluating your response to such advertising. Both are important to us, as they enable us to compete successfully in the market.

 

4. Company responsible for data processing

 

Akyuz Hotel

 

Participation in contests, sweepstakes and similar events

1. Processed personal data

 

When you participate in contests, sweepstakes and similar events (in each case, an 'event'), we collect and process your personal information. The amount of personal data processed may vary depending on the activity. In particular, it contains the following personal data:

 

Your name;

Your date of birth;

Your contact information;

Confirmation of participation;

As a result of participation;

Correspondence about the event, if relevant.

Detailed information can be found in the relevant conditions of participation. We may also evaluate your personal data and associate it with other personal information, such as non-personal statistics and personal data we collect about you, in order to determine information about your preferences and affinity for certain products and services.

 

2. Reasons for data collection and obligation to provide information

 

We process your personal information associated with events to facilitate the event and to notify the winning participant. We may also process your name and contact information for promotional purposes.

 

Participation in such events is voluntary, but it is not possible without the processing of personal data.

 

3. Legal basis

 

By participating in an event, you consent to us processing your personal information for this purpose. Data processing also serves our legitimate interests. By doing so, we can better tailor our services to your needs and interests, and expand and improve our services. This is important to us, as it allows us to compete successfully in the market.

 

4. Company responsible for data processing

 

Akyuz Hotel

 

Visiting our facilities

1. Processed personal data

 

Video-monitored areas: We record video in appropriately marked areas. We may obtain information about your behaviour in relevant areas. The use of CCTV cameras is limited to specific areas and is clearly marked. The data collected is only accessible to those employees selected for processing.

 

Wi-Fi usage: As soon as you connect and log in to our Wi-Fi infrastructure, we collect and process device-specific data from your device (tablet, computer, smartphone, etc.). In particular, it contains the following data:

 

MAC address of the terminal (unique identifier of the device);

Date, time and duration of the connection;

Before using a Wi-Fi network, you may need to log in using the email address or social media login information you need to use our services. In this case, we collect and process in particular the following personal data:

 

Your name;

Your e-mail address;

The date and time of successful sign-in.

You can also log in using a social network or other service (ex: Facebook Connect). This allows us to access certain data stored with the respective provider, such as your user name, profile photo, date of birth, gender and other information, for example. Further information on this can be found in the data privacy policy of the respective provider.

 

When you use the Wi-Fi network, we will in particular process the following information:

 

Connection time;

Location of the Wi-Fi service;

2. Reasons for data collection and obligation to provide information

 

This processing is for your own safety, the safety of our employees and for evidentiary purposes. If there is any suspicion of committing a crime, we may provide the records to law enforcement authorities. If you do not want to be saved, we ask that you do not enter the corresponding fields.

 

We process this information in order to provide you with Wi-Fi service and for security purposes. The use of Wi-Fi offers is voluntary. You are generally not required to disclose any personal information. It may not be possible to use the Wi-Fi service without the processing of the relevant personal data.

 

3. Legal basis

 

It is in our legitimate interests to ensure the safety of our customers and employees in the relevant areas and to prevent and assist in the investigation of possible crimes against our employees and customers. If you voluntarily enter a supervised and designated area, we will assume that this constitutes a permit.

 

By using our Wi-Fi services, you consent to the processing of your personal data for this purpose.

 

4. Company responsible for data processing

 

Akyuz Hotel

 

Participation in customer events

1. Processed personal data

 

We process your personal data when we carry out customer events (e.g. promotional events or sponsorship events). In particular, this includes the following personal data, which may require special protection:

 

Your name;

Your contact information;

Your participation or non-participation;

Additional data about customer activity.

We may also evaluate your personal data and associate it with other personal information, such as non-personal statistics and personal data we collect about you, in order to determine information about your preferences and affinity for certain products and services.

 

2. Reasons for data collection and obligation to provide information

 

In particular, we process your personal data to invite you to our events and to decide which customer events are of interest to you. In this way, we can inform you about customer events that we think will be of interest to you. Participation in such customer events is voluntary, but usually not possible without the processing of personal data.

 

3. Legal basis

 

We process your personal data after you have given us permission to inform you about relevant customer events or when you register for one of our customer events. In addition, the processing of data serves our legitimate interests, as it allows us to contact you personally and get to know you better. As a result, we can better tailor our services to your needs and interests, and expand and improve our services. This is important to us, as it allows us to compete successfully in the market.

 

4. Company responsible for data processing

 

Akyuz Hotel sent an invitation to the event

 

Market research and media observation

1. Processed personal data

 

We process personal data for market and opinion research. For this purpose, we may use information about your booking behaviour, such as your bookings, booking history, preferred booking platforms and times, preferences and trends, as well as information from market research and opinion surveys, related studies and other publicly available sources, such as the media, social media (if the information is publicly available), the Internet and other publicly available sources. We may use media monitoring services and may also carry out our own media observations and process personal data.

 

2. Reasons for data collection and obligation to provide information

 

In particular, personal data is processed for the following purposes:

 

Market and opinion research;

To evaluate and improve the acceptance of our products and services and our communication regarding products and services;

Development of new opportunities;

Assessing the supply situation in a particular market.

3. Legal basis

 

This data processing is in our legitimate interests, as it allows us to improve the sale of products and services and therefore our market position.

 

4. Company responsible for data processing

 

Akyuz Hotel

 

Establishing contact with our company as a trading partner

1. Processed personal data

 

If you work for a company that offers products or services to us or with which we work in any other way, we process the following personal data of yours:

 

Your name;

Your title, role, field of activity and relationship with the relevant company;

Your career stages;

Your interactions with us.

When we check whether or not we want to cooperate with your company (e.g. in security checks), we process additional personal data, possibly together with sensitive personal data. If you work at our premises, we also process additional contact information, such as:

 

Nationality and residency status;

Copies of passports and IDs;

Criminal record and judicial measures;

User accounts and data on their use;

Badge number and usage;

Information about your use of our IT infrastructure;

Video recordings (if you are working in an area that is monitored by a camera).

We usually inform you separately or ask for your consent for such arrangements.

 

2. Reasons for data collection and obligation to provide information

 

In particular, personal data is processed for the following purposes:

 

To check whether we receive services from or provide services to your company, or to check whether we want and can cooperate with your company (e.g. in terms of competency tests, conflict of interest checks, etc.);

To check whether your company offers the necessary security, e.g. whether it processes personal data on our behalf;

To communicate with you and your company, e.g. in the context of the performance of the contract;

For personnel resource planning and, if necessary, resource planning for you and your company's staff;

For educational purposes; • For auditing and performance evaluation;

For the preparation and execution of corporate acquisitions, sales and similar transactions;

For Customer and Supplier Relationship Management, to get to know you and your company better, to improve our customer focus and to increase customer satisfaction and customer loyalty (Customer Relationship Management, 'CRM');

For accounting purposes;

To manage and protect our IT and other resources;

To exchange personal data within the Group.

You are not required to disclose this personal data. If you do not wish to provide us with the necessary personal data, we may not be able to work with you. In exceptional cases, we are even legally obliged to process such personal data.

 

3. Legal basis

 

As it allows us to use and sell products and services, the processing of this data is in our legitimate interests. It also serves our legitimate interests to prevent abuse and ensure an appropriate level of security. Customer relations are also in our legitimate interest. If we have a direct contract with you or if you want to enter into a contract with us directly, we process your personal data for the conclusion and performance of the contract.

 

In particular, when we process personal data that needs to be protected for the purposes set out above, we usually do so for the purpose of asserting, exercising or defending legal claims, or with your express consent.

 

4. Company responsible for data processing

 

Akyuz Hotel

 

Management

1. Processed personal data

 

We may process sensitive personal data about our customers, business partners and third parties, e.g. in the context of our IT management, for our internal administration and administration.

 

2. Reasons for data collection and obligation to provide information

 

In particular, we process your personal data for the following purposes:

 

Reviewing and improving our internal processes;

Accounting operations;

Archiving;

Education;

Other administrative purposes.

These purposes may apply to us or our affiliated companies.

 

3. Legal basis

 

Data processing for the stated purposes may be necessary for the performance of contracts. It is also necessary for the legitimate interest of the management of the institution and the group.

 

4. Company responsible for data processing

 

Akyuz Hotel

 

Corporate activities

1. Processed personal data

 

We may review and transact transactions in companies that we sell, ask for prices for, or buy, certain divisions of those companies, or other assets. In this context, we process personal data, the scope of which depends on the purpose and stage of the processing and may include sensitive personal data. In certain circumstances, such information may be shared with or obtained from a potential contractor to the extent permissible. For example, when we sell receivables, we provide the buyer with information about the reasons and level of rights and receivables and, if necessary, the credibility and behavior of the debtor.

 

2. Reasons for data collection and obligation to provide information

 

The purpose of such data processing is in particular to control and, if necessary, to carry out the respective processing. This may also require notification to authorities at home and abroad.

 

3. Legal basis

 

Data processing for the stated purposes may be necessary for the performance of contracts. This is in our legitimate interest.

 

When we process sensitive personal data, we usually seek your explicit consent.

 

4. Company responsible for data processing

 

Akyuz Hotel

 

Job applications

1. Processed personal data

 

When you apply for a job position within our company, we will process your contact information and the information you have provided to us (e.g. application, marital status, resume, knowledge and skills, interests, references, qualifications, certificates, etc.). This information may also include personal information that is particularly sensitive, such as health data and information about association membership. During a job application, additional personal data may be required, depending on the job and profile.

 

2. Reasons for data collection and obligation to provide information

 

We process your personal data for the purpose of verifying your suitability for the position in question, discussing any recruitment with you and, if necessary, drawing up and concluding a contract. Even if we do not select you for the position in our company or you choose not to work with us, we may, with your consent, keep your application for the position on file as a reference for any future employment. The provision of such personal data is voluntary, but it is not possible for us to process your application without the necessary personal data.

 

3. Legal basis

 

When you apply for a position within our company, we process your personal information for a potential contract. We also assume that you have consented to this data processing with your application.

 

4. Company responsible for data processing

The Akyüz Hotel you applied to.

Compliance with legal requirements

1. Processed personal data

 

In order to comply with legal obligations, we may or may not be required to process personal data. This applies, for example, if we receive and process complaints or reports of maladministration, or if an authority requests documents containing your name and contact details or conducts an investigation. We may also carry out internal reviews, which may include the processing of your personal data.

 

2. Reasons for data collection and obligation to provide information

 

We process your personal data for the following purposes:

 

To ensure compliance with legal obligations, including orders of a court or governmental authority;

Preventive measures to ensure compliance;

Measures to detect and investigate abuse.

3. Legal basis

 

Data processing for the stated purposes is necessary for compliance with legal obligations and legitimate interests.

 

4. Company responsible for data processing

 

Akyuz Hotel