SAFE TOURISM CERTIFICATE

As Rizom Beach Hotel, we aim to provide our guests with first class products and services. We value our guests, their loyalty and confidentiality. "Rizom Beach Hotel Privacy Policy" This form has been created to inform you of how we use the personal information we collect from or about you on this website or through your written and verbal communications with us. In order to better serve you, our company requests some of your personal information (name, e-mail, etc. ....) through forms on the website. This data, collected in a secure environment on our company's computers (periodic promotions, various campaigns, setting up special promotions for user profiles and studies to "categorize" member profiles to prevent the transmission of unsolicited emails), will be used only within our company Sharing this information with us and adding it to the email distribution list is done at your request and with your consent. The email address you provide must be a valid mailing address in order for us to contact you. The information we collect is reliably kept in the database of our company. All rights to www.rizombeach.com (hereinafter referred to as "Website") are owned by " SAFİR TERMAL TURİZM İNŞ. ÖZEL EĞİTİM GIDA SAN.VE TİC.A.Ş." SAFİR TERMAL TURİZM İNŞ. ÖZEL EĞİTİM GIDA SAN.VE TİC.A.Ş. will not disclose the personal data provided to it electronically by users through the website to third parties, except for the purposes and to the extent specified in the contracts with its members and customers or in this Privacy Policy, as required by the recruitment procedure of the Human Resources Department. Personal data collected as part of the activities of the Human Resources Department shall only be used within SAFİR TERMAL TURİZM İNŞ. ÖZEL EĞİTİM GIDA SAN.VE TİC.A.Ş. used and stored. It is understood that the personal data provided by the customer/applicant SAFİR TERMAL TURİZM İNŞ. Özel EĞİTİM GIDA SAN.VE TİC.A.Ş. provides through the website is correct. SAFİR TERMAL TURİZM İNŞ. ÖZEL EĞİTİM GIDA SAN. VE TİC.A.Ş. cannot be held liable for any damage caused by inaccurate personal information. The data stored on the computers of SAFİR TERMAL TURİZM İNŞ. ÖZEL EĞİTİM GIDA SAN. VE TİC.A.Ş. data collected will only be used within SAFİR TERMAL TURİZM İNŞ. ÖZEL EĞİTİM GIDA SAN. VE TİC.A.Ş. for use in the Human Resources Department for recruitment, for periodic campaign studies, for the preparation of special promotions for customer profiles and for studies to "classify" customers in order to prevent the transmission of unsolicited e-mails. If the customer/applicant does not wish to receive the above promotions and notification emails, he/she may stop this activity at any time by sending an email to ik@rizombeach.com and/or info@rizombeach.com. Personal information may also be used to contact the user as needed. SAFİR TERMAL TURİZM İNŞ. ÖZEL EĞİTİM GIDA SAN. VE TİC.A.Ş. may establish links to other pages within the website. SAFİR TERMAL TURİZM İNŞ. ÖZEL EĞİTİM GIDA SAN. VE TİC.A.Ş. bears no responsibility for the privacy practices and content of the site accessed through the link. SAFİR TERMAL TURİZM İNŞ. ÖZEL EĞİTİM GIDA SAN.VE TİC.A.Ş. does not share users' data with companies and third parties with which it does not cooperate, unless otherwise stated in this Privacy Policy and in the limited situations mentioned below. These situations:
a. Laws, legal regulations, ordinances, etc. issued by the competent authorities and in force;
b. Compliance with the requirements of the regulations issued by SAFİR TERMAL TURİZM İNŞ. Özel EĞİTİM GIDA SAN. VE TİC.A. Ş. contracts concluded with its customers and their implementation in practice;
c. Requesting information about users by the competent administrative or judicial authorities for the purpose of conducting proper research or investigation;
d. Providing information to protect the rights or safety of users. SAFİR TERMAL TURİZM İNŞ. ÖZEL EĞİTİM GIDA SAN. VE TİC.A.Ş. undertakes to keep personal data strictly private and confidential, to consider it as a confidentiality obligation and to take all necessary measures and exercise due diligence to ensure and maintain confidentiality in order to prevent confidential information from being disclosed to the public, in whole or in part, or from being used or disclosed to third parties without authorization.
Although SAFİR TERMAL TURİZM İNŞ. ÖZEL EĞİTİM GIDA SAN. VE TİC.A.Ş. has taken the necessary information security measures, SAFİR TERMAL TURİZM İNŞ. ÖZEL EĞİTİM GIDA SAN. VE TİC.A.Ş. no responsibility in case of damage to confidential information as a result of attacks on the website and the system or in the hands of third parties. SAFİR TERMAL TURİZM İNŞ. ÖZEL EĞİTİM GIDA SAN. VE TİC.A.Ş. may unilaterally amend the provisions of this Privacy Policy at any time by posting them on the Website. The information provided by SAFİR TERMAL TURİZM İNŞ. ÖZEL EĞİTİM GIDA SAN.VE TİC.A.Ş. amended provisions of the Privacy Policy shall become effective as of the date of posting on the Website. This Confidentiality Agreement is an integral part of the Terms of Use published on the Website.

As Rizom Beach Hotel, we are aware of the importance of the personal data of our valued guests; therefore, we take high security measures to protect your personal data from unauthorized access. In order to protect your fundamental rights and freedoms, especially privacy, we process your personal data as explained below within the framework of Law No. 6698 on Personal Data Protection and the secondary regulations issued pursuant to this Law, Law No. 1774 on Identity Establishment, Law No. 213 on Tax Procedure, Turkish Commercial Code No. 6102 and other relevant legislation. Identity of the Data Controller; Pursuant to Law No. 6698 on Personal Data Protection, Turkuaz Turizm has the title of "Data Controller". In the context of the "Information obligation of the data controller" in Article 10 of the KVKK and the "Rights of the data subject" in Article 11 of the KVKK; We would like to inform you with this "Declaration and Consent Text for the Protection of Personal Data" about the purpose for which your personal data is processed, to whom and for what purpose your processed personal data may be disclosed, in what way and for what legal reason your personal data is collected and what rights you have to comply with our duty to inform our guests, visitors, business partners and natural or legal persons with whom we communicate in our capacity as data controller "Turkuaz Turizm". Our institution reserves the right to revise this "Text explaining and consenting to the protection of personal data" at any time within the framework of changes in the legislation in force. Your personal data we process; your identity information (such as first name, last name, Turkish ID number), contact information (such as email address, phone number), location information (such as address), information about your children (such as age - date of birth), financial information (information about your payment transactions), your requests, complaints or comments during or after your stay in our hotels. In accordance with the principle of limited number of minors under 18 years, we may obtain the name, surname, nationality and date of birth information about you. The moments of collection of your personal data; Your personal data, within the framework of the services offered by us, your personal data that you provide personally or indirectly to our organization; It is collected in all types of oral, written or electronic media. During hotel activities: Your personal data may be collected during room reservations, when entering into discussions with tour operators and travel agencies, when entering the hotel and making payment transactions, when reporting inquiries and complaints, when filling out customer satisfaction and survey forms, when participating in trainings, seminars or organizations organized by the hotel for any purpose, and when visiting our Internet website.
Manner and legal basis for collecting personal data Your personal data may be processed in the following cases, in accordance with Article 5 of Law No. 6698 on the protection of personal data:
1. Express consent,
2. 3. To protect the life or physical integrity of the person who, for factual reasons, is unable to give consent or whose consent is not legally valid.
4. Processing of personal data of the contracting parties is necessary, provided that it is directly related to the establishment or performance of a contract.
5. the processing is absolutely necessary for the controller to comply with its legal obligations.
6. it has been made known by the data subject himself.
7. The data processing is absolutely necessary for the establishment, exercise or protection of a right.
8. the data processing is necessary for the purposes of the data controller's legitimate interests, provided that this does not adversely affect the fundamental rights and freedoms of the data subject.
Your health data, which belong to the special categories of personal data, may be processed depending on the fulfillment of the conditions set forth in Article 6 of Law No. 6698 on the Protection of Personal Data or your explicit consent. Processing of your personal data of a special nature Personal data of a special nature are data which, if disclosed, may give rise to harassment. Data relating to racial or ethnic origin, political opinions, beliefs, religious or otherwise, appearance and dress, association, foundation or trade union membership, health, sex life, criminal convictions and security measures, as well as biometric and genetic data are personal data of a special nature. Sensitive personal data can usually only be processed with the consent of the data subject. Pursuant to Article 6 of Law No. 6698 on the Protection of Personal Data, personal data not relating to health or sexual life may be processed without the express consent of the data subject in cases established by law. Your special categories of personal data, such as blood group, allergen information, information on previous illnesses and personal data related to health and sexual life, may only be processed by persons or authorized bodies and organizations bound by confidentiality for the purposes of public health protection, preventive medicine, medical diagnosis, treatment and care services, health service planning and management and financing, without obtaining the data subject's explicit consent. When processing special categories of personal data, appropriate measures, as determined by the Board, must be taken.
Purposes of processing your personal data:
- Implementation of room reservation procedures,
- Compliance with legal and regulatory requirements,
- Implementation of quality improvement measures,
- Ensuring risk management,
- Ensuring the management of guest relations,
- Defining and implementing commercial transactions and strategies,
- Conducting marketing and sales transactions,
- Conducting routine inspections,
- Conducting and monitoring financial transactions,
- Planning, reviewing and executing information security processes,
- Preventing misconduct and unauthorized transactions that may originate from employees,
- Evaluating and responding to suggestions, inquiries, and complaints submitted by customers through all types of channels, and performing improvement work in accordance with notifications.
In cases where the purpose requiring the retention period of the personal data to be processed ceases to apply or the time limits for data processing under the relevant legislation have expired, your personal data will be deleted, destroyed or anonymized and further used.
Rights of the data subject any data subject may, by submitting a request to the controller, claim the following rights concerning him or her:
I. to know whether personal data are processed,
II. to request information if personal data have been processed,
III. to know for what purpose personal data are processed and whether they are used in accordance with the purpose,
IV. to know to which third parties personal data are transferred domestically or abroad (in order to comply with this request, the legal purpose of processing personal data must cease to exist, the legal retention periods must have expired or the relevant limitation periods must have expired. Your request for deletion will not be fulfilled before the expiration of these periods.
V. Request for rectification of personal data in case of incomplete or incorrect processing,
VI. Requesting the erasure or destruction of personal data under the conditions set forth in Article 7,
VII. Requesting the communication of the transactions carried out pursuant to Articles 5 and 6 to third parties to whom personal data are communicated,
VIII. Objecting to the occurrence of a result detrimental to the person himself through the analysis of the data processed exclusively by automated systems,
IX. Claiming compensation in case of damage due to unlawful processing of personal data.

The principles followed by TURKUAZ TURİZM in the collection and use of personal data obtained from users ("Users") through the website ("Website") are governed by this Privacy Policy.
Personal data that Turkuaz Turizm, on the Website, depending on the access of users to the Website and the transactions that may be carried out by users are collected;
- Identity information
- Process security information
- IP information
- Legal process and compliance information
- Contact information
- Request/complaint management information
- User information
- Event management information
- User transaction information
Turkuaz Turizm may collect other information that is necessary for the provision of the services offered on the Website and that is considered personal data under the Personal Data Protection Act and all relevant legislation. The User expressly consents to the processing of the data that he/she communicates to Turkuaz Turizm at his/her own request within the scope and for the purposes specified in this Privacy Policy. Pursuant to Articles 3 and 7 of the Personal Data Protection Act, irreversibly anonymized data shall not be considered personal data within the meaning of said Act and the processing of such data shall be carried out without being bound by the provisions of this Privacy Policy. Use of "cookies" Turkuaz Turizm automatically collects data such as the sections visited and areas clicked on while users navigate the website. This data, obtained through the use of technology called "cookie", is statistical information. The purpose of this technology is to make the content of the sections visited by users more accessible to the user when they first visit the website. Most browsers are designed to accept these "cookies", which are primarily technical communication files, but users can change their browser settings at any time to ensure that no technical communication files are sent or that a warning is issued when a technical communication file is sent. Turkuaz Turizm reserves the right to link the User's behavior on the Website with a "cookie" in the browser for the purpose of online behavioral advertising and marketing and to create remarketing lists based on metrics such as the number of pages viewed, the duration of the visit and the number of goal completions. As a result, targeted advertising content can be displayed to users on the website or other websites in the display network, depending on their interests. Turkuaz Turizm may process the personal data collected in order to allow the user to use the website, to register for membership if the user is a member of the website, to improve the services offered, to develop the service, to introduce and inform about new services, to provide the user with the information required in this context, to contact the user and to fulfill the obligations arising from the nature of the services offered. This personal information may be processed as part of Turkuaz Turizm's reporting and business development, and may also be used for various statistical analysis, database creation and market research, without disclosing the identity of the user. If the User also agrees, this information may be processed, stored and disclosed to third parties by Turkuaz Turizm and its employees for direct marketing purposes, and the User may be contacted to promote various applications, products and services and to inform about maintenance and support activities through this information. Turkuaz Turizm may also process and disclose personal data to third parties without obtaining the User's consent in accordance with Articles 5 and 8 of the Personal Data Protection Act and/or if there are exceptions in the relevant legislation. The most important of these situations are listed below: Where it is clearly stated in the law, it is mandatory for the protection of the life or physical integrity of the person who is unable to give consent due to actual impossibility, or whose consent is not legally valid, and it is directly related to the conclusion or performance of a contract between the user and Turkuaz Turizm, the processing of personal data is necessary, it is mandatory for the fulfillment of legal obligations, it is disclosed by the user himself, the data processing is mandatory for the establishment, exercise or protection of a right, the data processing is mandatory for the legitimate interests of Turkuaz Turizm, provided that it does not interfere with the fundamental rights and freedoms of the user. Disclosure of Data Turkuaz Turizm may disclose the personal data of the Users and the new data obtained through the use of such personal data to third parties whose services are used for the provision of the services offered to the User under the Website, limited to the purpose of providing such services. In this regard, Turkuaz Turizm may disclose User Data to third parties, such as outsourcing service providers, hosting service providers ("hosting" services), law firms, research companies, call centers, etc., in order to improve the user experience (including enhancement and personalization), ensure user safety, detect fraudulent or unauthorized use, investigate operational evaluations, troubleshoot errors related to the Site or Turkuaz Turizm Services, and to achieve any of the purposes set forth in this Privacy Policy or other privacy notices provided to the user. The User agrees that the above-mentioned third parties may store the User's personal data on their servers anywhere in the world, provided that this is limited to the above-mentioned purposes and the User agrees to this in advance. The User may contact Turkuaz Turizm and request the correction of the personal data concerning him/her:
- To know if personal data are processed,
- To request information if personal data have been processed,
- to know the purposes for which personal data are processed and whether they are used for those purposes,
- To know the third parties to whom personal data are communicated in the country or abroad,
- To request the rectification of personal data in the event of incomplete or inaccurate processing,
- To request the erasure or destruction of personal data under the conditions established in the relevant legislation,
- To request that third parties to whom personal data are transferred be informed of the rectification, erasure and destruction in accordance with the relevant legislation,
- To object to the analysis of the processed data solely by automated systems leading to a result detrimental to the data subject,
- In the event of damage resulting from unlawful processing of personal data, have the right to obtain compensation for the damage.
The User may make the above requests in the manner specified in the Data Owner Request Form. Turkuaz Turizm may provide a reasoned positive/negative response in written or digital form to the above requests. It is important to note that no fees are charged for the necessary procedures related to the requests. However, if the procedures incur costs, it is possible to charge a fee based on the tariff established by the Data Protection Board pursuant to Article 13 of the Personal Data Protection Act. The User undertakes that the information he/she provides to Turkuaz Turizm, which is the subject of this Privacy Policy, is complete, accurate and up-to-date, and that he/she will update this information immediately in the event of any changes. Turkuaz Turizm shall not be held responsible in the event that the User does not provide up-to-date data. The User accepts and declares that if he/she makes a request that results in Turkuaz Turizm not being able to use any of his/her personal data, he/she will not be able to fully benefit from the services promised to him/her by Turkuaz Turizm and he/she will be responsible for any liability arising in this regard. Retention Period of Personal Data Turkuaz Turizm shall retain the personal data provided by the User for the duration of the provision of the Services in order to fulfill the obligations arising from the nature of the Services provided. In addition, in the event of a dispute between Turkuaz Turizm and the User, Turkuaz Turizm may store personal data limited to the purpose of realizing the necessary defense measures in the context of the dispute and during the limitation periods established under the relevant legislation.
Measures, obligations and responsibilities relating to data security Turkuaz Turizm, under the conditions specified in the relevant legislation or in this Privacy Policy:
- Personal data are not processed unlawfully,
- There is no unlawful access to personal data, and
- Turkuaz Turizm undertakes to take the necessary technical and administrative measures to ensure an adequate level of security and to carry out the necessary checks to ensure the protection of personal data.
- In the event that links to other applications are provided on the Website, Turkuaz Turizm assumes no responsibility for the privacy policies and contents of the applications. Turkuaz Turizm assumes no responsibility for any damage that may arise from the use of personal data under the above conditions. Changes to the Privacy Policy Those who use the services offered on the website are considered to have read and accepted all of these terms and conditions. Turkuaz Tourism reserves the right to change the terms of the Privacy Policy without prior notice. The current Privacy Policy comes into effect on the day it is made available to the user in any way.