GDPR

INFORMATION NOTICE ON THE PROTECTION OF PERSONAL DATA

As Özgün Gürlen Akbayır Grandmas Wonderland (“Grandma’s Wonderland”), we believe that the protection and confidentiality of the personal data of our employees, job applicants, guests, visitors, business partners, and all third parties who enter into any legal relationship with Grandma’s Wonderland is a fundamental right. We work to ensure your security and, therefore, would like to inform you about your rights regarding the use and protection of your personal data within the scope of the applicable legislation.

  1. Data Controller

In accordance with Law No. 6698 on the Protection of Personal Data (“KVKK”), Grandma’s Wonderland acts as the data controller — the legal entity responsible for determining the purposes and means of processing personal data and managing the data recording system. As the data controller, Grandma’s Wonderland, along with its infrastructure service providers Godaddy, Natro, and Hotelrunner, is responsible for informing data subjects, preventing unlawful processing or access to data, and ensuring the safe storage of personal data.

  1. Legal Basis for the Collection of Personal Data by Grandma’s Wonderland

All personal data held by Grandma’s Wonderland are processed in compliance with the Turkish Constitution, KVKK, the Turkish Penal Code, and relevant legislation. In accordance with Article 4 of KVKK, personal data are processed:

  • Lawfully and fairly,
  • Accurately and, where necessary, kept up to date,
  • For specific, explicit, and legitimate purposes,
  • Relevant, limited, and proportionate to the purposes for which they are processed,
  • Stored for the period stipulated in the relevant legislation or as long as necessary for the processing purposes.
  1. Which Personal Data Do We Process?

Grandma’s Wonderland may collect, process, and share — within the limits permitted by law — the following categories of personal data belonging to employees, job applicants, guests, visitors, business partners, and any third parties in a legal relationship with Grandma’s Wonderland, for the purposes outlined in the next section of this notice:

  • Identity information such as name, surname, ID number, passport number, nationality, place and date of birth, photograph, gender, vehicle plate number, marital status, and data appearing on identification documents (ID card, passport, driver’s license, etc.),
  • Contact details such as phone number, home address, e-mail address, fax number,
  • Employment-related information such as occupation, CV, education and employment history, academic background, military service status, references, and personnel information,
  • Visual and audio records such as CCTV footage taken at facility entrances and within premises,
  • Complaint and request records and data related to their evaluation,
  • Financial data such as bank account number, IBAN, credit card details, and billing information.
  1. Purpose of Processing Personal Data

Personal data collected by Grandma’s Wonderland in accordance with the law and this Information Notice may be processed and shared within the limits prescribed by KVKK and related legislation for the following purposes:

  1. To establish or fulfill a lawful accommodation agreement or employment contract,
  2. To ensure the safety of Grandma’s Wonderland’s premises and guests,
  3. To enable authorized public officers to conduct audits and inspections required by law,
  4. To develop, update, and manage Grandma’s Wonderland’s website and mobile applications, and to use anonymous statistical data (age, gender, device type, browser name, login time, time zone, and location) for system improvement,
  5. To ensure quality accommodation services and manage tourism and hospitality operations in line with Grandma’s Wonderland’s business principles,
  6. To fulfill mandatory reporting obligations to administrative authorities as required by legislation, including the Identity Notification Law No. 1774, Labor Law No. 4857, and Social Security and

General Health Insurance Law No. 5510,

  1. To securely store account information related to payments to employees or other relevant persons,
  2. To organize joint events and projects with business partners and other organizations,

ı) To inform guests and visitors about promotions, discounts, campaigns, and advertisements,

  1. To manage recruitment, selection, placement, and employment processes, including personnel file creation,
  2. To ensure the legal and commercial security of individuals in business relations with Grandma’s

Wonderland,

  1. To determine and implement Grandma’s Wonderland’s business and commercial strategies,
  2. To provide you with products and services offered by Grandma’s Wonderland,
  3. To customize the products and services offered according to guest and visitor preferences, habits, and needs,
  4. To develop a guest portfolio and define commercial and operational policies.

You may update or withdraw your consent for the processing of your personal data at any time. Upon receipt of your withdrawal request, the processing of your personal data will be promptly ceased within the timeframe prescribed by law.

  1. Collection of Personal Data

Except for data collected under legal obligations, personal data are obtained with your explicit consent through front desk staff at the hotel, Grandma’s Wonderland’s websites, online or physical job application forms, interviews, accommodation documents, mobile applications, booth activities, and events — either in written or electronic form.

  1. Sharing of Personal Data

As a rule, personal data belonging to guests, employees, job applicants, visitors, business partners, and other data subjects are not shared with third parties without explicit consent. However, personal data may be transferred to authorized public institutions such as the Ministry

of Interior and the Social Security Institution to fulfill legal obligations, as well as to third parties and organizations located in Turkey and/or abroad — including Grandma’s Wonderland’s agencies, online reservation services, suppliers, and business partners — for purposes such as financial planning, business management, quality assurance, and compliance with legislation.

  1. Circumstances in Which Grandma’s Wonderland May Process Personal Data Without Consent

Under Article 5 of KVKK, Grandma’s Wonderland may process your personal data without explicit consent in the following cases:

  1. When it is explicitly permitted by law,
  2. When it is necessary to protect the life or physical integrity of the data subject or another person, and the data subject is unable to give consent due to actual impossibility, c) When it is necessary for the performance or establishment of a contract,
  3. When processing is required for the data controller to fulfill a legal obligation,
  4. When the personal data have been made public by the data subject,
  5. When data processing is necessary for the establishment, exercise, or protection of a right,
  6. When data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
  7. Rights Arising from the Law on the Protection of Personal Data

Pursuant to the KVKK, you have the right to:

  1. Learn whether your personal data have been processed,
  2. Request information if they have been processed,
  3. Learn the purpose of processing and whether they are used appropriately,
  4. Know the third parties to whom your data have been transferred,
  5. Request correction if the data are incomplete or inaccurate,
  6. Request deletion or destruction of your personal data within the framework of Article 7 of the

KVKK,

  1. Request notification of actions taken under items (e) and (f) to third parties to whom your data have been transferred,
  2. Object to any outcome arising to your detriment as a result of automated processing,
  3. Request compensation for any damage arising from unlawful processing of your data.

We remind you that your applications will be answered within 30 days, and if our response is insufficient, you may apply to the Personal Data Protection Authority within 30 days of receiving our reply.

According to Article 13 of the KVKK, applications to Grandma’s Wonderland regarding these rights must be submitted in writing or via other methods determined by the Authority. Applications may be made in person, through a notary, or by sending an e-mail to info@grandmaswonderland.com.

6698 Data Subject Request and Application Form

Grandma’s Wonderland KVKK Personal Data Processing and Protection Policy

Grandma’s Wonderland Personal Data Retention and Destruction Policy

Grandma’s Wonderland CCTV Monitoring Information Notice

WONDERSHIP ÜYESİ OLUN

Loading...