PDPL

Home/PDPL

ece group logos marina

CLARIFICATION TEXT

(Within the scope of PDPL numbered 10)

        A.

This is the clarification text regarding the processing of your personal data by the Ece Saray, business of Ecetaş Construction Industry and Trade Inc. (during the hotel-accommodation-marina services). The clarification text is compulsory in accordance with the Law No. 6698 on the Protection of Personal Data.

B.

Ecetaş Construction Industry and trade inc. is the data supervisor. Data supervisor’s address and contact number is Meşrutiyet Cad. No:28 İç Kapı No:11 Kızılay Çankaya ANKARA, official e-mail address with Kep extension is ecetas@hs02.kep.tr.These addresses will be used to exercise the rights in Article 11 of the PDPL.

C.

We process your personal data within the scope of the accommodation and marina services agreement you have made with Ece Saray Marina & Resort operating within Ecetaş inc. The data we need for establishing and maintaining the contractual relationship are listed below;

  • To complete reservations, transportations, payments, manage and settlement processes,
  • To communicate,
  • To provide information about our products, campaigns, promotions,
  • To privatize the services and offer them to you,
  • To analysis,
  • To ensure the legal and commercial safety of our company and persons in business,
  • To organize Administrative Operations,
  • To ensure the physical safety and supervision of the company’s departments,
  • To use in business partner/ customer / supplier evaluation processes,
  • To identify and apply the commercial work strategies of our company
  • To ensure the execution of our company’s human resources policy,
  • To fulfill the legal obligations determined by the relevant legislation and to give information,
  • To ensure the management and security of the Marina,
  • To establish and maintain the contractual relationship of the boat mooring,

Your data’s are collected and processed for the purposes above.

We need to process your data below to manage accommodation and marina services:

For accommodation services,

  • Personal identifying information:(Name – Surname, Place of birth and date, Nationality, T.R ID No, Passport No, Accompanying guest Name-Surname, Place of birth and date)
  • Contact Information: (Address, Phone Number, E-mail)
  • Financial information: (only bank account number, credit card information)
  • Vehicle license plate information: (Entry-Exit Registration)

For Marina service,

      • Personal identifying information
      • Contact information (address, phone number, email)
      • Property information (boat ownership) (boat mooring registration license, Transit log)
      • Crew information and documents (certificate of authority, SSI  Information, Certificate of competence)
      • Boat owner Vehicle License Plate No (for parking use)
      • Boat Insurance Information
      • Financial information (only bank account number, credit card information)

Your personal data is recorded. Your data described above is requested by you and processed within the framework of the contractual relationship.

D.

As stated above, your personal data collected and processed can be transferred between the data processors, accommodation and marina facilities, between the data officer and the data processor within the scope of mandatory notices arising from the law and the request of public institutions and organizations (Police Department, judicial authorities, relevant Ministry). The purpose of the transfer is that your personal data is required within the framework of the contractual relationship and the conduct of the services, as well as the fulfillment of the purposes stated in article C. There is no transfer of data to abroad in our facility.

E.

Our facility is monitored with camera recordings for your safety and the camera recordings are renewed periodically in every 15 days. If requested, only records of 15 days prior to the date of request can be accessed. Camera recordings are not recorded in any data or server. The areas monitored by the camera are indicated by warning signs.

F.

In accordance with the establishment of the contractual relationship as a data collection method, management and the legal reasons stated in Article C. and in line with the request of the relevant public institutions and organizations, we use the methods of filling in your booking information both from our web address and directly through the application, submitting the requested information and documents in accordance with our request, and obtaining it by e-mail and telephone.

G.

The person whose personal data is processed may exercise his / her rights under Articles 11 and 7 under the law numbered 6698. Please visit www.ecesaray.com.tr or the reservation desk for information. To find out the ways of deletion of your data and detailed information about our data deletion, destruction, anonymization policy visit www.ecesaray.com.tr and check out our policy entitled” Personal Data Protection Policy.”

ece group logos marina

PERSONAL DATA PROTECTION POLICY

  1. GENERAL INFORMATION

The protection of your personal data is very important for our hotel and marina business and a high level of sensitivity is shown for the protection of your data. Apart from the data we process and need within the contractual relationship, your data is stored in a secure environment in order to provide you with a better quality service and to establish the specific standards mentioned below.

In accordance with the International Convention on the protection of individuals against the automatic processing of personal data, directive 96/45/AT, GDPR (General Data Protection Regulation) and the law on the protection of personal data No. 6698 which was published in the Official Gazette on 07.04.2016 your personal data are among our values and policies that are of importance to our company. Our purpose is to inform you about the privacy of your private life, to protect the fundamental rights and freedoms of persons and to inform you about the procedures and principles that the real and legal persons who process personal data must comply with. According to the article 20Th Of The Constitution Of The Republic, all real persons have the right to request the protection of personal data relating to them. Regarding the protection of personal data, which is a constitutional right, ECETAŞ construction industry and trade inc.’s business The Ece Saray Marina & Resort is managed by this policy, the utmost care is taken to protect your personal data and all precautions are taken.

In accordance with Article 7 of the Law on Protection of Personal Data No. 6698 and the Regulation on the Deletion, Destruction or Anonymization of Personal Data, the data officer is responsible for storing, deleting, destroying and anonymizing of your personal data for a certain period of time on request or ex officio. Storage, deletion, destruction and anonymity periods and administrative/technical measurement methods related to them are set out in our policy.

  1. BASIS

This text has been prepared in accordance with the Law No. 6698 on the protection of personal data, regulations and communiqué.

  1. DEFINITIONS

Data Supervisor           : ECETAŞ construction industry and trade inc. is responsible for the establishment and management of the data recording system, which determines the purposes and means of processing personal data.

  1. Personal Data : Any information that identifies or makes your identity identifiable.
  2. Person concerned :Real person whose personal data is processed
  3. Board : Personal Data Protection Board
  4. Application : Application made within the scope of the article 13 Of The Act. (Application form is attached.)
  5. Registered e-mail address (REM): A qualified form of e-mail that provides legal evidence for the use of electronic messages, including their sending and delivery,
  6. Secure electronic mail : Means an electronic signature which is exclusively attached to the signature holder, created by means of a secure electronic signature creation tool, which is only at the disposal of the signatory, which enables the identification of the signature holder based on a qualified electronic certificate, and whether any subsequent changes have been made to the signed electronic data.
  1. DATA SUPERVISOR

Data supervisor : ECETAŞ Construction Industry and Trade inc. (VKNO: 3240014910) (Ece Saray Marina & Resort Facility).

  1. WHY DO WE PROCESS YOUR PERSONAL DATA? WHICH PERSONAL DATA WE PROCESS?
    • To manage, complete the booking, transportation, payment and settlement processes,
    • To communicate
    • To provide information about our products, campaigns, promotions,
    • To privatize the services and offer them to you,
    • To analysis,
    • To ensure the legal and commercial safety of our company and persons in business,
    • To organize Administrative Operations,
    • To ensure the physical safety and supervision of the company’s departments,
    • To use in business partner/ customer / supplier evaluation processes,
    • To identify and apply the commercial work strategies of our company
    • To ensure the execution of our company’s human resources policy,
    • To fulfill the legal obligations determined by the relevant legislation and to give information,
    • To ensure the management and security of the Marina,
    • To establish and maintain the contractual relationship of the boat mooring,

For the purpose of;

For accommodation services,

  • Personal identifying information:(Name – Surname, Place of birth and date, Nationality, T.R ID No, Passport No, Accompanying guest Name-Surname, Place of birth and date)
  • Contact Information: (Address, Phone Number, e-mail)
  • Financial information: (only bank account number, credit card information)
  • Vehicle license plate information: (Entry-Exit Registration)

For Marina service,

  • Personal identifying information
  • Contact information (address, phone number, email)
  • Property information (boat ownership) (boat mooring registration license, Transit log)
  • Crew information and documents (certificate of authority, SSI  Information, Certificate of competence)
  • Boat owner Vehicle License Plate No (for parking use)
  • Boat Insurance Information
  • Financial information (only bank account number, credit card information)

Your personal data is recorded. Your data described above is requested by you and processed within the framework of the contractual relationship.

  1. CAMERA RECORDINGS

Our facility is monitored with camera recordings for your safety and the camera recordings are renewed periodically in every 15 days. If requested, only records of 15 days prior to the date of request can be accessed. Camera recordings are not recorded in any data or server. The areas monitored by the camera are indicated by warning signs.

  1. DATA SECURITY PROVISIONS.

The data supervisor is responsible for ensuring the security of the data and ensures that the data is processed in accordance with the following considerations.

  • Processing personal data in accordance with the law and integrity rules,
  • Keep personal data up to date with accurate and appropriate periods,
  • Processing personal data for specific, explicit and legitimate purposes,
  • Processing personal data in connection with the purpose for which they are processed, limited and measured,
  • To maintain personal data for the period of time required by the relevant legislation or for the purpose for which they are processed,
  • Enlighten and inform the owners of personal data,
  • To establish the system necessary for personal data owners to exercise their rights,
  • Taking necessary measures to protect personal data,
  • To act in accordance with relevant legislation and regulations of the PDP (PERSONAL DATA PROTECTION) board in the transfer of personal data to third parties in accordance with the requirements of the purpose of processing,
  • Demonstrate the necessary sensitivity to the processing and protection of personal data of special quality.
  1. TRANSFER OF PERSONAL DATA.

Our facility does not transfer data abroad.

  1. WHAT IS THE METHOD OF COLLECTING YOUR PERSONAL DATA AND THE LEGAL REASON?

Your personal data will be used for the purposes stated in Article B above and within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of PDPL No: 6698; All kinds of data stored in written, oral and electronic environment are stored during the reservation and sales process and after the entrance to the facility, and the personal data is archived by the data responsible or the person authorized by the data responsible to the files to be opened on your behalf by taking all necessary security measures.

In the processing of your personal data, the measures determined by the Personal Data Protection Board are meticulously carried out in addition to the security measures taken by us.

  1. RIGHTS OF REAL PERSONS WHOSE PERSONAL DATA IS PROCESSED

Everyone, by contacting the data supervisor can;

  1. Learn whether personal data is processed,
  2. Request information about personal data if it has been processed,
  3. Learn the purpose of processing personal data and whether they are used in accordance with their purpose,
  4. Know the third parties, from which personal data is transferred at home or abroad,
  5. Request that personal data be corrected if it is incomplete or improperly processed,
  6. Request the deletion or destruction of personal data under the conditions stipulated in the law,
  7. Request that such transactions be reported to third parties where the personal data is transferred, in case of incomplete and incorrect processing, deletion , and destruction.
  8. Object to the emergence of an outcome against the person himself by analyzing the processed data exclusively through automated systems,
  9. In the event that personal data is damaged due to illegal processing, it has the right to request the removal of the damage.

In order to use your above-mentioned rights, you can use your explicit credentials and the descriptions of your rights that you wish to use in clear and clear written form. Send it to Meşrutiyet Cad. No:28 İç Kapı No:11 Kızılay / Çankaya /ANKARA signed with wet signature or to our e-mail address ecetas@hs02.kep.tr signed with secure e- signature.

Your applications must be yours alone. For applications to be made on behalf of someone else, your legal documents stating that you represent the applicants must be added to the application petition. Applications made within this scope will be returned to you within 30 days at the latest. These applications are free of charge, but if the transaction requires an additional cost, the fee on the tariff set by the Personal Data Protection Board may be charged. For the tariff you can visit the address www.kvkk.org.tr.

  1. PRECAUTIONS TO BE TAKEN BY THE DATA SUPERVISOR.

The following are sufficient precautions that the data supervisor must take while processing the data:

  • To set a separate policy and procedure for the security of private data,
  • To provide regular training for employees who are involved in the processing of data in the category of special qualified personal data, to make confidentiality agreements and to define access powers,
  • To keep private personal data in electronic form by encrypting it and to log all transaction records performed on the data,
  • If private personal data is stored in a physical environment, to take adequate security measures (fire, flood, theft, etc.) and to keep entry and exit under control,
  • If the transfer of personal data of special quality will be done, this transfer will be done by using encrypted and secure transfer methods.
  1. DATA DESTRUCTION CHART AND ANONYMIZATION
DATA STORAGE PERIOD METHOD OF DESTRUCTION
For accommodation service;

Personal identifying information:(Name – Surname, Place of birth and date, Nationality, T.R ID No, Passport No, Accompanying guest Name-Surname, Place of birth and date)

Contact Information: (Address, Phone Number, e-mail. Province is a must for invoice)

Financial information: (only bank account number, credit card information)

Vehicle license plate information: (Entry-Exit Registration) (Optional)

For Marina service,

Personal identifying information

Contact information (address, phone number, email)

Property information (boat ownership) (boat mooring registration license, Transit log)

Crew information and documents

(Certificate of authority, SSI Information, Certificate of competence)

Boat owner Vehicle License Plate Number (for parking use)

Boat Insurance Information

Financial information (only bank account number, credit card information)

It cannot be processed without the express consent of the concerned person. If there is a clear consent the storage period is 10 years.

If certain regulations exist in the law, they may be processed without explicit consent.

Storage time, max. 10 years.

Masking, Dimming, Anonymizing, Destroying, Exterminating.
Name- Surname, ID Cart, Passport, ID No: TAX No: Max. 10 years Extraction and data preparation /sampling, anonymization
  1. ADMINISTRATIVE AND TECHNICAL MEASURES FOR DATA STORAGE

Ecetaş inc. will process, use and disclose your personal data only for the purposes described in this statement;

To make a contract, where necessary, by law or by competent government and judicial authorities, to make or submit a legal claim, defense or etc. and to prevent deliberate attacks, fraud or illegal activities on the Ecetaş digital security system.

All computers in our facility are protected by antivirus program and higher security antivirus programs are used in our server computers to protect your personal data.

Your data is stored in physical and digital media. Your data stored in the digital environment is masked and stored in the physical environment, and only the data manager and the data processor, when necessary, reach your data as limited.

Areas where your data is stored:

  • Unit cabinets
  • Archive Cabinets
  • File Server
  • Firewall
  • Printer Interface
  • Power Plant
  • Virtual Backup Space
  • Hotspot

For the security of our data storage program that keeps your data in a secure environment, our IT unit is working and our program is updated and interface maintenance is performed every day against all external attacks.

When your data is requested by the relevant units, the IT unit makes limited sharing and is only allowed for the required amount of time through the processors. Periodic password changes are made and the passwords of those who leave the job are canceled on the same day.

Your personal data will be anonymous and destroyed after the retention period has expired.

Different networks, Firewall and Hotspot secure internet conditions are provided in our facility. All your inputs and outputs are stored with log records by law numbered 5651.

DATA SUPERVISOR

ECETAŞ İNŞ. SAN. VE TİC. A.Ş.

ece group logos marina

APPLICATION TO DATA SUPERVISOR

GENERAL EXPLANATIONS

(Within the scope of PDPL numbered 13 and 22)

  1. YOUR RIGHTS ABOUT THE APPLICATION.

Your rights under Article 11 of the Act can be made in writing or by means of a registered electronic mail (REM) address, secure electronic signature, mobile signature or an electronic mail address that has been previously notified to the data officer and registered in the system or with software or applications created for the purposes of application.

Your rights under the PDPL numbered 11;

  • Learn whether personal data is processed or not,
  • Request information if personal data is processed,
  • Learn the purpose of processing personal data and whether they are used in accordance with their purpose,
  • Know the third parties to whom personal data is transferred at home or abroad,
  • Request correction of personal data in case of incomplete or incorrect processing,
  • Request the deletion or destruction of personal data in accordance with the conditions provided in the article 7,
  • Request the transactions made in accordance with paragraphs (d) and (e) be notified to third parties to whom personal data has been transferred,
  • Object to the occurrence of a result against the person by analyzing the processed data exclusively through automated systems,
  • Request compensation for the damages in case of any damage due to unlawful processing of personal data
  1. APPLICATION PROCEDURE

Application procedure pursuant to Article 13 of the PDPL and Article 5 of the Communiqué on the Procedures and Principles of Application to the Data Officer / Supervisor can be made via written form or registered e-mail address (REM), secure electronic signature or  with the e-mail previously reported to our company and registered.

Your application will be answered by our company in writing within the shortest period of time from the date of receipt of the notification and within 30 days at the latest. If your transaction requires a cost, you will be charged at the tariff set by the Personal Data Protection Board. Click here for the fare tariff.

  1. ADDRESS OF APPLICATION / REGISTERED E-MAIL ADDRESS

We kindly request you to send your application to ECETAŞ Construction Industry and Trade inc.’s adress in  Meşrutiyet Cad. No:28 İç Kapı No:11 Kızılay/Çankaya/ANKARA with wet signature or to ecetas@hs02.kep.tr mail adress signed with secure electronic mail. Applications other than these addresses will not be accepted by our company.

  1. Application

Name and Surname :    T.R ID No. / Passport No. / Blue Card No.

Address :

Registered Electronic Mail (REM) :

Subject to Demand :

Attached Documents :

  1. RIGHTS SUBJECT TO CLAIM IN THE APPLICATION.
Is my personal data being processed? PDPL Article 11 / a
I would like to be informed if my personal data is being processed. PDPL Article 11 / b
For what purpose is my personal data processed and used for processing purposes? PDPL Article 11 / c
To whom is my personal data shared with at home and abroad? PDPL Article 11 / ç
I request that my personal data be updated. PDPL Article 11 / d
I request that my personal data be deleted and anonymized / destroyed. PDPL Article 11 / e
I want, when my personal data updated, destroyed / deleted / anonymized to be notified to the transferred 3rd parties. PDPL Article 11 / f
I object to a negative result arise by analyzing my personal data through automated systems. I do not want it to be analyzed. PDPL Article 11 / g

Click here for the application form.