Privacy statement

Vima Otel Yönetimi ve Hizmetleri A.Ş. information notice on the Personal Data Protection Law

Personal Data Protection and Processing Policy – Vima Otel Yönetimi ve Hizmetleri A.Ş. application form

Purpose

This notice is provided in line with our legal obligation under Article 10 of the Personal Data Protection Law No. 6698 (the “Law”). It covers the use, processing, retention and, where necessary, deletion of the personal data you share with Vima Otel Yönetimi ve Hizmetleri A.Ş. (“Vima A.Ş.”), as well as your rights under the Law.

Data controller: Vima Otel Yönetimi ve Hizmetleri A.Ş.
Address: Akdeniz Ünv Teknokent ArGe 3 Binası 758/2 07070 Konyaaltı Antalya
MERSIS No: 0925095216600001
Trade registry no.: Antalya/110970
Tel: 850 777 VIMA (8462)
Website: www.vimahotels.com
Email: info@vimahotels.com

Vima A.Ş. takes care to keep the information of its customers, visitors, employees and other third parties confidential. In this context, the objectives of the Vima A.Ş. Policy on the Protection, Processing and Retention of Personal Data are as follows:

To determine the confidentiality and security principles for the data the Company processes and the personal data inventory it retains,
To comply with laws and regulations on the protection of personal data, as required by Personal Data Protection Law No. 6698,
To raise awareness of personal data protection among all employees of the organization,
To determine the principles of personal data protection for the internal and external stakeholders involved in the Company’s activities.

Scope

The scope of the Vima A.Ş. data inventory, obtained and stored in electronic and/or physical form, can be summarized as follows.

Personal data and special categories of personal data of current and former employees of the Company,
Personal data and special categories of personal data of persons who apply for a job or internship and/or who are hired or accepted as interns,
Personal data and special categories of personal data of suppliers, customers and visitors.

Processing of personal data of job and internship applicants

The personal data of candidates who apply for a job or internship are processed in order to design, carry out and plan Vima A.Ş.’s human resources activities and to support their execution.

For job and internship applications made through the Vima A.Ş. Human Resources application page (https://www.vimahotels.com), the records of people who applied for a job but were not invited to an interview, and of people who applied for an internship but were not accepted, are kept in electronic form for 3 years. At the end of the 3 years, the data collected during the application are deleted.

The personal data of people who applied for a job and were invited to an interview, who applied for an internship and were accepted, and who were hired, are kept in an external-network electronic environment for 3 years and deleted at the end of that period. However, considering Vima A.Ş.’s fields of activity and the legislation it is subject to, it reserves the right to keep information, documents, papers and documentation relating to job and internship applications in its own corporate archive, in printed form and in the internal-network electronic environment, provided that their confidentiality is protected and they are stored securely.

The personal data of candidates who apply for a job or internship, collected during the recruitment or internship admission process, and the special categories of personal data collected depending on the nature of the job, are processed by Vima A.Ş. for the following purposes:

To assess the qualifications, experience and interest of candidates who apply for a job or internship, and their suitability for the open position;
Where necessary, to verify the accuracy of the information provided by candidates, or to contact third parties and carry out research about the candidate;
To contact the candidate about the application and recruitment process or, where appropriate, about any position opened later;
To meet the requirements of the relevant legislation or the requests of competent institutions or organizations;
To develop and improve the recruitment principles applied by Vima A.Ş.

The personal data of candidates who apply for a job and/or internship may be collected by the following methods and means:

A digital application form published in written or electronic form;
Employment or consulting firms;
During interviews held by video conference, by telephone or in person;
Checks made to confirm the accuracy of the information provided by the candidate, and research carried out by Vima A.Ş.;
Recruitment tests that identify skills and personality traits, conducted by experienced experts and whose results are reviewed.
Candidates who apply for a job and/or internship may exercise the rights that arise from sharing their personal data towards Vima A.Ş. as described in the “Application to the data controller” section.

Purposes of processing personal data

Vima A.Ş. processes personal data only for the purposes and under the conditions within the personal data processing conditions set out in the Law:

Personal data are processed for reasons provided for in the Law and in other legislation.
Personal data are processed in accordance with the Law in order to perform the services we provide or will provide in line with the requirements of legislation, contracts and technology; to develop our products and services; to direct our procurement processes; to carry out our commercial activities; to fulfill the information retention, reporting and notification obligations set by judicial and administrative authorities; to carry out advertising and promotion activities; and to analyze and develop our current and potential human resources and customer portfolio.

Methods of collecting personal data

Statements and forms based on the person’s explicit consent
All kinds of applications submitted to us through authorized channels
Forms collected at training sessions and events
Data obtained at trade fairs held to carry out our activities
When you visit our website, your personal data may be collected verbally, in writing or electronically through cookies and similar tools that our system uses to recognize you. Cookies are used to make a website visit more personal, show relevant browsing settings, remember visitors’ preferences, improve the overall user experience, obtain statistics on why and how many times a person visits the website and how much time they spend on it, and help produce advertising and content from user pages. By using our website you confirm the use of cookies. The Company may process your data through these cookies and may transfer the information obtained to third parties in Türkiye and abroad for the purpose of analysis.

When you visit our website, your personal data may be collected verbally, in writing or electronically through cookies and similar tools that our system uses to recognize you. They collect information about how the website is used and how often and how many times it is visited, and show how visitors reach the site. Such cookies are used to make a website visit more personal, show relevant browsing settings, remember visitors’ preferences, improve the overall user experience, obtain statistics on why and how many times a person visits the website and how much time they spend on it, and help produce advertising and content from user pages. By using our website you confirm the use of cookies. Under no circumstances do the cookies collect, store or allow us to process data that could identify you, and such data does not qualify as personal data. The Company may process your data through these cookies and may transfer the information obtained to third parties in Türkiye and abroad for the purpose of analysis. Data collected is deleted or anonymized within the periods set out in the law.

If you wish to view our website without your data being collected by cookies, you can change your choice at any time in your device or browser settings.

Data transfer

The persons to whom data may be transferred within Vima A.Ş., and the purpose and description of data transfers, are set out below:

Purpose of data transfer and persons to whom data may be transferred

Your collected personal data may be transferred to our business partners, suppliers, company officers, shareholders, and legally authorized public institutions and private persons, within the framework of the personal data processing conditions and purposes set out in Articles 8 and 9 of the Personal Data Protection Law, for the following purposes: carrying out, through our business units, the work needed to let you benefit from the products and services we offer; tailoring and recommending the products and services we offer according to your tastes, usage habits and needs; ensuring the legal and commercial security of our company and of the persons in a business relationship with our company (administrative operations relating to communication carried out by our company, ensuring the physical security and control of company locations, evaluation processes of business partners, customers and suppliers – their authorized persons or employees –, reputation research processes, legal compliance processes, audit, financial affairs, etc.); determining and implementing our company’s commercial and business strategies; and ensuring the conduct of our company’s human resources policies.

Rights of individuals

Under Personal Data Protection Law No. 6698, everyone has the right, by applying to the data controller, regarding themselves, to:

a. learn whether personal data is being processed,

b. request information if personal data has been processed,

c. learn the purpose of processing and whether the data is used in accordance with that purpose,

d. know the third parties to whom personal data is transferred, in Türkiye or abroad,

e. request correction if personal data has been processed incompletely or incorrectly,

f. request the deletion or destruction of personal data. Without prejudice to the provisions of other laws on the deletion, destruction or anonymization of personal data, where personal data has been processed in accordance with the Personal Data Protection Law and other relevant laws but the reasons requiring its processing no longer exist, it is deleted, destroyed or anonymized by the data controller on its own initiative or at the request of the person concerned. Within these conditions, to request the deletion or destruction of personal data,

g. request that the operations carried out under items (e) and (f) be notified to the third parties to whom personal data has been transferred,

h. object to a result arising against the person themselves from the analysis of the processed data, in particular by automated systems,

i. request compensation for damage suffered because personal data has been processed in violation of the law.

Application to the data controller

a. To exercise your requests concerning the application of Personal Data Protection Law No. 6698 and the rights stated above, you may submit your request, containing the necessary information identifying you and your statements on the right you wish to exercise among those set out in Article 11 of the Personal Data Protection Law, by filling in the form at the link and delivering a signed copy of the form in writing to the address of Vima A.Ş. below:

Vima Otel Yönetimi ve Hizmetleri A.Ş.
Akdeniz Ünv Teknokent ArGe 3 Binası 758/2
07070 Konyaaltı, Antalya/TÜRKİYE

b. To ensure data security, our company may ask the applicant for information in order to determine whether the applicant is the owner of the personal data that is the subject of the application. Our company may also ask the data subject questions about their application in order to ensure that it is concluded appropriately.

c. Vima A.Ş. may reject the data subject’s application, explaining the reason, in cases such as where it may obstruct the rights and freedoms of other persons, requires disproportionate effort, or concerns information that is publicly available.

d. Your request may be accepted or rejected with an explanation of the reason, and the reply is notified in writing or electronically. If the request in the application is accepted, it is carried out.

I accept, declare and undertake that I have read this Information Notice and that, under Personal Data Protection Law No. 6698, I give my prior permission for my personal data to be collected, recorded, processed, stored and used by Vima A.Ş. within the framework of the law and the principles above, and to be transferred to or shared with third parties for the same purposes.

In accordance with Personal Data Protection Law No. 6698, I have received the information text above on the processing of my personal data, special categories of personal data and health data by Vima A.Ş. I accept, declare and undertake that I consent to the processing by Vima A.Ş. of all kinds of my personal data, special categories of personal data and personal health data given by me to Vima A.Ş. verbally, in writing and/or electronically, including data that identify or serve to identify me, for the purposes of selecting candidates for the conclusion of an employment contract, signing the employment contract, and providing and planning health services under the employment contract; to their sharing with other persons and organizations with which sharing is necessary under the legislation mentioned above, and with former employers for background-check purposes; and to the processing of the personal data, special categories of personal data and health data, detailed below, within the scope defined in Personal Data Protection Law No. 6698.

Data clearly belonging to an identified or identifiable natural person, processed wholly or partly by automatic means or, as part of a data recording system, by non-automatic means, that contain information about the person’s identity: documents such as a driver’s license, identity card and passport containing information such as name and surname, Turkish ID number, nationality, mother’s and father’s names, place of birth, date of birth and gender, as well as tax number, social security number, signature, vehicle plate number and similar information,
Data clearly belonging to an identified or identifiable natural person, processed wholly or partly by automatic means or, as part of a data recording system, by non-automatic means: information such as telephone number, address, e-mail address, fax number and IP address,
Data clearly belonging to an identified or identifiable natural person, processed wholly or partly by automatic means or, as part of a data recording system, by non-automatic means: personal data relating to records and documents obtained on entry to a physical venue and during the stay within it; camera records, fingerprint records and records taken at the security point,
Data clearly belonging to an identified or identifiable natural person: photographs and camera recordings (excluding records made under Physical Venue Security Information), and data contained in documents that are copies of documents containing personal data,
Data clearly belonging to an identified or identifiable natural person, processed wholly or partly by automatic means or, as part of a data recording system, by non-automatic means: data specified in Article 6 of the Personal Data Protection Law (e.g. health data including blood group, biometric data, etc.),
Data clearly belonging to an identified or identifiable natural person, processed wholly or partly by automatic means or, as part of a data recording system, by non-automatic means: personal data relating to the receipt and evaluation of all kinds of requests or complaints addressed to Vima A.Ş.,

Personnel job application form

You are about to send your résumé information for evaluation by our company’s human resources unit. The personal data sent in this context are processed by our company as data controller in accordance with the legislation, and may be transferred to official authorities to which they must legally be transferred because of legal obligations and, if our company sees fit, to third-party company support service providers. Under Article 11 of Personal Data Protection Law No. 6698, you have the right to: learn whether your personal data is being processed; request information if it has been processed; learn the purpose of processing and whether it is used in accordance with that purpose; learn the third parties to whom it is transferred in Türkiye and/or abroad; request correction if your personal data has been processed incompletely or incorrectly; request, under Article 7 of the KVKK, the deletion, destruction or anonymization of your personal data if the reasons requiring its processing no longer exist and there is no legal obstacle; request that correction, deletion, destruction or anonymization operations be notified to the third parties to whom your personal data has been transferred; object if a result arises against you from the exclusive analysis of personal data by automated systems; and request compensation if you suffer damage because your personal data has been processed unlawfully.

We submit this for your information.

Vima Otel Yönetimi ve Hizmetleri A.Ş.