Legal

Personal Data Protection Notice (KVKK)

Information notice under the Turkish Personal Data Protection Law No. 6698

As data controller, [Company name] (Ramada by Wyndham Erzincan Ergan) processes your personal data within the scope described below and in accordance with the legislation. This notice is prepared to fulfil our obligation to inform under Article 10 of the KVKK.

1. Data Controller

Title: [Company name] — Ramada by Wyndham Erzincan Ergan
Address: Yaylabaşı Beldesi, Ergan Dağı Kayak Merkezi, 24002 Merkez / Erzincan, Türkiye
E-mail: info@ramadaergan.com · Telephone: 444 1 344
Registered e-mail (KEP): [KEP address] · MERSİS no: [MERSİS number]

2. Personal Data Processed

Identity data: name, surname, national ID number, passport number, date of birth, nationality, gender
Contact data: telephone number, e-mail address, address
Customer transaction data: reservation details, stay history, invoicing details, special requests, loyalty programme details
Financial data: payment method, invoice and collection records (card details are processed by payment institutions)
Transaction security data: IP address, cookie records, device and browser information, site usage logs
Physical security data: security camera recordings in common areas
Audio and visual records: call-centre recordings (with notification), photographs taken at events with explicit consent
Health data (only with the guest's own declaration and explicit consent): special needs related to the stay such as allergies or disability

3. Purposes of Processing

Managing reservation processes and providing the accommodation service
Fulfilling legal obligations under the Identity Notification Law No. 1774 and the Tourism Incentive Law No. 2634
Invoicing, collection and accounting records; obligations under the Tax Procedure Law No. 213 and the Turkish Commercial Code No. 6102
Guest satisfaction processes, request and complaint management
Ensuring the safety of the property, guests and employees
Marketing, campaign and event communication, subject to your explicit consent
Following legal proceedings and providing information to competent authorities

4. Legal Grounds

Your personal data is processed on the following legal grounds set out in Articles 5 and 6 of the KVKK:

Being expressly provided for by law (identity notification, tax and commercial legislation)
Being directly related to the conclusion or performance of a contract (reservation and accommodation service)
Being necessary for the data controller to fulfil its legal obligations
Being necessary for the establishment, exercise or protection of a right
Our legitimate interests, provided that your fundamental rights and freedoms are not harmed (property security, service quality improvement)
Your explicit consent (marketing communication, special categories of data, event photographs)

5. Method of Collection

Your personal data is collected by automatic or non-automatic means through website forms, the online booking engine, agency and platform integrations, telephone, e-mail, WhatsApp, reception registration forms, security cameras and cookies.

6. Transfer

In accordance with Articles 8 and 9 of the KVKK and limited to the purposes, your personal data may be transferred to the following recipient groups:

Authorised public institutions (police/gendarmerie identity notification system, tax offices, courts)
Wyndham Hotels & Resorts and its affiliates (within the scope of the reservation system and the Wyndham Rewards loyalty programme; transfers abroad are made with your explicit consent or under the conditions of Article 9 of the KVKK)
Banks, payment and electronic money institutions
Reservation intermediary platforms and travel agencies (limited to the channel through which the reservation was made)
IT, hosting, e-mail and SMS infrastructure providers, and legal and financial advisers

7. Retention Period

Your personal data is retained for the period required by the purpose of processing and the limitation and retention periods stipulated by the relevant legislation. Records relating to commercial books and documents are kept for 10 years, identity notification records for the period specified in the relevant legislation, and security camera recordings for a maximum of [30] days. At the end of the period, data is deleted, destroyed or anonymised.

8. Your Rights as a Data Subject

Under Article 11 of the KVKK you have the following rights:

To learn whether your personal data is processed and, if so, to request information
To learn the purpose of processing and whether it is used in accordance with that purpose
To know the third parties to whom it is transferred domestically or abroad
To request rectification if it is incomplete or inaccurate
To request erasure or destruction under the conditions of Article 7 of the KVKK
To request that rectification, erasure and destruction be notified to the third parties to whom the data was transferred
To object to a result arising against you from analysis exclusively by automated systems
To claim compensation for damage suffered due to unlawful processing

9. How to Apply

You may submit requests regarding your rights, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, together with documents proving your identity, in writing to Yaylabaşı Beldesi, Ergan Dağı Kayak Merkezi, 24002 Merkez / Erzincan, Türkiye, to the registered e-mail address [KEP address], or to info@ramadaergan.com from the e-mail address registered in our system. Your application is concluded free of charge within 30 days at the latest; if the process requires an additional cost, the tariff set by the Personal Data Protection Board may apply.

This notice may be updated in line with legislative changes. Last updated: [Date].