Nova Star Otelcilik Turizm ve Ticaret Anonim Şirketi

Guest Privacy Policy

Effective Date: August 29, 2024

Personal Data Protection Law No. 6698 (Law) entered into force on April 7, 2016, and the Law stipulates the rules regarding the processing of all kinds of information regarding identified or identifiable natural persons.

This policy expresses the Company's statements within the scope of processing of personal data of the guests staying at Istanbul Park Apart Hotel (Hotel) belonging to Nova Star Otelcilik Turizm ve Ticaret Anonim Şirketi (Company). In this regard, the scope of the implementation of this text is processing activities of personal data of the guests of the Company as detailed below. Please read this policy carefully and review the procedures regarding your data processed during and after you receive the services from the Company. In accordance with the Law, your personal data will be processed by the Company, as the data controller, within the scope explained below.

Personal Data Categories and Collection Methods of Your Personal Data

Personal Data Categories

Collection Methods of Your Personal Data

ID Information (such as name-surname, gender, TR ID number, TR ID information (serial number, family sequence number and others), ID photo, date of birth, place of birth, marital status, passport information (passport number, place of issue), nationality, foreign identification number, if any, signature; copy of ID/passport)

Non-automatic ways by means of (i) taking a copy of your ID or passport or (ii) filling out the registration card when you check-in the Hotel.

Automatic ways by automatically receiving the personal data provided by you with the online travel platforms from their system in order to make a reservation.

Automatically via e-mail when your company makes your reservation.

Contact Information (mobile phone number and e-mail address)

Non-automatic ways by means of filling out the registration card when you check-in the Hotel.

Automatic ways by automatically receiving the personal data provided by you with the online travel platforms from their system in order to make a reservation.

Automatically via e-mail when your company makes your reservation.

Customer Transaction Information (Guest request and order information, reservation information (date, time, room, etc.), (smoking room request that is not included in other information on online platforms, etc.) duration of stay, accommodation permit, number of people staying, room number, date of stay, reference number, confirmation number)

Non-automatic ways by means of filling out the registration card when you check-in the Hotel.

Automatically by entering electronically into the hotel management system we use, if you provide it to us during your stay.

Financial Information (payment method, expenditure amount and information)

Non-automatic ways by means of filling out the registration card when you check-in the Hotel.

Automatically by entering electronically into the hotel management system we use, if you provide it to us during your stay.

Transaction Security Information (IP information, device information including unique device identifiers such as operating system/version, hardware model and MAC address)

Automatically when you use the Hotel's Wi-Fi system.

Other Information: Workplace and Profession Information (Customer occupation information and ship name if coming from a ship)

Non-automatic ways by means of filling out the registration card when you check-in the Hotel.

Automatically via e-mail when your company makes your reservation.

Purposes of Processing Activities of Personal Data and Legal Grounds

Personal Data Categories	Purposes	Legal Grounds
ID Information	Carrying out activities in accordance with the legislation Carrying out financial and accounting relations Execution/supervision of business activities Execution of goods/service sales processes Carrying out goods/service production and operation processes Execution of customer relationship management processes Carrying out retention and archive activities Execution of contract processes Providing information to authorized persons, institutions and organizations	Expressly permitted by any law Necessary to comply with our contractual obligations Compliance with our legal obligations Our legitimate interests


Contact Information	Conducting/supervising business activities Carrying out financial and accounting relations Carrying out communication activities Execution of goods/service sales processes Providing information to authorized persons, institutions and organizations Execution of customer relationship management processes Carrying out retention and archive activities Execution of contract processes Providing information to authorized persons, institutions and organizations	Expressly permitted by any law Necessary to comply with our contractual obligations Compliance with our legal obligations Our legitimate interests


Customer Transaction Information	Carrying out financial and accounting relations Execution of goods/service sales processes Carrying out goods/service production and operation processes Execution of customer relationship management processes Carrying out retention and archive activities Execution of contract processes	Necessary to comply with our contractual obligations Compliance with our legal obligations Our legitimate interests

Financial Information	Carrying out financial and accounting relations Execution of goods/service sales processes Carrying out goods/service production and operation processes Execution of customer relationship management processes Carrying out retention and archive activities Execution of contract processes	Necessary to comply with our contractual obligations Compliance with our legal obligations Our legitimate interests
Transaction Security Information	Execution of information security processes Providing information to authorized persons, institutions and organizations Ensuring the security of data controller operations Conducting Activities in Compliance with Legislation Carrying out Retention and Archive Activities	Expressly permitted by any law Necessary to comply with our contractual obligations Compliance with our legal obligations

Other Information: Workplace and Profession Information	Conducting/supervising business activities Carrying out financial and accounting relations Carrying out communication activities Execution of goods/service sales processes Execution of customer relationship management processes Carrying out retention and archive activities Execution of contract processes	Necessary to comply with our contractual obligations Our legitimate interests

Transfer of Personal Data and to whom and for what Purposes Personal Data Can Be Transferred

Personal Data Categories	Purposes	To whom Personal Data Can Be Transferred
ID Information	Carrying out activities in accordance with the legislation Carrying out financial and accounting relations Execution of goods/service sales processes Providing information to authorized persons, institutions and organizations	Authorized public institutions and organizations Suppliers such as our third-party accountants.


Contact Information	Conducting/supervising business activities Carrying out financial and accounting relations Providing information to authorized persons, institutions and organizations	Authorized public institutions and organizations Suppliers such as our third-party accountants.


Customer Transaction Information	Carrying out financial and accounting relations Execution of goods/service sales processes	Suppliers such as our third-party accountants and services providers on dry cleaning and laundry.

Financial Information	Carrying out financial and accounting relations Execution of goods/service sales processes	Suppliers such as our third-party accountants
Transaction Security Information	Providing information to authorized persons, institutions and organizations Conducting Activities in Compliance with Legislation	Authorized public institutions and organizations

The Rights of Data Subject

As the data subject, you can send your requests in relation to your personal data such as making changes, updates and/or deletions within the scope of Article 11 of the Law, which regulates the rights of the data subject, to the e-mail address [bayram.morkoc@tuzlaparkhotel.com] or to the Company's address [info@tuzlaparkhotel.com] in accordance with the "Communiqué on Procedures and Principles of Application to the Data Controller".

This document is provided in English with the data subject only for the informative proposes and the Turkish version at the following link will prevail in accordance with the local law and the data controller’s legal obligations: [ ]

The transfers in this column are domestic and the Company does not transfer data abroad.