KVKK Explicit Consent Text & Privacy Policy

Website Privacy Agreement

The manner in which the information we obtain concerning you and the services you request during your visit to this website and your use of the services we provide through this site will be used and protected is subject to the conditions that this  “Privacy Policy” sets forth. By visiting this website and by requesting to benefit from the services we provide through this site, you accept the conditions that this  “Privacy Policy” sets forth.

I. Purpose of the Personal Data Protection and Processing Policy

To date, as Doğadayız we have kept confidential, as required by the sensitivity of the work we carry out, the data coming from our customers or from our prospective customers, and such data has never been shared with third parties. The protection of personal data is the fundamental policy of our company. Even before any legal regulation existed, our company and our affiliates attached great importance to the confidentiality of personal data, adopted this as a working principle and gave their employees working instructions in line with this principle. As Doğadayız we also undertake to comply with all the responsibilities introduced by the Personal Data Protection Law. Our company’s principles concerning the protection of personal data also cover our affiliates.

II. Scope and Amendment of the Personal Data Protection and Processing Policy

This Policy, prepared by our company, has been drawn up in accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”). The Law has, as of today, entered into force with all of its provisions. The data obtained from you with your consent or pursuant to the other grounds of lawfulness enumerated in the Law shall be used for the purpose of rendering the services we provide of higher quality and of improving the services offered to you and our quality policy. Furthermore, some of the data in our possession is stripped of its personal character and anonymised. This data is data used for statistical purposes and is not subject to the application of the Law or to our Policy. Doğadayız Personal Data Protection and Processing Policy aims to protect the automatically obtained data of our customers, our prospective customers, our employees, as well as of the customers and employees of the companies working with us in solution partnership or of other persons, and contains the regulations relating thereto.
Our company has the right to amend our Policy and our Regulation -provided that they comply with the Law and that personal data is better protected-.

III. Basic Rules Regarding the Processing of Personal Data

• a) Being in conformity with the law and the rules of good faith:
  Doğadayız questions the source of the data it collects or that reaches it from other companies, and attaches importance to such data being obtained lawfully and within the framework of the rules of good faith. Within this framework, it issues the necessary warnings and notifications to the third parties selling Doğadayız’s services (including agencies and other intermediary institutions) for the purpose of protecting personal data.
• b) Being accurate and, where necessary, up to date:
  Doğadayız attaches importance to ensuring that all data held within the organisation is accurate information, that it does not contain incorrect information and, finally, in the event that personal data changes, to updating it once such changes are communicated to it.
• c) Being processed for specified, explicit and legitimate purposes:
  Doğadayız processes data only in a manner limited to the purposes it offers and for which it has obtained the consent of the persons concerned during the service. It does not process, use or allow the use of data outside the business purpose.
• d) Being relevant, limited and proportionate to the purposes for which they are processed:
  Doğadayız uses the data only in a manner limited to the purposes for which they are processed and to the extent required by the service.
• e) Being retained for the period stipulated in the relevant legislation or necessary for the purpose for which they are processed:
  Doğadayız retains data arising from contracts within its organisation for as long as the periods within which disputes may arise under the Law and the requirements of commercial and tax law necessitate. However, when these purposes cease to exist, it deletes or anonymises the data.

We would emphasise that, whether Doğadayız has collected or processed the data on the basis of consent or in accordance with the law, these principles which we have listed above nevertheless apply.

Pursuant to Article 11 of the Personal Data Protection Law you have the rights listed below. In order to facilitate these rights of yours, a separate application form has also been prepared for you by Doğadayız. 

Persons whose personal data is processed may, by applying to the contact person announced by Doğadayız on our web page, in relation to their own data;

• • a) Learning whether or not your personal data is processed,
  • b) Requesting information in relation thereto if the personal data has been processed,
  • c) Learning the purpose of the processing of the personal data and whether they are used in accordance with their purpose,
  • ç) Knowing the third parties to whom the personal data is transferred domestically or abroad,
  • d) Requesting the rectification of the personal data in the event that they have been processed incompletely or inaccurately,
  • e) Requesting the erasure or destruction of the personal data within the framework of the conditions stipulated in the Law,
  • f) Requesting that the operations carried out pursuant to sub-paragraphs (d) and (e) be notified to the third parties to whom the personal data has been transferred,
  • g) Objecting to the occurrence of a result to the detriment of the person concerned by means of the analysis of the processed data exclusively through automated systems,
  • ğ) Requesting the compensation of the damage in the event of suffering damage due to the unlawful processing of the personal data,
    they have these rights.
    As Doğadayız, we respect these rights.

Principle of Maximum Economy/Principle of Frugality

According to this principle of ours, which is called the Principle of Maximum Economy or the Principle of Frugality, the data reaching Doğadayız is processed into the system only as far as is necessary. For this reason, which data we will collect is determined according to the purpose. Data that is not necessary is not collected. Other data that comes to our company is likewise transferred to the company’s information systems. Excess information is not recorded in the system; it is deleted or anonymised. This data may be used for statistical purposes. Among the special categories of data, health data is obtained solely for the purpose of providing better service to customers and of protecting their health, and is kept carefully in the system.

Deletion of Personal Data

When the periods for which retention is legally required expire, when judicial proceedings are completed or when other requirements cease to exist, these data shall be deleted, destroyed or anonymised by our company either of its own motion or upon the request of the person concerned.

Retention Periods of Personal Data

Your personal data are retained for as long as necessary for the purpose for which they are processed and for the periods prescribed by the applicable legislation. The main retention periods are as follows:

• Booking, sales and contract records, invoices and accounting documents: 10 years from the end of the relevant year, pursuant to the Turkish Tax Procedure Law and the Turkish Commercial Code.
• Membership (account) data: for as long as the membership continues; after the membership ends, 10 years, being the general limitation period for possible disputes.
• Accommodation and participant identity data: for the period required by the legislation on identity reporting; data forming part of a contract are kept together with the contract records for 10 years.
• Special categories of personal data such as health declarations: 2 years from the completion of the service.
• Consent records for commercial electronic messages (SMS/e-mail): for as long as the consent is valid; 3 years after the consent is withdrawn.
• Customer service, request and complaint correspondence: 10 years from the conclusion of the request.
• Job applications and CVs: 1 year from the date of application.
• Website access (log) records: 2 years, pursuant to Law No. 5651 and related legislation.
• Cookies: session cookies until the browser is closed; persistent cookies for a maximum of 1 year.

Unless otherwise stated, personal data for which no specific period is given above are retained by us for the limitation periods set out in the applicable legislation (a maximum of 10 years). Data whose retention period has expired are deleted, destroyed or anonymised in the periodic destruction process carried out at least every 6 months. You may request the deletion of your data that we are not legally required to retain at any time.

Accuracy and Currency of Data

The data held within Doğadayız is, as a rule, processed upon the declaration of the persons concerned and in the manner they have declared. Doğadayız is not obliged to investigate the accuracy of the data declared by customers or by the persons who come into contact with Doğadayız and, moreover, this is not done, both as a matter of law and by reason of our working principles. The declared data is deemed accurate. The principle of the accuracy and currency of personal data has also been adopted by Doğadayız. Our company updates the personal data it has processed on the basis of the official documents that reach it or upon the request of the person concerned. It takes the necessary measures for this purpose.

Confidentiality and Data Security

Personal data is confidential and Doğadayız also observes this confidentiality. Within the company, only authorised persons may access personal data. All the necessary technical and administrative measures are taken so that the personal data collected by Doğadayız is protected, does not fall into the hands of unauthorised persons and so that our customers and our prospective customers do not suffer harm. Within this framework, it is ensured that the software complies with the standards, that third parties are selected with care and that the data protection policy is also observed within the company.

IV. Purposes of Data Processing

Doğadayız’s collection and processing of personal data shall be carried out in line with the purposes set out in the privacy notice. The data is collected and processed for the purpose of establishing the contract and of providing better service to customers.

V. Data of Customers, Prospective Customers and Business and Solution Partners

Collection and processing of data for the contractual relationship
if a contractual relationship has been established with our customers and our prospective customers, the personal data that has been collected may be used without obtaining the consent of the customer. However, such use takes place in line with the purpose of the contract. The data is used to the extent of the better performance of the contract and of the requirements of the service, and where necessary it is updated by contacting the customers. On the other hand, the data which our prospective customers (potential customers) have themselves left with us is processed in order subsequently to provide them with easier and higher-quality service. Upon their request, this data is deleted if it has not turned into a contractual relationship.

Business and Solution Partner Data

Doğadayız makes it a principle to act in accordance with the law when sharing data with both its business partners and its solution partners. Data is shared with business and solution partners under an undertaking of data confidentiality and only to the extent required by the service, and these parties are without exception required to take the measures relating to the provision of data security.

Data Processing for Advertising Purposes

In accordance with the Law on the Regulation of Electronic Commerce and the Regulation on Commercial Communication and Commercial Electronic Messages, electronic messages for advertising purposes may only be sent to persons whose prior consent has been obtained. The clear existence of the consent of the person to whom the advertisement is to be sent is mandatory. Likewise, Doğadayız observes the details of the “consent” determined pursuant to the same legislation.

Data processing operations carried out by reason of the legal obligation of the company or of express provision in the law, and personal data, may be processed without obtaining separate consent, where the processing is expressly stipulated in the relevant legislation or for the purpose of fulfilling a legal obligation laid down by legislation. The type and scope of the data processing operations must be necessary for the legally permitted data processing activity and must comply with the relevant legal provisions.

Data Processing by the Company

Personal data may be processed in line with the service provided by the company and its legitimate purposes. However, the data may in no way be used for unlawful services.

Processing of Special Categories of Data

Under the Law, data relating to persons’ race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership of an association, foundation or trade union, health, sexual life, criminal conviction and security measures, as well as their biometric and genetic data, constitute special categories of personal data. Doğadayız furthermore takes, in the processing of special categories of personal data, the adequate measures determined by the Board. Doğadayız may process special categories of data, with the consent of the persons concerned and in order that the services may be provided better, only for the purpose for which they were collected.

Data Processed by Automated Systems

With regard to data processed through automated systems, Doğadayız acts in accordance with the Law. Without the explicit consent of the persons concerned, the information obtained from such data may not be used against them. However, Doğadayız may take decisions concerning the persons with whom it will transact by using the data in its own system.

Cookie Policy

Doğadayız, as is the case with many websites, uses cookies and similar technologies in order to improve the visiting experience of website users and to increase the quality of the service. The Doğadayız Cookie Policy has been prepared in order to inform website users about cookies and about the types of cookies used, and to provide guidance on how cookie preferences may be managed.

If you do not consent to the use of cookies, we kindly ask that you either do not continue on the website or change your cookie preferences in the manner shown in this policy. We would remind you that, if cookies are not permitted, some features of the website may lose their functionality.

What is a Cookie?

A cookie consists of small text files stored on your computer or on your mobile device when you visit a website. Data such as your IP address, your session information and the pages you access is stored in these files. Thanks to cookies, your website preferences can be remembered, your session can be kept open, or content of interest to you can be presented to you. For detailed information on cookies you may visit  www.aboutcookies.org and  www.allaboutcookies.org. 

Types of Cookies

Cookies are divided into different types according to criteria such as their storage periods on mobile devices and by whom they are placed. Within the scope of these criteria, the basic distinction is as follows:

• Session Cookies: Session cookies are temporary cookies and are deleted from the device after the browser is closed. The main function of these cookies is to ensure that the website works properly.
• Persistent Cookies: Persistent cookies continue to remain on the device after the browser is closed, until they are deleted by the user or until they expire.
• First Party Cookies: First party cookies are cookies placed on the device by the operator of the website that is visited.
• Third Party Cookies: Third party cookies are cookies placed on the device and controlled by persons other than the operator of the website that is visited.

Where personal data is collected, processed and used on the websites belonging to Doğadayız and on other systems or applications, the persons concerned are informed by means of a privacy notice and, where necessary, about cookies. Persons are informed about our practices on the web pages. Personal data shall be processed in accordance with the law.

When you visit our web page, we bring the following information to your attention regarding the cookies we use/will use on our page.

Cookies Used on the Doğadayız Website

Doğadayız uses different types of cookies in accordance with the Privacy Policy.

• Mandatory Cookies: These are technical cookies which ensure that the website works correctly and which enable you to use its features. They fall within the session cookie category. If these cookies are blocked, the result is that the features of the website cannot be used. Your consent is not required for the use of mandatory cookies.
• Analytical Cookies: Analytical cookies are used in order to improve your website experience. Analytical cookies enable us to understand how you use the website (e.g.; which pages are visited, the duration of the visit, etc.). In this way, we can develop the content we offer or change the design of the website.
• Functionality Cookies: They make it possible for your language preferences, your region selection and the like to be remembered when you visit the website again.
• Targeting/Advertising Cookies: Doğadayız uses different first party and third party cookies on the website for targeting and advertising purposes. It is possible for you to block these cookies by changing the settings of your browser or by changing your cookie preferences in the manner shown in this policy.

How Can You Change Your Cookie Preferences?

It is possible for you to personalise cookies or to block them entirely by changing the settings of the browser you use. You may access detailed information on the steps to be followed for different browsers from the links below:

In order to manage cookie preferences in other browsers, you may examine the help or support page of the relevant browser.

Your Rights Regarding Your Personal Data

By applying to Doğadayız as the data subject;

• To learn whether or not your personal data is processed,
• To request information in relation thereto if your personal data has been processed,
• To learn the purpose of the processing of your personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom your personal data is transferred domestically or abroad,
• To request the rectification of your personal data in the event that they have been processed incompletely or inaccurately, and to request that the operations carried out within this scope be notified to the third parties to whom your personal data has been transferred,
• To request the erasure or destruction of your personal data in the event that the reasons requiring their processing cease to exist, notwithstanding that they have been processed in accordance with Law No. 6698 and the provisions of the other relevant laws, and to request that the operations carried out within this scope be notified to the third parties to whom your personal data has been transferred,
• To object to the occurrence of a result to your detriment by means of the analysis of your processed data exclusively through automated systems,
• You have the rights to request the compensation of the damage in the event that you suffer damage due to the unlawful processing of your personal data.

In the event that you transmit to our company your requests regarding the rights listed above in accordance with the application procedures stipulated in the  Communiqué on the Procedures and Principles of Application to the Data Controller,  Doğadayız shall conclude your request, depending on its nature, as soon as possible and at the latest within 30 (thirty) days free of charge. However, in the event that the transaction additionally requires a cost, Doğadayız may charge the fee in the tariff determined by the Personal Data Protection Board.

Functional and Analytical

Cookies contain data on remembering your preferences, on the effective use of the website, on the optimisation of the site so as to respond to user requests and on how visitors use the site. By their nature, cookies of this type may contain your personal information such as your user name.

Third Party Cookies

Doğadayız tour websites/mobile applications/mobile websites work with third party, reliable and well-known advertising providers. Third party service providers place their own cookies in order to be able to present advertisements tailored to you. The cookies placed by third parties collect and process the browsing information of visitors on the websites and analyse how they use them.

Commercial Cookies

They serve to present products/content of a nature similar to those you target in line with your areas of interest and your choices, and to enhance your user experience by offering a more advanced, personalised advertising portfolio. The period for which the session, persistent, functional and analytical and commercial cookies expressed above are kept in the background is approximately 2 (two) months, and the necessary adjustments in this respect may be made by the individual from the internet browser settings. The removal from these settings may vary depending on the internet browser.

How Can I Delete Cookies?

Most internet browsers are set, from their initial installation on your computer, to accept and use cookies automatically. By using the help or settings menus of your internet browser, you can arrange for cookies to be blocked or for a warning to be given when a cookie is sent to your device. In order to learn the different ways of managing cookies and to obtain detailed information about how you can arrange the settings of the browser you use, you may make use of the instructions or help options screen of your browser.

VI. Data Belonging to Our Employees

Processing of Data for the Employment Relationship

The personal data of our employees may be processed without obtaining consent to the extent necessary in terms of the employment relationship and health insurance. However, Doğadayız ensures the confidentiality and protection of the data belonging to its employees.

Processing Pursuant to Legal Obligations

Doğadayız may process the personal data belonging to its employees without obtaining separate consent, where the processing is expressly stipulated in the relevant legislation or for the purpose of fulfilling a legal obligation laid down by legislation. This matter is limited to the obligations arising from the law.

Processing for the Benefit of Employees

Doğadayız may process personal data without obtaining consent for transactions that are for the benefit of the company employees, such as private health insurance. For disputes arising from employment relationships as well,  Doğadayız may process the data belonging to employees.

Processing of Special Categories of Data

Under the Law, data relating to persons’ race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership of an association, foundation or trade union, health, sexual life, criminal conviction and security measures, as well as their biometric and genetic data, constitute special categories of personal data. Doğadayız furthermore takes, in the processing of special categories of personal data, in addition to the consent of the person concerned, the adequate measures determined by the Board. Special categories of personal data may be processed without the consent of the person only in relation to, and limited to, the cases permitted by the Law. The special category data obtained from our employees so that they may benefit from insurance and health services is used solely by being dedicated to that purpose.

Data Processed by Automated Systems

The data processed by automated systems in relation to employees may be used in internal company promotions and in performance evaluations. Our employees have the right to object to a result that arises against them and they exercise this right by complying with the internal company procedures. The objections of the employees are likewise evaluated within the company.

Telecommunications and the Internet

The computers, telephones, e-mail and other applications allocated to employees within the company have been allocated to the employee solely for business purposes. The employee may not use any of these means allocated to him or her by the company for his or her private purposes and communications. The company may control and audit all the data on these devices. The employee undertakes that, from the moment he or she starts work, he or she will not keep on the computer, telephones or other devices allocated to him or her any data or information other than business-related data or information.

VII. Transfer of Personal Data Domestically and Abroad

Personal data may be shared by Doğadayız with its business and solution partners and with the affiliates of Doğadayız for the purpose of performing the service.

Doğadayız will be able to transfer personal data to the persons and institutions specified below for specific purposes;

• Limited to the purpose of ensuring the fulfilment of the purposes for which the business partnership was established, to Doğadayız’s business partners,
• Limited to the purpose of ensuring that the services which our Company procures from suppliers on an outsourced basis and which are necessary for our Company to carry out its commercial activities are provided to our Company, to  Doğadayız’s suppliers,
• Limited to ensuring the conduct of the commercial activities of our Company which also require the participation of the affiliates, to Doğadayız’s solution partners,
• Doğadayız’s affiliates.

Doğadayız has the authority to transfer personal data domestically and abroad, within the conditions determined by the Board in the law, in accordance with the other conditions in the law and subject to the consent of the person.

VIII. Rights of Individuals

Doğadayız accepts that, within the scope of the law, the person concerned has the right to have his or her consent obtained before the data is processed and that, after the data has been processed, he or she has the right to determine the fate of his or her data.

By applying to our contact numbers announced by Doğadayız on our web page, in relation to personal data;

• • a) Learning whether or not his or her personal data is processed,
  • b) Requesting information in relation thereto if the personal data has been processed,
  • c) Learning the purpose of the processing of the personal data and whether they are used in accordance with their purpose,
  • ç) Knowing the third parties to whom the personal data is transferred domestically or abroad,
  • d) Requesting the rectification of the personal data in the event that they have been processed incompletely or inaccurately,
  • e) Requesting the erasure or destruction of the personal data within the framework of the conditions stipulated in Article 7,
  • f) Requesting that the operations carried out pursuant to sub-paragraphs (d) and (e) be notified to the third parties to whom the personal data has been transferred,
  • g) Objecting to the occurrence of a result to the detriment of the person concerned by means of the analysis of the processed data exclusively through automated systems,
  • ğ) Requesting the compensation of the damage in the event of suffering damage due to the unlawful processing of the personal data, he or she has these rights.

On the other hand, persons have no right in relation to the data that has been anonymised within the company. Doğadayız may share personal data with the relevant institutions and organisations pursuant to the employment and contractual relationship, for the purpose of the exercise of a judicial duty or of the statutory powers of a state authority.

Personal data subjects will be able to transmit to the company their requests regarding the rights stated above by completing in full and signing with a wet signature the application form found at the official internet address of the Company, www.dogadayiz.net and by sending it  to the address Foça Mah. 983 (FCA) Sk. Hotel Seril No: 4, 48300 Fethiye/Muğla, by registered mail with return receipt and with photocopies of identity documents (with only the front side photocopy in the case of the identity card).  Your applications will be answered as soon as possible, depending on the content of your application, or at the latest within 30 days after they reach our company. You must make your applications by registered mail with return receipt. Furthermore, only the part of your applications relating to you will be answered, and an application made concerning your spouse, your relative or your friend will not be accepted. Doğadayız may request further relevant information and documents from applicants.

IX. Principle of Confidentiality

The data of employees and of other persons alike held at Doğadayız is confidential. No one may use, copy, reproduce or transfer to others this data for any other purpose whatsoever without a contract or compliance with the law, and may not use it outside business purposes.

X. Transaction Security

All the necessary technical and administrative measures are taken so that the personal data collected by Doğadayız is protected, does not fall into the hands of unauthorised persons and so that our customers and our prospective customers do not suffer harm. Within this framework, it is ensured that the software complies with the standards, that third parties are selected with care and that the data protection policy is also observed within the company. The measures relating to security are continuously renewed and developed.

XI. Audit

Doğadayız has the necessary internal and external audits carried out on the subject of the protection of personal data.

XII. Notification of Breaches

Doğadayız takes action immediately in order to remedy the breach in question when it is notified that there has been any breach relating to personal data. It minimises the damage of the person concerned and compensates the damage. When personal data is seized from outside by unauthorised persons, it immediately notifies the situation to the Personal Data Protection Board.

CONTACT

For your questions and requests regarding the privacy agreement, after printing out and completing the form below, you may send a registered letter with return receipt to the address given below.

Personal Data Protection Application Form

DOĞADAYIZ DOĞA SPORLARI TUR. SEY. TAŞ. TİC. ORG. LTD ŞTİ

Foça Mah. 983 (FCA) Sk. Hotel Seril No: 4, 48300 Fethiye/Muğla