Data controller
The KVKK Policy, which has been prepared and implemented on this website of the company or companies titled SAN BİLGİSAYAR TİCARET TURİZM İTHALAT VE İHRACAT AŞ (- hereinafter and will be referred to as SAN BİLGİSAYAR in other KVKK texts) and the Personal Data Protection Law No.6698 ), You can reach the details of the explanations in this clarification text prepared in accordance with the Data Controller KVKK Policy and the documents in its annexes. According to this;
Your Processed Personal Data
- Identity and Family Information [Name-surname, TCK No, Passport Number, place of birth – date, marital status, gender, child name, number, age and date of birth, signature, voucher (travel card) information and registration card (accommodation card information ), room type and number, flight number, hotel accommodated, accommodation dates and amount]
- Contact Information [address, phone number, e-mail address]
- Customer Transaction Information [(Vehicle license plate, survey form, records for product and service delivery, requests, instructions, photos, wedding, special birthdays anniversary, invoice information, order information, request information)
- Physical Space Security Information [Entry-exit registration information of customers and visitors, camera records,]
- Transaction Security Information [IP address, hotspot records, password and password information, website login and exit information, log and digital traffic records]
- Finance Information [Credit card number, cvc code, expiry date]
- Visual and Audio Records and Information [Visual and audio records and information]
- Health Information [Information on disability status, chronic diseases, past diseases, asthma, diabetes, heart, blood pressure diseases, personal health information,]
Collection Method of Your Personal Data and Legal Reasons
According to this clarification text, your personal data are transmitted by or by third parties that we have an agreement with as a requirement of operating with the solution partners in the contractual relationship with automatic or non-automatic methods provided that they are part of the data recording system. information is obtained verbally, in writing or electronically through documents and similar means.
These data can be processed directly due to your explicit consent within the framework of Article 5 of KVK Law No.6698, and in cases where your express consent is not required, in the presence of the following conditions. According to this;
- It is clearly stipulated in the laws.
- It is compulsory for the protection of the life or physical integrity of the person who is unable to disclose his consent due to actual impossibility or whose consent is not legally valid.
- Provided that it is directly related to the establishment or performance of a contract, it is necessary to process personal data belonging to the parties to the contract.
- It is mandatory for the data controller to fulfill his legal obligation.
- It is made public by the person concerned.
- Data processing is mandatory for the establishment, use or protection of a right.
- It is mandatory to process data for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed.
Within the scope of Article 6 of KVKK numbered 6698, your private personal data other than health and sexual life can be processed based on your explicit consent or in accordance with the provisions of the same article in the cases stipulated by the law. In the absence of your explicit consent, your personal data relating to health and sexual life may only be collected by persons or authorized institutions and organizations under the obligation of confidentiality for the purpose of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and managing health services and financing can be processed.
Purpose of Processing Your Personal Data
Your personal data, in accordance with Articles 4, 5 and 6 of KVK Law No.6698, comply with the law and honesty rules, be accurate and up-to-date when necessary, be processed for specific, clear and legitimate purposes, connected, limited and proportionate to the purpose of processing They are processed within the following purposes, taking into account the principles of retention for the period stipulated in the relevant legislation or for the purpose for which they are processed.
- Execution of Emergency Management Processes
- Execution of Information Security Processes
- Conducting Activities in Compliance with the Legislation
- Execution of Finance and Accounting Affairs
- Execution of Loyalty Processes to Company / Products / Services
- Ensuring Physical Space Security
- Following and Execution of Legal Affairs
- Conducting Communication Activities
- Execution of Goods / Service Sales Processes
- Execution of Goods / Service Production and Operation Processes
- Execution of Customer Relationship Management Processes
- Conducting Activities for Customer, Guest Satisfaction, Service Quality
- Organization and Event Management
- Execution of Advertising / Campaign / Promotion Processes
- Execution of Custody and Archive Activities
- Execution of Contract Processes
- Tracking of Requests / Complaints
- Ensuring the Security of Data Supervisor Operations
- Execution of Investment Processes
- Informing Authorized Persons, Institutions and Organizations
- Conducting Management Activities
- Creating and Tracking Visitor Records
Your personal data are not processed except for the purposes shown above. All kinds of technical and administrative measures are taken by the enterprise to prevent unlawful processing or illegal access of personal data.
Transfer of Your Personal Data
Your personal data can be transferred domestically or abroad in accordance with Articles 8 and 9 of KVK Law No.6698, if the following conditions are met.
Personal data collected due to the existence of the conditions in Article 5 of KVK Law No.6698 or in line with your express consent, in accordance with the above-mentioned purposes and in accordance with the provisions of Articles 8 and 9 of the Law, in accordance with the provisions of Articles 8 and 9 of the Law, shareholders, suppliers It can be transferred to third parties from whom service is provided or provided to persons and institutions with whom they interact.
Provided that adequate precautions are taken, your personal data related to health can only be kept open by persons or authorized institutions and organizations under the obligation of confidentiality for the purpose of protecting public health, conducting preventive medicine, medical diagnosis, treatment and care services, planning and managing health services and financing. can be transferred without seeking consent.
It is necessary for the protection of the life or physical integrity of the person or someone else who is unable to disclose his consent due to actual impossibility or whose consent is not legally valid, is necessary to process personal data belonging to the parties of the contract, provided that it is directly related to the establishment or execution of a contract. data processing is mandatory for the data controller to fulfill his legal obligation, data is publicized, data processing is mandatory for the establishment, use or protection of a right, data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm your fundamental rights and freedoms, and also the public Persons or authorized institutions under the obligation of secrecy for the purpose of protecting their health, conducting preventive medicine, medical diagnosis, treatment and care services, planning and managing health services and financing Your personal data, provided that the fulfillment by uruluş there is adequate protection abroad, in case of the absence of adequate protection of an adequate protection of responsible data in Turkey and in the foreign countries to commit themselves in writing and your explicit consent, subject to the REIT Board’s permission to be transferred without seeking abroad.
The KVK Board determines whether there is sufficient protection in the foreign country and whether the transfer abroad will be allowed; international conventions that Turkey is a party, personal data demand that countries with reciprocity condition for transferring data between Turkey, with respect to any tangible personal data transfer, processing and the nature of the personal data, the purpose and duration of the legislation and practice on the issue of the country’s personal data will be transferred personal It makes a decision by evaluating the measures undertaken by the data controller in the country where the data will be transferred and, if necessary, by taking the opinion of the relevant institutions and organizations. Your personal data, without prejudice to the provisions of international conventions, Turkey or in a serious state of your interests will be damaged, but considering the views of relevant public institutions or organizations may be transferred abroad with the permission of the Board.
In this context, your personal data;
- To Authorized Public Institutions and Organizations
- Company partners and officials,
- To business and solution partners,
- Supplier persons and companies,
- To the real or legal persons with whom we interact, for the following purposes, namely;
- Execution of Emergency Management Processes
- Execution of Information Security Processes
- Conducting Activities in Compliance with the Legislation
- Execution of Finance and Accounting Affairs
- Execution of Loyalty Processes to Company / Products / Services
- Ensuring Physical Space Security
- Following and Execution of Legal Affairs
- Conducting Communication Activities
- Execution of Goods / Service Sales Processes
- Execution of Goods / Service Production and Operation Processes
- Execution of Customer Relationship Management Processes
- Conducting Activities for Customer, Guest Satisfaction, Service Quality
- Organization and Event Management
- Execution of Advertising / Campaign / Promotion Processes
- Execution of Custody and Archive Activities
- Execution of Contract Processes
- Tracking of Requests / Complaints
- Ensuring the Security of Data Supervisor Operations
- Execution of Investment Processes
- Informing Authorized Persons, Institutions and Organizations
- Conducting Management Activities
- Creating and Tracking Visitor Records and can be transferred for execution.
Your Rights as Personal Data Owner
Within the scope of the law, the data owner, namely the relevant person
- Learning whether personal data is processed,
- Requesting information if personal data has been processed,
- Learning the purpose of processing personal data and whether they are used appropriately for their purpose,
- To know the third parties to whom personal data are transferred domestically or abroad,
- To request correction of personal data in case of incomplete or incorrect processing,
- To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of KVKK,
- To request notification of the personal data that are processed incorrectly and requested to be corrected and the personal data requested to be destroyed, to the third parties to which it is transferred,
- Object to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems,
- In case of damage due to unlawful processing of personal data, to demand the compensation of the damage, has the rights.
In order to be able to use the complaint rights you have as a personal data owner, you must first apply to the personal data controller by using the following communication channels. No complaint can be made to the KVK Board without exhausting this road.
Your request is answered by our company as the data controller as soon as possible and within 30 days at the latest, depending on the nature of the request.
If your application is rejected or the response is insufficient or your application is not responded in time, you can use the right to complain to the KVK Board or apply directly to the judicial remedy.
Application Address and contact information:
SAN BİLGİSAYAR TİCARET TURİZM İTHALAT VE İHRACAT A.Ş.
PINARBAŞI MH. HÜRRİYET CAD. ANTALYA TEKNOKENT R&D 5 3F / 2 KONYAALTI – ANTALYA
PHONE 0850 777 00 00
EMAIL: info@santsg.com
Storage Period of Your Personal Data
Your personal data that needs to be processed with the above-mentioned methods and in line with the specified purposes are stored for the period specified in the data inventory, taking into account the timeout and limitation periods specified in the law. In the event that the reasons requiring the processing of your data disappear or the periods required for the processing of your data in accordance with the legislation have expired, our Company will be deleted, destroyed or anonymized by using any of the destruction methods within six months at the latest or within thirty days upon your request.
The deletion of your personal data is the process of making it inaccessible and unusable for the relevant users in any way.
The destruction of your personal data is the process of making the personal data inaccessible, unrecoverable and reusable in any way.
Anonymization of your personal data is making the data unrelated to an identified or identifiable natural person, even by using appropriate techniques.
Transactions regarding the deletion, destruction and anonymization of your personal data are recorded. These minutes are kept for 5 years against public requirements.
We present your information with our respect.
Identity of the Data Supervisor
NAME / TITLE: SAN BİLGİSAYAR TİCARET TURİZM İTHALAT VE İHRACAT AŞ
ADDRESS: PINARBAŞI MH. HÜRRİYET CAD. ANTALYA TEKNOKENT R&D 5 3F / 2 KONYAALTI – ANTALYA
MERSİS NO: 0742042956600027
TAX OFFICE / NO: ANTALYA KURUMLAR VD. 7420429566