Voyag Turizm Otelcilik İşletmesi ve İnşaat Sanayi Ticaret Anonim Şirketi
& MRA Turizm ve Otel İşletmeciliği Anonim Şirketi
Call Centre Privacy Notice
Within the scope of your communication with our call centre, we would like to inform you, in accordance with Law No. 6698 on the Protection of Personal Data (“the Law”), about the processing of your personal data by Voyag Turizm Otelcilik İşletmesi ve İnşaat Sanayi Ticaret Anonim Şirketi and MRA Turizm ve Otel İşletmeciliği Anonim Şirketi (“Company”) in their capacity as “Data Controllers”.
First and foremost, we would like to emphasise that, as the Company, our principle in all communication processes is to refrain from collecting any personal data beyond what is necessary for evaluating your questions, requests or complaints. Therefore, when contacting our call centre, we kindly ask that you do not share any special categories of personal data, unless strictly required. This includes information concerning your health, sexual life, biometric or genetic date; your race, ethnic origin, political opinions, philosophical beliefs, religion, sect or other beliefs; your appearance or clothing; your membership of associations, foundations or trade unions; and information regarding criminal convictions or security measures.
What are our methods for collecting and processing your personal data, which personal data do we process, for what purposes, and on what legal grounds?
Call Centre Processes:
Your personal data may be provided verbally during your conversation with our call centre, submitted via email when you communicate your questions, requests, or complaints, or obtained from the existing data in our systems. These may include your Identity Details (name, surname, Turkish ID number, date of birth), Contact Information (mobile phone number, email address), Customer Transaction Data (call centre records, reservation number, reservation/accommodation information, details of your query/request/complaint, payment transaction number, number of instalments), Finance Data (credit card information if you choose to make payment via the call centre), and Other Information (such as flight and transfer details related to your accommodation). We process and collect these categories of personal data for the purposes of receiving, tracking and resolving your questions, requests or complaints; creating or cancelling your reservation upon request; managing customer loyalty processes; collecting and evaluating suggestions to improve our business operations; conducting sales and after-sales support services for products or services; carrying out activities aimed at customer satisfaction and communication; ensuring business continuity; conducting and supervising business activities; and managing customer relations. This data is processed and collected based on the legal grounds of “processing of personal data belonging to the parties of a contract being necessary, provided that it is directly related to the establishment or performance of the contract” and “processing being necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.”
To whom and for what purposes may we transfer your personal data?
• Suppliers and Business Partners: Your personal data including Identity Details (name, surname, Turkish ID number, date of birth), Contact Information (mobile phone number, email address), Customer Transaction Data (call centre records, reservation number, reservation/accommodation details, query, request and complaint information, payment transaction number, number of instalments), Finance Data (credit card information, if you choose to make a payment via the call centre), and Other Information (flight and transfer details related to your accommodation) may be shared with third-party service providers from whom we receive services such as call centre software, audit and technical support, transfer/transportation services for accommodation, and cancellation assurance/insurance. Such transfers are made based on the legal ground of “necessity of data processing for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed.”
• Public Authorities and Institutions: Your personal data including Identity Details (name, surname, Turkish ID number, date of birth), Contact Information (mobile phone number, email address), Customer Transaction Data (call centre records, reservation number, reservation/accommodation details, query, request and complaint information, payment transaction number, number of instalments), Finance Data (credit card information, if you choose to make a payment via the call centre), and Other Information (flight and transfer details related to your accommodation), as well as any personal data specifically requested by public institutions and authorities, may be transferred to public authorities and institutions, consumer arbitration boards, courts, prosecutors' offices, law enforcement agencies, relevant ministries, and other judicial/administrative bodies. These transfers are carried out for the purposes of fulfilling our legal obligations related to official notifications, declarations and audits, conducting legal correspondences, handling legal disputes, and exercising our legal rights, particularly the rights of action, response and defence, based on the legal grounds of “necessity of processing for the data controller to fulfil its legal obligations” and “necessity of processing for the establishment, exercise or defence of a legal right.”
• Group Companies: Your personal data including Identity Details (name, surname, Turkish ID number, date of birth), Contact Information (mobile phone number, email address), Customer Transaction Data (call centre records, reservation number, reservation/accommodation details, query, request and complaint information, payment transaction number, number of instalments), Finance Data (credit card information, if you choose to make a payment via the call centre), and Other Information (flight and transfer details related to your accommodation) may be transferred to our group companies for the purpose of shared use of IT infrastructure and joint execution of maintenance, support and quality audit processes. These transfers are carried out on the legal ground of “necessity of data processing for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed.”
What are your rights?
In accordance with Article 11 of the Turkish Personal Data Protection Law (Law No. 6698), you may at any time contact our Company to exercise your rights regarding your personal data processed by us. These rights include:
a) To learn whether your personal data has been processed,
b) To request information if your personal data has been processed,
c) To learn the purpose of the processing of your personal data and whether it is being used in accordance with that purpose,
d) To learn which third parties in Türkiye or abroad your personal data has been transferred to,
e) To request the correction of your personal data if it has been processed incompletely or inaccurately,
f) To request the deletion or destruction of your personal data within the framework of the conditions set out in Article 7 of the Law,
g) To request that the actions carried out under clauses (d) and (e) of Article 11 be notified to third parties to whom your personal data has been transferred,
h) To object to any outcome to your detriment that arises from the analysis of your personal data exclusively through automated systems,
i) To request compensation for damages in case you suffer harm due to the unlawful processing of your personal data.
You may submit your requests using any of the methods listed below. Please note that your application must comply with the conditions set out in the Communiqué on the Principles and Procedures for the Request to Data Controllers.
Written Application
You may submit a written application to our Company at the address provided below by hand delivery, via notary, PTT (Turkish Post), our courier service. If you wish, you may access the KVKK Data Subject Application Form via our website.
Please make sure to include the following statement clearly on the envelope, at the top of the letter, or in the subject line of your email:
“To the Attention of the Legal Department of Voyag Turizm Otelcilik İşletmesi ve İnşaat Sanayi Ticaret Anonim Şirketi and MRA Turizm ve Otel İşletmeciliği A.Ş.
Data Subject Request within the Scope of the Personal Data Protection Law”
Please send your applications to the following address: “Merdivenköy Mah. Nur Sok. C Blok No:1 İç Kapı No:26. Kadıköy/İstanbul”
Application via E-mail / Registered E-mail (KEP)
You may send your application to the Company using your registered e-mail (KEP) address recorded in our systems, to one of the following e-mail addresses;
For Maxx Royal Resorts: [email protected]
For Voyage Hotels: [email protected]
If your e-mail address is not registered in the Company’s systems, you may still submit your application by e-mail, provided that it includes your mobile signature or secure electronic signature, by sending it to one of the following addresses.
For Maxx Royal Resorts: [email protected]
For Voyage Hotels: [email protected]
Alternatively, if using your KEP (Registered Electronic Mail) address, you may submit your application to one of the following KEP addresses.
For Maxx Royal Resorts: [email protected];
For Voyage Hotels: [email protected].
“To the Attention of the Legal Department of Voyag Turizm Otelcilik İşletmesi ve İnşaat Sanayi Ticaret Anonim Şirketi and MRA Turizm ve Otel İşletmeciliği A.Ş.
Data Subject Request within the Scope of the Personal Data Protection Law”