PDPL
Duman Private Health Facilities and Tourism Services Limited Company (“The Galliard”, “Company”)
Website Information Text
In accordance with the Personal Data Protection Law No. 6698 (“KVKK”), your personal data is processed by “Duman Özel Sağlık Tesisleri ve Turizm Hizmetleri Limited Şirketi (“The Galliard”, “Company”) within the scope of the following explanation.
What Personal Data Do We Collect?
Identity: Name, surname
Contact: Mobile phone, telephone, e-mail
Customer Transaction: Reservation information, request and complaint information
Transaction Security: IP Address information, website entry and exit information
Marketing: Behavioral and transactional information obtained through surveys, campaigns and tracking technologies
Contact: Your personal information that you submit through the clear text fields on the reservation page or communication channels.
Payment Information: Your payment information during the payment of the relevant invoice if you spend at our branches.
Visual Information: Your images obtained through cameras positioned for physical space security if you are a guest at our branches.
Based on Which Data Processing Conditions and How Do We Collect Your Personal Data? For What Purposes Do We Use It?
Your personal data is collected through our website, communication applications, suggestion, complaint information and reservation forms.
Your personal data is collected and processed by the Company for the following purposes ("Purposes") and legal reasons, based on the personal data processing conditions specified in Article 5 of the KVKK.
- Based on the legal reason for establishing a contract and fulfilling its requirements (KVKK Article 5/2/C): Execution and completion of the reservation processes you have made through our website and providing relevant communication within this scope; Your identity, contact, customer transaction, payment information, contact and visual information are processed for the purposes of fulfilling post-booking support services processes.
- Clearly provided for in the law and based on the legal reason regarding the Company's legal liability (KVKK article 5/2/a,ç): Fulfilling the legal obligations to which our Company is subject, ensuring compliance with the storage obligations stipulated in the legislation, authorized persons or persons in accordance with legal obligations Your identity, contact, payment information, customer transaction and visual data are processed for the purposes of providing information/documents to organizations, carrying out all kinds of official correspondence, responding to relevant person applications in accordance with the legislation, and carrying out the necessary transactions.
- Based on the legal reason that data processing is mandatory for the establishment, use and protection of a right (KVKK article 5/2/e): For the purposes of evaluating requests and complaints, storing personal data during the general statute of limitations in order to constitute evidence in possible disputes that may arise in the future. Your identity, payment information, contact and customer transaction information are processed.
- Based on the legal reason that data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person (KVKK article 5/2/f): Our relevant business units carry out the necessary work to carry out the commercial activities carried out by our Company, planning strategies and carrying out related business processes, ensuring the security of our website, carrying out strengthening works in terms of information security, carrying out personalized advertising activities in order to provide services to customers' tastes and preferences, management, planning and execution of corporate communication activities, sales and marketing of our products and services. To enable relevant people to benefit from the products and services offered by the Company through its activities and to carry out the necessary work; Carrying out customer acquisition activities. Providing information to third party natural or legal persons with whom a business relationship has been established within the scope of the commercial activities carried out by our company. Ensuring the legal, technical, commercial and occupational security of our company and the relevant persons who have a business relationship with our company. Your identity, contact, payment information, customer transaction and transaction security data for the purposes of determining and implementing our company's commercial and business strategies, resolving your requests, questions, suggestions and complaints and carrying out all necessary research and development, corrective and preventive activities to prevent recurrence, and receiving suggestions for expanding the scope of services provided. is processed.
- Based on the legal reason of explicit consent (KVKK article 5/1): Identity, communication, in order to carry out the marketing processes of our company's products and services, to recommend and promote the products and services offered, including profiling and analysis activities, by customizing them according to your tastes, usage habits and needs. , your payment information and marketing data are processed. In addition, your identity and contact data are processed in order to send advertisements, promotions, campaigns and similar commercial electronic messages to the contact information you share with our Company.
With Whom and For What Purposes Can We Share Your Personal Data?
Your collected personal data may be transferred to our business partners, suppliers, within the scope of our legitimate interest within the framework of the realization of the above-mentioned Purposes, and, if you give explicit consent, to Doğuş Information Technologies Inc. for the purpose of creating a common data pool created on behalf of Doğuş Group companies in order to provide personal advertising services. eat; Within the scope of the data processing conditions set out in Article 5 of the KVKK, within the scope of the data processing conditions set out in Article 5 of the KVKK, in accordance with the rules regarding the transfer of personal data specified in Article 8 of the KVKK, within the scope of being clearly stipulated in the law and fulfilling our legal obligations.
What are your rights regarding your personal data?
In accordance with Article 11 of the KVKK, (i) Learning whether your personal data has been processed, (ii) Requesting information if your personal data has been processed, (iii) Learning the purpose of processing your personal data and whether they are used in accordance with their purpose, (iv) Domestic or international Knowing the third parties to whom your personal data has been transferred, (v) Requesting correction of your personal data if it has been processed incompletely or incorrectly and requesting that the action taken in this context be notified to the third parties to whom the personal data has been transferred, (vi) Although it has been processed in accordance with the provisions of KVKK and other relevant laws, Requesting the deletion or destruction of your personal data in case the reasons requiring processing are eliminated and requesting that the transaction carried out in this context be notified to third parties to whom your personal data has been transferred, (vii) Objecting to the emergence of a result against the person by analyzing your processed data exclusively through automatic systems, (viii) ) If your personal data is damaged due to unlawful processing, you have the right to request compensation for the damage.
You can communicate your requests regarding your rights above via info@thegalliard.com, fill out the Relevant Person Application Form at www.thegalliard.com and send it to Cendere Cad. Ayazağa Mah. You can send it to our Company at No:109C Sarıyer/İstanbul. After reaching our company, your request will be finalized free of charge as soon as possible and within 30 days at the latest, depending on the nature of your request. However, if the transaction requires an additional cost, the Company will charge the fee at the tariff determined by the Personal Data Protection Board.
