COMPANY PRIVACY & CLARIFICATION NOTICE Visitor
This Company Privacy & Clarification Notice states the data collected and processed by our Company in the name of data officer and will be valid for the personal data of the persons mentioned above.
WHY IS THIS NOTICE BEING SENT? The General Data Protection Regulations (GDPR) replaces the Data Protection Act 1998 on 25 may 2018. The Company is now required to tell all data subjects about the data that is collected about them. This form may also be used to collect certain data.
WHAT SUBJECTS DOES THIS NOTICE CONTAIN? ·      what data is being collected

·      what purpose data is used for

·      whom the data is shared with

·      the lawful basis for holding your data

 ·      how long we will keep your data

·      your individual rights under GDPR
WHICH DATA DO WE PROCESS? Name, surname, date of visit, time of visit, signature, identity/passport number

 
WHO WE SHARE YOUR PERSONAL DATA WITH AND ON WHAT PURPOSE? Purposes: Based on terms of GDPR, we share your data in accordance with law and good faith provided that they are accurate and up-to-date, limited to certain, clear and legitimate purposes, for possible legal disputes, investigations, judicial or administrative audits, in order to realize the stated purposes or with the public institutions or organizations authorized to request such data as a legal obligation, responding to official or legal requests for other information and documents.

 

We share your data with:

Our corporate lawyer, judicial and administrative authorities requesting information, and third-party persons or persons to whom our Company will receive services in order to achieve the stated objectives, or public institutions or organizations authorized to request this data as a legal requirement.
METHOD OF COLLECTING AND PROCESSING YOUR DATA We collect and process your personal data by filling in the visitor registration form and visitor commitment form and according to the type of the personal data requested / to be processed, by creating a database in automatic or non-automated ways, making a list, filling out a document, writing a petition, filling out a form, etc.

 
PURPOSE FOR PROCESSING DATA

 

 Conducting activities in accordance with the legislation, following and executing legal affairs, conducting / auditing business activities, informing authorized persons, institutions and organizations, conducting occupational health / safety activities, conducting emergency management processes, conducting communication activities, creating and monitoring visitor records, internal conducting audit / investigation / intelligence activities, ensuring physical space security, conducting audit / ethical activities.
LAWFUL BASIS ON WHICH THIS DATA IS USED • Data processing is mandatory for us to fulfill our legal obligation arising from the accommodation contract

• It is compulsory to process data for the legitimate interests of our Company, without prejudice to the fundamental rights and freedoms of the person concerned

• Data processing is mandatory for the establishment, use or protection of rights
YOUR RIGHTS BASED ON GDPR

 

 •           enable correction to data for accuracy.

•           request the deletion or removal of personal data where there is no compelling reason for its continued processing.

•           object to processing of personal data that is likely to cause, or is causing damage or distress

•           to obtain and reuse your personal data for your own purposes across different services.

•           prevent processing for the purpose of direct marketing

•           object to decisions being taken by automated means

•           in certain circumstances have inaccurate personal data rectified, blocked, erased or destroyed; and

•           claim compensation for damages caused by breach of the Data Protection Regulations
PRECAUTIONS FOR PROTECTING YOUR PERSONAL DATA Protection of personal data is an important issue for our Company.

Our Company takes necessary technical and administrative measures to protect against unauthorized access to personal data or loss, misuse, disclosure, alteration or destruction of this information. Our Company undertakes to keep your personal data confidential, to take all necessary technical and administrative measures and to take the necessary care to ensure confidentiality and security.

 

Although our Company has taken the necessary information security measures, if the personal data is damaged as a result of the attacks on the web site and the system or it is received by third parties, our Company will immediately notify you and the Personal Data Protection Board.
CORRECT AND CURRENT STORAGE OF YOUR PERSONAL DATA Those who share their personal data with us, know, accepted and declared that this information is correct and kept up to date, and that they know that it is important for the rights they have on their personal data within the meaning of the GDPR.

 

You may make necessary notifications about your personal data about the changes and / or updates you have made by sending us the physical address below or from our KEP address.
DELETING, DISPOSALING OR ANONIMIZING YOUR PERSONAL DATA Your personal data processed for purposes specified in this notice; when the purpose that requires processing is eliminated and the periods determined by the Laws, if any; In accordance with our Company’s Personal Data Retention and Disposal Policy, we will delete, destroy or anonymize and continue to use it on our own or at your request.
IDENTITY OF THE COLLECTOR Vastaş Valf Armatürsan Tic. A.Ş.

Mersis No: 0-9240-0050-5100017

Adres: Halil Rıfat Paşa Mahallesi Yüzer Havuz Sokak Perpa Ticaret Merkezi A Blok K:13 No: 1/1977 Şişli/İstanbul

KEP Adresi: vastasvalf@hs02.kep.tr