Personal Data Protection and Privacy Policy

Home | KVKK | Personal Data Protection and Privacy Policy

Information Text Under the Personal Data Protection Law No. 6698

As Riva Hotel, we respect and value the privacy of personal life. Therefore, we would like to inform you about your rights regarding the use and protection of your personal data within the scope of the Personal Data Protection Law No. 6698 (referred to as "KVKK").

a) Data Controller

We inform you that, as a company, we process your personal data as a data controller in accordance with the Personal Data Protection Law No. 6698 (referred to as "KVKK") and other relevant legislation.

b) Categories of Processed Personal Data

In accordance with KVKK and other relevant legislation, your personal data in the categories of identity, contact, financial information, transaction security information, marketing information, audio recordings (including call center voice recordings), physical space security (including security camera recordings), accommodation information, vehicle license plate information, and information related to weapons will be processed for the purposes and legal reasons specified in this Clarification Text under the Personal Data Protection Law No. 6698.

c) Purpose of Processing Personal Data

Your personal data will be processed for the following purposes:

●   Provision of hotel services and the execution of processes related to reservation, accommodation registration, and accommodation services, as well as the provision of SPA services if requested,

●   Registration in online software systems used by the Company to implement its sales and marketing policies,

●   Performing necessary work by our business units to allow you to benefit from the services offered by the Company,

●   Measuring and increasing customer satisfaction,

●   Collecting and evaluating complaints and suggestions regarding the Company's services,

●   Suggesting services provided by the Company; planning and/or executing market research activities for the sale and marketing of services,

●   Ensuring the legal, technical, and commercial job security of relevant persons in a business relationship,

●   Controlling entries and exits to the Company and ensuring the physical security of common areas,

●   Conducting information security processes,

●   Ensuring the security of data controller operations,

●   Ensuring that activities are carried out in compliance with legislation,

●   Following and executing legal affairs,

●   Conducting finance and/or accounting affairs,

Your personal data will be processed based on the legal reasons specified in Article 5 (2) of the KVKK, including:

●   "a) Explicitly stipulated in the laws,"

●   "b) Necessity for the protection of life or physical integrity of the person or another person who is unable to express consent due to actual impossibility or whose consent is not legally valid,"

●   "c) Necessity for the processing of personal data belonging to the parties of a contract, provided that it is directly related to the establishment or performance of the contract,"

●   "ç) Necessity for compliance with a legal obligation to which the data controller is subject,"

●   "e) Necessity for the establishment, exercise, or protection of a right,"

●   "f) Necessity for the processing of data for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject."

Your personal data may also be processed with your explicit consent for the purposes of sending commercial electronic communications about advertisements, campaigns, updates, and promotions related to Company services, based on the legal grounds stated in KVKK and the Law on Electronic Commerce.

d) To Whom and For What Purpose Personal Data May Be Transferred

Your personal data will be transferred without seeking the explicit consent of the data subject in accordance with Article 8 (2) (a) of the KVKK for the following purposes:

●   To fulfill our legal obligations arising from relevant legislation, your data may be shared with the General Directorate of Security.

●   In the context of fee collection for services, your data may be shared with notaries, enforcement offices, and/or courts if necessary.

●   To fulfill legal obligations, your data may be shared with relevant public institutions and organizations if required or requested.

●   In emergency situations related to your health, necessary information may be shared with the relevant firm and/or organization for guidance and assistance.

●   Your data may be shared with contracted firms for the provision of maintenance-support services for our systems.

●   To follow legal processes, your data may be shared with our lawyers within the framework of confidentiality obligations, to the extent necessary.

e) Method and Legal Reason for Collecting Personal Data

Your personal data are collected through automatic or non-automatic methods, verbally, in writing, or electronically, for the purposes specified in clause (c) of this text, based on the legal reasons specified in Article 5 (2) of the KVKK:

●   By filling out forms, sending emails, contacting by phone, visiting the website, and contacting through social media platforms.

●   Through online sales platforms, tourism agencies, event organizations, fairs, or seminar visits, and sharing business cards.

●   By obtaining security camera recordings in the entrances, exits, and common areas within the Company.

f) Your Rights Under Article 11 of KVKK

As a data subject, you have the following rights under Article 11 of KVKK. You may submit your requests regarding these rights by filling out all the information specified in the Data Subject Application Form and submitting it to our Company in accordance with Article 11 and the first paragraph of Article 13 of KVKK and the Communiqué on the Procedures and Principles of Application to the Data Controller:

●   By personally coming to our Company at "Kocatepe Mahallesi Aydede Caddesi No:8 Talimhane-Taksim / İstanbul,"

●   By written notification via notary or registered mail with return receipt requested to verify your identity and prevent incorrect information from being provided to unauthorized individuals,

●   By sending an email using a secure electronic signature, mobile signature, or (if previously notified to our Company and registered in our systems) using your electronic email address to riva@rivahotel.com.tr, or by other methods that may be determined by the Board in the future.

g) Duration of Personal Data Retention

The Company deletes, destroys, or anonymizes personal data upon the expiration of the mandatory retention periods determined by laws and relevant legislation, or when the purpose for processing the data ceases to exist.

h) Changes and Updates

This Clarification Text has been prepared in accordance with the Personal Data Protection Law No. 6698 and other relevant legislation. Necessary changes may be made to this Clarification Text in line with changes in the relevant legal regulations and/or the Company's personal data processing purposes and policies.