Univer Travel
Agreement on the Protection of Personal Data and Confidentiality
As Univer Travel Turizm Hizmetleri San. ve Tic. Ltd. Şti ,(hereinafter referred to as “Univer Travel”), we respect and mind the privacy of our guests’ private lives. For this reason, this has been prepared for the purpose of informing you within the framework of our obligation to inform you as Univer Travel with the title of Data Controller in accordance with the Article 10 of the Law on the Protection of Personal Data (“KVKK”) No 6698 and Confidentiality Agreement for the Processing of Personal Data.
As Univer Travel, we would like to point out that we have taken all possible technical and administrative measures to ensure an adequate level of security to prevent the unlawful processing of personal data, to prevent unlawful access to personal data and to ensure the retention of personal data.
The way in which the information we obtain about you and the services you request is used during your visit to Univer Travel’s website www.univertravel.com.tr, when you make a reservation through our call center 444 85 95 or authorized agencies, and/or when you use the services we offer, is subject to the terms and conditions set forth in this “Agreement on the Protection of Personal Data and Confidentiality”. You accept the terms and conditions set forth in this “Agreement on the Protection of Personal Data and Confidentiality” when you visit our website www.univertravel.com.tr, when you make a reservation through our call center 444 85 95 or authorized agencies, and/or when you use the services we offer or when you request to benefit from the services we offer through this website.
As the person responsible for compliance with the Law on the Protection of Personal Data No. 6698, with our clarification texts and policies, in the agreement on the processing of personal data and nondisclosure on our website www.univertravel.com.tr, we process all types of identifiable data about you in accordance with the law and the rules of good faith, they are accurate and up to date, if necessary, related to the purpose for which they’re processed, limited and measured, for the period specified in the relevant laws or for the period necessary for the purpose for which they’re processed, for specific, clear and legitimate purposes.
1. Processing of Personal Data of Data Owners
Personal data obtained by Univer Travel may be processed by Univer Travel as data controller in accordance with Law on the Protection of Personal Data No. 6698 to the extent described below.
2. Method and Legal Reason for Collecting Your Personal Data
Any information that makes your identity specific or identifiable is “Personal Data”. This Confidentiality Agreement essentially applies to the personal data collected through the following channels. Your personal data is collected, stored and processed for the purposes set out below, on the basis of the grounds for compliance with the law set out below and in the provisions of Articles 5, 6 and 8 of the Law on Protection of Personal Data No. 6698.
It applies to the personal data collected through Call center, sales offices (agencies), reception records, requests and complaints of the guest, hotel entry points, fairs and events, verbally, in writing or electronically, by automatic or non-automatic methods.
Personal data collected through the website www.univertravel.com.tr and other reservation websites.
Personal data collected through travel agencies authorized to sell Univer Travel products and services, as well as through sales channels that operate through the Internet, social media, customer interviews and SMS channels.
If you request to receive service from these channels; personal data collected through the website www.univertravel.com.tr (“Website”), software and applications provided through computers or other smart devices, social media accounts administered by persons authorized to provide services on behalf of Univer Travel (“Social Media”), e-mail accounts and instant messaging applications (“Messaging Platforms”) that mediate the service provided by Univer Travel such as WhatsApp Business, Telegram, Facebook Messenger, WeChat, BiP etc. and other channels (“Digital Platforms”). In the course of your visit to our website, your personal data is collected through cookies which are technical communication files due to your visit to our website in accordance with the data processing conditions in the Law.
Your personal data collected through all channels including digital media are categorically as follows:
Identity information (first and last name, ID number, passport number, etc.),
Your contact information (Your personal data such as e-mail address, phone number, mobile number, social media contact information, address, etc.),
Your process security information (IP address information, information about entering and leaving the website),
Extended customer information (your personal data such as first name, last name, nationality, date of birth, gender, type and number of accommodation documents, etc.),
Information on family members and people related (children, spouse of the relevant person, their identity information, contact information),
Information on customer processes (your personal data such as an order associated with the person and a need-based CDR (Call Detail Record), call center records, credit card statements, bank statements, customer orders, records recorded in appropriate channels, etc.)
Risk management information (various query results and records related to the relevant person submitted by public institutions, security inquiry records about whether you have a disability, address registration system records, IP address tracking records, etc.)
Financial information (credit/debit card information, bank account information, IBAN information, balance information, credit balances and other financial information)
Security information about the physical location (records of entering and leaving the company’s environment, information about visits, camera and sound records, etc.)
Legal process and compliance information (requests for information from judicial and administrative authorities or personal data in decisions, etc.)
Audit and inspection information (information about all types of records and processes related to the legal pursuit and enforcement of our rights, etc.)
Sensitive personal data (sensitive personal data such as information about your health, information about allergies, food preferences, information about disabilities, clearly required by law and necessary for the operation of the company and processed with your explicit consent and necessary for the provision of specific services)
Marketing information (reports and evaluations about the individual’s habits and inclination associated with the individual to be used for marketing purposes, targeting information, cookie records, information derived from data enrichment activities, information and evaluations obtained as a result of surveys of the individual, satisfaction surveys, campaigns and direct marketing studies, etc.)
Demand/complaint management information (information and records collected in the course of demands and complaints to our company regarding our products and services related to the individual, as well as information on reports in which the results are evaluated by the respective business units, etc.)
3. Purpose of the Processing of Your Personal Data
Your personal data collected through all channels including digital media may be processed by Univer Travel in accordance with Articles 5, 6 and 8 of the Law for the purposes listed below:
a) When expressly provided for by law.
b) If it is absolutely necessary for the protection of the life or physical integrity of the person or of another person, if the person concerned is physically or legally incapable of giving consent, or if the consent of that person is not legally accepted.
c) If it is necessary to process the personal data of the contracting parties, provided that this is directly related to the conclusion or performance of a contract.
ç) If it is compulsory for the data controller to fulfill his/her legal obligation.
d) If it was made public by the relevant person.
e) If the data processing is strictly necessary for the establishment, exercise or protection of a right.
f) If the data processing is absolutely necessary for the legitimate interests of the data controller, provided that it does not adversely affect the fundamental rights and freedoms of the relevant person.
g) For the purpose of fulfilling our legal obligations (such as tax legislation, consumer protection legislation, occupational health and safety legislation, code of obligation, commercial law and other legislation, telecommunication legislation, banking legislation): The processing of your data in the context of e-invoice, e-archive or when required by consumer protection laws, as well as any other processing that can be attributed to the relevant regulation, and the processing of the identity information of our guests staying in our hotels for the purpose of reporting to law enforcement authorities in accordance with our legal obligation in accordance with the Law on the Notification of Identity number 1774 can be given as an example.
h) If it is absolutely necessary for the protection of your life or physical integrity, if you are physically or legally incapable of giving consent, or if your consent is not legally accepted. the processing of your Personal Data as a result of an incident in case you are unconscious and all kinds of processing as per the related legislation can be given as examples.
ı) For the purpose of establishment or execution of a contract: All kinds of processing such as supply of products and services which you have ordered or purchased online, contacting you in this context if necessary, use of POS machines, return procedures, shipping services, establishment of distant sales agreements as per electronic commerce, sale, supply and delivery of products or services as part of our obligations and any other processing that can be attributed to the relevant regulation can be given as examples.
(i) For the purpose of fulfilling our legal obligations: Processing such as replying and resolving questions, complaints and notifications regarding Univer Travel products and services that you place through Websites, Communication Tools or Call Center and processing of health reports that you have shared with Univer Travel as regards to your complaint and any other processing that can be attributed to the relevant regulation can be given as examples.
j) For the purpose of establishing, using or protecting a right: processing such as storing the records of sale transactions as evidence and any other processing that can be attributed to the relevant regulation can be given as examples.
k) In order to protect our legitimate interests, without harming your fundamental rights and freedoms: processing such as camera recordings to ensure safety in hotels and measure the quality of services provided to you and reviewing and resolving of your requests in this regard and any other processing that can be attributed to the relevant regulation can be given as examples. Also, Personal Data that you have made public may be processed for the purposes above without your explicit consent. Processing of your Personal Data that you made public in Social Media, your website and other channels and any other processing that can be attributed to the relevant regulation can be given as examples.
Your Personal Data may be processed for the following purposes given that explicit consent is obtained as per Articles 5.1 and 6.2 of the Law on Protection of Personal Data:
Processing for CRM (Customer Relations Management) works and for offers of exclusive products and services provided for you such as internet advertisements, targeting, re-targeting, cross sales, campaigns, promotions and product/service advertisements, Processing for providing targeted content in while you are visiting websites, Processing for sending electronic commercial messages (such as campaigns, newsletters, customer satisfaction surveys, product and service advertisements), Processing for sending gifts, promotions and other magazines/periodical publications, Processing for corporate communications and, in this regard, organizing various events and notifying about these events, Within the context of SPA service you receive, processing of your personal health data especially for determining the healthy conditions in massage and steam rooms and for providing the best services possible, For your sensitive personal data to be processed due to your inability to express your consent due to physical impossibility, establishment or execution of a contract, to fulfill our legal obligations, to establish, use or protect a right and to protect our legitimate interests without harming your fundamental rights and freedoms.
In addition;
It may also be processed to carry out the necessary work by our relevant business units for the realization of the commercial activities carried out by Univer Travel and to carry out the related business processes in this direction, to carrying out the necessary work by our business units for relevant people to benefit from products and services provided by our company and to carry out the related business processes in this direction, to plan and execute activities necessary for offering and promoting products and services provided by Univer Travel by customizing them according to your discretion, usage habits and needs of relevant people.
4. Transfer of Your Personal Data to Third Parties and/or Abroad
Univer Travel may transfer your Personal Data collected through the channels and methods described in this text to third parties or abroad within the purposes set forth in the Law on Protection of Personal Data and other legislation and this Confidentiality Agreement. Your Personal Data:
a) may be disclosed to domestic judicial or law enforcement authorities, service providers and their officials when required in accordance with relevant legislation.
b) may be transferred to the third parties from which we got assistance as regards to the storage, archiving, information technologies (server, hosting, program, cloud computing), security, call center services etc., companies, business partners providing service to us/cooperate with us, suppliers, banks, financial institutions, consulting firms operating in the areas of law, tax etc. which provide service to us, and other related parties, institutions and organizations when transfer is necessary under determined data processing purposes, that are located in Turkey and in other countries primarily in EU countries, United States of America, England, OECD countries, India, China and Russia.
c) may be transferred to marketing companies, Group Companies, third party firms providing marketing support to us (e-mail, advertising agents for creating campaigns, firms providing CRM services) located in Turkey and in other countries, primarily in EU countries, United States of America, England, OECD countries, India, China and Russia, provided that your explicit consent has been obtained within the scope of the Articles 5.1 and 6.3 of the Law on Protection of Personal Data.
5. Duration of the Processing and Storage of Your Personal Data
Your Personal Data will be processed in accordance with the required periods set forth in legislation for Protection of Personal Data especially the Law on Protection of Personal Data and any other legislation, and in any case until the legitimate purposes set forth above disappears. If the purpose of the processing of personal data disappears, the data will be deleted, destroyed or anonymized, unless there is another legal reason or basis that allows the retention of the personal data.
6. Principles of Processing Your Personal Data
Our basic principles in relation to our activities for processing your data are “Acting in accordance with the law and the rules of honesty”, “Accuracy and timeliness”, “Processing of data for specific, explicit and legitimate purposes”, “Being connected with the purpose for which the personal data are processed, limited and proportionate”, “Storing them for as long as possible necessary for the purpose or provided for in the relevant legislation”.
7. Use of cookies
As Univer Travel, we utilize technologies such as cookies, pixels, GIFs (“Cookies”) to improve your user experience during your use of online channels. The use of these technologies is in accordance with the Law on Protection of Personal Data and other related legislation to which we are subject.
8. Use of Digital Platforms
Your personal data may be processed while your use of digital platforms to manage and operate the Website, to perform activities for optimizing and improving the user experience related to the website and application, to detect in what ways the website is being used, to support and enhance the use of location based tools, to manage your online accounts if available and to inform you about the services offered near you.
If you wish to use the products and services offered, your personal data will only be processed so that you can receive these products and services.
9. Use of CCTV (Closed Circuit Television)
In the premises of our hotels where we provide reservation services (by being careful about personal privacy), image and sound data are collected through the closed circuit camera system stored exclusively for the prevention and monitoring of anti-social and criminal behavior, to ensure the safety of our premises and our vehicles and equipment in our premises and to protect the health and safety of visitors and employees for the necessary period of time. All necessary technical and administrative measures are taken to ensure the security of your data collected through the closed circuit camera system.
10. Accessing Your Personal Data and Your Rights Under the Law on Protection of Personal Data
By applying to Univer Travel under Article 11 of the Law on Protection of Personal Data, you have the right to;
a) Learn whether personal data is processed or not,
b) Request information as to processing if your Personal Data have been processed,
c) Learn the purpose of processing of your Personal Data and whether data are used in accordance with their purpose,
d) Know the third parties to whom your Personal Data have been transferred at home or abroad,
e) Request rectification in case your Personal Data are processed incompletely or inaccurately,
f) Request deletion or destruction of the Personal Data if the grounds for processing Personal Data are no longer valid in terms of principles of purpose, duration and legitimacy,
g) Request notification of the operation made to the third parties to whom the personal data has been transferred in case of correction, deletion or destruction of your Personal Data,
h) Object to any negative consequence of your Processed Personal Data being analyzed exclusively through automated systems,
i) Request compensation for the damages in case the you incur damages and these due to unlawful processing of your Personal Data.
11. Method of Using Rights Originating from the Law on Protection of Personal Data
You may send your questions and requests regarding your personal data in person to the Data Controller, with a petition prepared in accordance with the terms set forth in the Notice of Request Procedures and Principles, to the address Kavacık Mah. Muhtar Sokak Tecom Plaza No.5 İç Kapı No:4 BEYKOZ/İSTANBUL by identifying yourself, or through a notary, or you can send it through other methods our rearranged in the Law on Protection of Personal Data and other methods determined by the Personal Data Protection Authority that may be added in the future. Univer Travel will conclude the request as soon as possible, but no later than within 30 (thirty) days free of charge, depending on the nature of the request. If additional costs are incurred in connection with the conclusion of the requests by Univer Travel, Univer Travel may charge the fees according to the tariff established by the Data Protection Authority.
12. Amendments to the Agreement on the Protection of Personal Data and Confidentiality:
This Agreement on the Protection of Personal Data and Confidentiality has been prepared within the framework of the Law on the Protection of Personal Data No. 6698 and other relevant legislation. Necessary amendments may be made in the aforementioned clarification text according to the amendments that occur in the relevant legal legislation and/or the purposes and policies of the processing of personal data by Univer Travel. For the most recent version of the Agreement on the Protection of Personal Data and Confidentiality, please visit https://www.univertravel.com.tr.
13. EXPLICIT CONSENT TEXT
“I agree and declare that I have been informed about my personal data processed ” by Univer Travel through the Agreement on the Protection of Personal Data and Confidentiality and the Clarification Text on https://www.univertravel.com.tr in accordance with Article 10 of the Law on the Protection of Personal Data No. 6698 titled “Clarification Obligation of the Data Controller”, that I have understood the subject matter about which I have been informed and that I have learned in detail my legal rights in relation to said records. I expressly consent to the processing of my identity, communication and marketing data for the purposes of advertising, marketing, analysis activities, communication activities, creation and transmission of personalized campaigns, advantages, promotions, advertisements and organization of events.
Details of Data Controller
Title: Univer Travel Turizm Hizmetleri San. ve Tic. Ltd. Şti or “Seller”)
Address: Kavacık Mah. Muhtar Sokak Tecom Plaza No.5 İç Kapı No:4 BEYKOZ/İSTANBUL
Telephone: 444 85 95
Mersis No: 0892070446700001
KEP Address: univertravel@hs01.kep.tr