Voyag Turizm Otelcilik İşletmesi ve İnşaat Sanayi Ticaret Anonim Şirketi & MRA Turizm ve Otel İşletmeciliği Anonim Şirketi Call Center Privacy Notice

Within the scope of your conversation with our call center, we would like to inform you, in accordance with Law No. 6698 on the Protection of Personal Data (the “Law”), about the personal data that we, Voyag Turizm Otelcilik İşletmesi ve İnşaat Sanayi Ticaret Anonim Şirketi and MRA Turizm ve Otel İşletmeciliği Anonim Şirketi (the “Company”), will process in our capacity as “Data Controller.”

First of all, we would like to state that, as the Company, it is our principle not to collect any personal data beyond what is sufficient to evaluate your questions, requests, and complaints in our communication processes. For this reason, when you contact our call center, we kindly ask that you do not share your special categories of personal data — namely your health, sexual life, biometric and genetic data, information regarding your race, ethnic origin, political opinion, philosophical belief, religion, sect, or other beliefs, your dress and attire, your membership of associations, foundations, or trade unions, and your criminal convictions and security measures — unless you specifically deem it necessary.

What Are Our Methods of Collecting Your Personal Data, the Personal Data We Process, Our Purposes, and the Legal Grounds We Rely On?

Call Center Processes: Through the verbal transmission of your personal data during your call with our call center, the transmission of your questions, requests, and complaints by you via e-mail, or by obtaining such data from the existing records in the Company’s systems, we collect and process your Identity Information (name, surname, Turkish ID number, date of birth), Contact Information (mobile phone number, e-mail address), Customer Transaction Information (call center records, reservation number, reservation/accommodation information, question, request and complaint information, payment transaction number, number of instalments), and Other Information (flight and transfer information related to your accommodation), and, should you wish to make your payment through our call center, your Financial Information (credit card information), for the purposes of receiving, following up, and resolving the questions, requests, and complaints you submit to us, and, where requested, creating/cancelling your reservation, carrying out company, product, and service loyalty processes, receiving and evaluating suggestions for improving our business processes, carrying out the sale of goods or services, carrying out after-sales support services for goods and services, carrying out activities aimed at customer satisfaction, carrying out communication activities, carrying out and auditing business activities, carrying out business continuity activities, and carrying out customer relationship management processes, on the basis of the legal grounds that “it is necessary to process the personal data of the parties to a contract, provided that this is directly related to the establishment or performance of the contract,” and “it is mandatory for the data controller to process data for its legitimate interests, provided that this does not harm the fundamental rights and freedoms of the data subject.”

To Whom and for What Purpose May We Transfer Your Personal Data?

Suppliers and Business Partners: We transfer your Identity Information (name, surname, Turkish ID number, date of birth), Contact Information (mobile phone number, e-mail address), Customer Transaction Information (call center records, reservation number, reservation/accommodation information, question, request and complaint information, payment transaction number, number of instalments), and Other Information (flight and transfer information related to your accommodation), and, should you wish to make your payment through our call center, your Financial Information (credit card information), to third parties from whom we receive services, for the purposes of obtaining call center software, audit, and technical support services, obtaining transfer/transportation services related to accommodation, and obtaining cancellation guarantee/insurance services, on the basis of the legal ground that “it is mandatory for the data controller to process data for its legitimate interests, provided that this does not harm the fundamental rights and freedoms of the data subject.”

Authorized Institutions and Organizations: We transfer your Identity Information (name, surname, Turkish ID number, date of birth), Contact Information (mobile phone number, e-mail address), Customer Transaction Information (call center records, reservation number, reservation/accommodation information, question, request and complaint information, payment transaction number, number of instalments), and Other Information (flight and transfer information related to your accommodation), and, should you wish to make your payment through our call center, your Financial Information (credit card information), as well as any other personal data requested by authorized institutions and organizations, to authorized public institutions and organizations, consumer arbitration committees, courts, public prosecutors’ offices, law enforcement authorities, relevant ministries, and other judicial/administrative authorities, for the purposes of fulfilling our legal notification, declaration, and audit obligations and other related obligations, conducting judicial/official correspondence, pursuing legal disputes, and exercising our legal rights, in particular our rights to bring an action, respond, and defend, on the basis of the legal grounds that “it is mandatory for the data controller to fulfil its legal obligation,” and “it is mandatory for the data to be processed for the establishment, exercise, or protection of a right.”

Group Companies: We transfer your Identity Information (name, surname, Turkish ID number, date of birth), Contact Information (mobile phone number, e-mail address), Customer Transaction Information (call center records, reservation number, reservation/accommodation information, question, request and complaint information, payment transaction number, number of instalments), and Other Information (flight and transfer information related to your accommodation) (and, should you wish to make your payment through our call center) your Financial Information (credit card information), to our group companies for the purpose of using a shared information technology infrastructure and jointly carrying out maintenance, support, and quality control processes among the group companies, on the basis of the legal ground that “it is mandatory for the data controller to process data for its legitimate interests, provided that this does not harm the fundamental rights and freedoms of the data subject.”

Identity of the Data Controller

What Are Your Rights?

As a data subject, pursuant to Article 11 of the Law, you may submit your requests regarding your rights — which are explained in detail in the Personal Data Protection and Privacy Policy available on our website — in writing, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, to the address “Merdivenköy Mah. Nur Sok. C Blok No:1 İç Kapı No:26, Kadıköy/İstanbul,” or you may submit them to us via your registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the e-mail address you have previously notified to Maxx Royal Resorts and which is registered in our system, by sending them to the following address: [email protected].