Protection of Personal Data and Privacy Policy
Website Confidentiality Agreement
How to use and protect the information we obtain about you and the services you request while you visit this website and benefit from the services we provide through this site are subject to the conditions set forth in this "Privacy Policy". By visiting this website and requesting to benefit from the services we offer through this website, you accept the terms set forth in this "Privacy Policy".
I. Purpose of personal data protection and processing policy
As SEJA GROUP TURIZM SANAYI VE TICARET LIMITED SIRKETI (Brand name: AYT Transfers), the data received from our customers or prospective customers have been kept confidential and never shared with third parties due to the sensitivity of the work we have been dealing with. Protection of personal data is the basic policy of our company. Even before there was any legal regulation, our companies and affiliates attached great importance to the privacy of personal data and adopted this as a working principle and gave their employees working instructions in line with this principle. As "AYT Transfers", we undertake to comply with all responsibilities brought by the Law on the Protection of Personal Data. The principles of our companies regarding the protection of personal data also cover our subsidiaries.
II. Scope and modification of the personal data protection and processing policy
This Policy, prepared by our company, has been prepared in accordance with the Law on the Protection of Personal Data No. 6698 (“PDPL”) and GDPR. The data obtained from you with your consent or in accordance with other laws listed in the Law will be used to improve the quality of the services we provide, to improve the services offered to you and our quality policy. Again, some of the data we have is depersonalized and anonymized. These data are data used for statistical purposes and are not subject to Law enforcement and our Policy. ”AYT Transfers Personal Data Protection and Processing Policy” aims to protect the automatically obtained data of our customers, prospective customers, employees, customers and employees of companies working in solution partnership with us, or other persons, and includes regulations regarding these. Our company has the right to change our policy and our Regulations, provided that they comply with the law and that personal data is better protected.
III. Basic rules regarding the processing of personal data
a) Compliance with the law and the rules of honesty: “AYT Transfers” questions the source of the data it collects or receives from other companies and attaches importance to obtaining them in accordance with the law and within the framework of honesty rules.
b) Being accurate and up-to-date when necessary: “AYT Transfers” attaches importance to the fact that all data within the institution are correct, not contain false information, and finally, if there is a change in personal data, they are updated if they are communicated to it.
c) Processing for specific, clear and legitimate purposes: “AYT Transfers” processes data only for the purposes it offers and for which it receives approval from individuals during the service.
d) Being connected, limited and measured for the purpose for which they are processed: “AYT Transfers” only uses the data for the purpose for which they are processed and to the extent required by the service.
e) Retention for the period stipulated in the relevant legislation or required for the purpose for which they are processed: “AYT Transfers” preserves the contractual data within its body as long as the conflict periods of the Law and the requirements of commercial and tax law. However, when these purposes disappear, it deletes or anonymizes the data.
It should be emphasized that, whether "AYT Transfers" has collected or processed the data with consent or in accordance with the law, these principles listed above still apply.
Maximum Savings Policy/Stinginess Policy
According to this policy, which is called the principle of maximum savings or the principle of stinginess, the data reaching "AYT Transfers" is processed into the system only as necessary. Therefore, which data we collect is determined by the purpose. Unnecessary data is not collected. Redundant information is not recorded in the system, deleted or anonymized. These data can be used for statistical purposes. Health data, which is one of the special quality data, is taken only in order to provide better service to customers and protect their health and is kept in the system with care.
Deletion of personal data
Personal data is deleted, destroyed or anonymized by our company, automatically or upon the request of the person concerned, when the periods required to be kept by law, the completion of the judicial processes or other requirements are eliminated.
Accuracy and data timeliness
As a rule, the data within the body of "AYT Transfers" are processed as declared by the relevant persons. "AYT Transfers" is not obliged to investigate the accuracy of the data declared by customers or people who contacted "AYT Transfers", and this is not done legally and due to our working principles. The declared data is considered correct. The principle of accuracy and timeliness of personal data has also been adopted by "AYT Transfers". It updates the personal data that our company has processed from the official documents it receives or upon the request of the person concerned. It takes the necessary measures for this.
Privacy and data security
Personal data is confidential and “AYT Transfers” also abides by this confidentiality. Only authorized persons can access personal data within the company. All necessary technical and administrative measures are taken to protect the personal data collected by "AYT Transfers", to prevent it from falling into the hands of unauthorized persons and to prevent our customers and prospective customers from becoming victims. In this framework, it is ensured that the software complies with the standards, that the third parties are carefully selected and that the data protection policy is complied with within the company.
IV. Data processing purposes
The collection and processing of personal data by "AYT Transfers" will be carried out in line with the purposes specified in the clarification text. Data is collected and processed for the purpose of establishing the contract and providing better service to customers.
V. Customer, prospective customer and business and solution partners data
As "AYT Transfers", we process your personal data as a data controller within the scope of the Law on Protection of Personal Data No. 6698 and other relevant legislation. The categories and explanations of personal data to be processed in this context are as follows:
- Identity Information: Name-surname, name-surname of accompanying guest/guests, nationality, place and date of birth; TR ID, driver's license and passport numbers (including the date and place of issue).
- Contact Information: Address, phone number, e-mail address.
- Financial Information: Mobile billing information, bank account information, payment card number and other payment information, Loyalty Program memberships, information about purchased products or services.
Collection and processing of data for contractual relationship
If a contractual relationship is established with our customers and prospective customers, the collected personal data can be used without the customer's consent. However, this use takes place in line with the purpose of the contract. The data is used to the extent of better execution of the contract and the requirements of the service and updated when necessary by contacting the customers. On the other hand, the data left to us by our prospective customers (prospective customers) are processed in order to provide them with an easier and higher quality service afterwards. If this data has not turned into a contractual relationship upon request, it will be deleted.
Business and Business Partners Data
“AYT Transfers” adopts the principle of acting in accordance with the law when sharing data with both business and solution partners. Data is shared with business and solution partners with the commitment of data confidentiality and only as much as the service requires, and these parties are compelled to take measures to ensure data security.
E-invoice & E-Archive Invoice
Within the scope of this program; The customer is automatically registered in the system and an invoice is sent via e-mail to the facility. It is the customer's responsibility to ensure that the e-mail address given at the entrance to the facility or updated by applying afterwards is correct and is the preferred e-mail address for this communication. If a reservation is made for another family member or persons using this e-mail address, the e-invoice of the relevant invoice will be sent to the e-mail owner's address.
Advertising data processing
About Regulation of E-Commerce. In accordance with the regulation, e-mails for advertising purposes can only be sent to people with prior approval. The explicit consent of the person to whom the advertisement is sent is required. Again, "AYT Transfers" complies with the details of the "approval" determined in accordance with the same legislation. The approval to be obtained should cover all commercial electronic messages sent to the electronic communication addresses of the recipients.
Data transactions made due to the legal obligation of the company
Personal data may be processed without obtaining separate approval for the purpose of expressly stating the processing in the relevant legislation or fulfilling a legal obligation determined by the legislation.
Processing of special data
According to the Law, data related to the race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, disguise and dress, membership to associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data is personal data of special nature. “AYT Transfers” also takes adequate measures determined by the Board in the processing of special quality personal data.
Data processed by automated systems
"AYT Transfers" acts in accordance with the Law regarding the data processed through automatic systems. The information obtained from these data cannot be used against the person without the explicit consent of the people.
User information and internet
In case of collection, processing and use of personal data on the websites and other systems or applications of "AYT Transfers", the relevant persons are informed about the privacy statement and, if necessary, about the cookies. Our website uses the following cookies:
- Google (Analytics, DoubleClick): measurement, advertising, and site performance.
- Facebook: targeted marketing and social media analytics.
- Insider & Hotjar: behavioral recording and user experience optimizations.
VI. Data of our employees
Personal data of our employees can be processed without consent to the extent necessary in terms of business relations and health insurance. However, "AYT Transfers" ensures the confidentiality and protection of the data of its employees. Data is obtained from the Kariyer.net system for job applications and candidate recruitment, as well as for the management of human resources, and the data is recorded in the system.
VII. Transfer of personal data in and out of the country
“AYT Transfers” will be able to transfer personal data to the following individuals and institutions for certain purposes;
- Limited to the business partners of “AYT Transfers” in order to ensure the fulfillment of the purposes of the establishment of the business partnership,
- To the suppliers of “AYT Transfers”, limited to the purpose of providing our Company with the services that are outsourced by our company from the supplier and necessary to carry out the commercial activities of our Company,
- Solution partners of “AYT Transfers” limited to ensuring the execution of commercial activities of our company that require the participation of affiliates.
VIII. Rights of the person concerned
“AYT Transfers” accepts that the data subject has the right to obtain consent before the data is processed, and that it has the right to determine the fate of the data after the data is processed. Regarding personal data, by applying to our related person announced on our website by "AYT Transfers" under PDPL/GDPR regulations via info@ayttransfers.com.
IX. Privacy Policy
The data of employees or other persons in "AYT Transfers" is confidential. No one can use, copy, reproduce, transfer to others, use this data for any other purpose without compliance with the contract or the law.
X. Transaction security
All necessary technical and administrative measures are taken to protect the personal data collected by "AYT Transfers", to prevent it from falling into the hands of unauthorized persons and to prevent our customers and prospective customers from becoming victims. Safety measures are constantly being renewed and improved.
XI. Audit
“AYT Transfers” carries out the necessary internal and external audits on the protection of personal data.
XII. Notice of Violations
When "AYT Transfers" is notified of any violation of personal data, it immediately takes action to remedy the violation. It minimizes the harm of the person concerned and compensates the damage. When personal data is obtained by unauthorized persons, it immediately notifies the Personal Data Protection Board.
Contact Information under PDPL/GDPR
Pursuant to paragraph 1 of Article 13 of the PDPL, you must submit your application in writing to our management office at Güzelyurt Mah. Incikpınarı Cad. 16/B Aksu / Antalya, Turkey with physical signature and verification details.