KVKK privacy notice

General information

At Ulu Mühendislik İnşaat Turizm Enerji A.Ş. (Ulu Resort Hotel), respect for privacy, information security and ethical values – above all, the protection of fundamental rights and freedoms – is among our foremost principles. As the data controller under Turkish Personal Data Protection Law No. 6698 ("KVKK"), our company provides the following information on the processing and protection of your personal data and special categories of personal data, in order to fulfil its obligation to inform arising from Article 10 of the Law. In this notice, the term "personal data" is used to include special categories of personal data.

If you do not accept this policy, you should not provide us with your personal data; however, please be aware that in this case there may be disruptions to the services we provide to you.

You are responsible for the accuracy and currency of the personal data you provide to us. If you share the personal data of other persons with us, you are deemed to have obtained all necessary permissions from those persons, and our company cannot be held liable in this regard.

Data controller

In this notice, the terms "we", "the Company" or "Ulu Resort Hotel" refer to the personal data processing activities carried out, as data controller, by Ulu Resort Hotel, which operates under the legal entity Ulu Mühendislik İnşaat Turizm Enerji A.Ş. and is located on Yanışlı Bay in the Gülnar-Ortaburun Tourism Centre, Mersin.

Our principles for processing personal data

All personal data processed by our company is processed in accordance with the procedures and principles set out in the Law and other legislation. Pursuant to Article 4 of the KVKK, the fundamental principles we observe when processing your personal data are as follows:

• Being lawful and fair;
• Being accurate and, where necessary, kept up to date;
• Being processed for specified, explicit and legitimate purposes;
• Being relevant, limited and proportionate to the purposes for which they are processed;
• Being retained only for the period stipulated in the relevant legislation or required for the purpose for which they are processed.

Categories of data subjects

Our company applies a separate policy on the processing of the personal data of its employees (including interns and subcontractor employees). Customers, potential customers, visitors, job applicants and interns, as well as employees, shareholders and officers of institutions we cooperate with, may also submit their requests under the KVKK to our company.

Purposes of processing and transferring personal data

Our company processes personal data solely for the purposes and under the conditions set out in the personal data processing conditions specified in Article 5(2) and Article 6(3) of the KVKK. Personal data may be processed where at least one of the following conditions is met:

• The explicit consent of the data subject has been obtained;
• It is expressly provided for by law;
• It is necessary to protect the life or physical integrity of the data subject or of another person, where the data subject is unable to give consent due to actual impossibility or whose consent is not legally valid;
• Processing the personal data of the parties to a contract is necessary, provided that it is directly related to the conclusion or performance of that contract;
• It is necessary for the data controller to fulfil its legal obligations;
• The data has been made public by the data subject;
• Data processing is necessary for the establishment, exercise or protection of a right;
• Data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Parties with whom we share your personal data

We may share your personal data with the following persons and organisations:

• Public institutions and organisations, banks, insurance companies, auditors, lawyers, accountants and other external professional advisers;
• The Joint Health and Safety Unit (OSGB), for the purpose of fulfilling occupational health and safety obligations;
• Law enforcement authorities, in line with our legal obligations;
• Where you have given your consent, service providers in Turkey and abroad from whom we obtain services in connection with marketing activities.

When do we collect your personal data?

• When you stay at our hotel, or purchase or use our services;
• When you make a booking through our website;
• When you sell goods or provide services to us;
• When you subscribe to our newsletters or opt in to receive our marketing communications;
• When you contact us through travel agencies in Turkey or abroad.

Your right to apply

You may submit your requests regarding your rights under Article 11 of the KVKK in writing to info@uluresorthotel.com or to Yanışlı Turizm Bölgesi, 33700 Gülnar / Mersin.