Purpose and Scope of the Policy
Under the Personal Data Protection Law No. 6698 (“KVKK”), personal data means any information relating to an identified or identifiable natural person. Under the provisions of the KVKK, the natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data filing system is defined as the data controller. Within the scope of the KVKK, your personal data relating to the transactions you carry out via the website with the domain name www.villabiz.com.tr (the “Website”) will be processed by Villa Biz İnşaat Emlak Turizm Sanayi Ve Ticaret Ltd. Şti. (“Villa Biz”), as data controller, within the scope, for the purposes and on the legal grounds explained below. In this Privacy Notice, the Website will be referred to as the “Platform”.
This Privacy Notice has been prepared to inform the natural persons whose personal data Villa Biz processes as data controller, in accordance with Article 10 of the KVKK and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform. Being transparent and accountable is important to Villa Biz. Accordingly, this Privacy Notice contains information on the identity of the data controller and its representative, if any, the purposes for which personal data will be processed, to whom and for what purposes personal data may be transferred, the method of and legal grounds for collecting personal data, and the other rights of the data subject listed in Article 11 of the KVKK.
Villa Biz may update this Privacy Notice in the event of changes to the legislation in force, decisions of the Personal Data Protection Board, court decisions, changes to the methods, purposes or grounds for processing and/or transferring personal data, or similar developments. If the Privacy Notice is updated, the current version will be published on the Platform. Within the scope of its activities relating to the processing and/or transfer of personal data, Villa Biz may publish other privacy notices, rules, terms or other statements on the Platform. If you have any questions about the matters set out in this Privacy Notice, please contact us at [email protected].
Methods of Collecting Personal Data and Legal Basis
Ensuring the security of personal data is one of our top priorities. Villa Biz processes your personal data in accordance with the provisions of the Constitution of the Republic of Türkiye in particular, the KVKK, Law No. 6563 on the Regulation of Electronic Commerce, Turkish Criminal Code No. 5237 and other relevant legislation.
Villa Biz processes personal data obtained via the Platform, authorised agencies, service providers, intermediary service providers, social media accounts, cookies, the call centre, messaging programs on the Platform, notifications from administrative and judicial authorities and other communication channels; in visual, audio, physical, electronic, verbal or written form; for the purposes of establishing commercial relationships, receiving job applications, making offers, establishing contractual relationships and fulfilling legal obligations and/or within the framework of its legitimate interests; in compliance with the personal data processing conditions set out in the KVKK and on the legal grounds stated in this Privacy Notice.
When you interact with Villa Biz via the Facebook, Twitter, Instagram and YouTube channels that Villa Biz uses as social media platforms, the personal data you provide to the relevant social media platform may also be processed by Villa Biz. Please note, however, that the use of social media platforms and the content and features provided on them are subject to the relevant platform's own privacy and usage policies.
We use “identifiers” (cookies) to help personalise your online experience and to enable you to log in to our services. Villa Biz collects personal data via cookies on the platform for various purposes. Cookies are text files placed on visitors' computers by the websites they visit. They are widely used on almost all websites to make them work efficiently and in line with visitors' preferences, and also to provide information to website administrators. Cookies are used to determine our visitors' preferences, identify requests for a specific page, improve the platform user experience, keep our services secure and carry out online behavioural advertising for our users.
Our Website uses Google Analytics, an analytics service owned by Google Inc. ("Google"). Google Analytics uses “cookies”, i.e. text files saved on your computer that enable your use of the website to be analysed. The information generated by cookies about your use of the website is transmitted to and stored on a Google server in the USA. On the instructions of the operator of this website, Google uses this information to evaluate your use and to prepare reports in order to provide related services. The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. If you do not want these cookies to be stored, you can adjust your browser settings accordingly. In addition, AdWords and DoubleClick cookies are also used on our Website for statistical purposes.
We use third-party cookies and our own cookies to show you personalised adverts on websites. This is known as "retargeting" and is based on the pages you browse on our Website, the products you view and your clicks on the banner advertising shown to you. We also use cookies as part of our online marketing campaigns to see how users interact with our Platform after being shown online adverts, including on third-party websites. You can delete these cookies from your browser at any time.
Many web browsers are set to accept cookies automatically by default. If you do not want these tools to be used, you can disable them in your browser settings. Please note, however, that in this case you may not be able to use all the functions of the Platform in full.
Personal Data Processed
The personal data processed may vary depending on the nature of the legal relationship you have with Villa Biz. In general, however, the personal data we process is as follows:
Identity Information
Your personal data such as your name, surname, identity details, date of birth, driving licence details, passport number and nationality, which you provide when registering on the Platform, buying tickets, renting a vehicle, booking a villa or hotel and using similar services via the Platform, in conversations via live support or the call centre, and in any application you make.
Contact Information
Your personal data such as your e-mail address, telephone number, mobile phone number, social media contact details and address, which you provide when registering on the Platform, buying tickets, renting a vehicle, booking a villa or hotel and using similar services via the Platform, in conversations via live support or the call centre, and in any application you make.
Customer Information (Including Consumer / Guest / Visitor and Similar Capacities)
Your personal data relating to your name, surname, nationality, date of birth, Turkish ID number, passport number, driving licence, gender, booking information, purchase information, billing information, delivery information, travel information, travel dates, accommodation information, location information, booking information, customer transaction information, the type and number of travel documents, their dates of validity and the country of issue; your personal data such as call centre records, credit card statements, counter receipts, customer instructions and records kept on the relevant channels; information and records collected in connection with requests and complaints and their outcomes; and the website password and passcode information you create while using our services offered in digital environments.
Financial Information
Credit/debit card details, bank account details, IBAN details, balance information, credit balance and other financial information.
Sensitive Data
Special categories of personal data, such as necessary information about your health that may affect the service you receive, disability information and HES code, processed where expressly provided for by legislation and necessary for our operations, and with your explicit consent.
Marketing Information
Reports showing the person's preferences to be used for marketing purposes, targeting information, cookie records, information derived from data enrichment activities, and information and evaluations obtained from surveys, campaigns and direct marketing activities.
Transaction Security Information
IP address information, password and passcode information, cookie information
Other Information
Family members and relatives information (identity and contact information relating to the children and spouses of the data subjects), physical premises security information (entry/exit records, visit information, photographs, camera and audio recordings), legal transaction and compliance information (requests for information from judicial and administrative authorities, etc.).
Purposes of Processing Personal Data
Under the KVKK, personal data may not, as a rule, be processed without the explicit consent of the data subject. Villa Biz processes your personal information in the cases and to the extent permitted by legislation.
Within this framework, the purposes of processing your personal data are as follows:
- To verify the identity of the person making a villa/hotel booking via the Platform and of the person on whose behalf the booking is made,
- To record addresses and other necessary information for communication,
- To carry out processes relating to the formation and performance of contracts,
- To contact our customers regarding the terms, current status and updates of the contracts we conclude under the relevant articles of the Distance Sales Contract and the Law on Consumer Protection, to provide the necessary information, and to perform the obligations undertaken under the contracts we conclude,
- To prepare all records and documents forming the basis of transactions in electronic or paper form,
- To provide information to public officials on matters of public security upon request and as required by legislation,
- To provide a better service to our customers, to inform our customers about products that may interest them, taking their interests into account, and to communicate campaigns,
- To inform our customers by e-mail or text message within the framework of the Law on the Regulation of Electronic Commerce and related legislation,
- To increase customer satisfaction, to get to know our customers via the Platform and use this in customer base analysis, to use it in various marketing and advertising activities, and in this context to conduct surveys electronically and/or physically through contracted organisations,
- To enable our contracted institutions and solution partners to make suggestions to our customers and to inform our customers about our services,
- To evaluate customer complaints and suggestions about our services,
- To carry out goods and service production, operation and sales processes, finance and accounting activities and archiving activities,
- To ensure information security,
- To fulfil our legal obligations and exercise our rights arising from the legislation in force.
In addition, the personal data of our employees may be processed without consent to the extent necessary for the employment relationship. The terms and conditions set out in the Employee Personal Data Protection and Processing Policy apply to the processing of our employees' personal data.
Our Company's Rights and Obligations under the Law
Personal data is processed by our Company, in accordance with Article 20 of the Constitution and Article 4 of the KVKK, in a manner that is:
- Lawful and in good faith,
- Accurate and up to date,
- For specific, explicit and legitimate purposes,
- Relevant to the purposes of processing,
- Limited and proportionate,
and is processed and transferred on the basis of the conditions set out in Articles 5 and 6 of the KVKK, being retained for the period stipulated by law or required by the purpose of processing.
Personal data shared with Villa Biz is under the supervision and control of Villa Biz. As data controller, Villa Biz has assumed responsibility for establishing the necessary organisation and for taking and adapting technical measures to protect the confidentiality and integrity of information in accordance with the provisions of the relevant legislation in force. Conscious of our obligation in this regard, we would like to state that we have taken the following administrative and technical security measures. Please note that we keep our data processing policies up to date at all times.
Villa Biz retains the personal data it processes for the periods determined by legislation; where no period is specified in legislation, personal data is retained for as long as its processing is required under Villa Biz's practices and commercial customs in connection with the services Villa Biz provides while processing the relevant personal data, and thereafter only for the periods shown to be necessary in practice for the purpose of serving as evidence in possible legal disputes. Once these periods have expired, the personal data in question is deleted, destroyed or anonymised.
Transfer of Personal Data
Personal data is shared with third parties within the framework of the legislation in force and/or the explicit consent given by the data subjects. In addition, personal data is shared with courts and other public institutions due to, and limited to, our legal obligations. Personal data is also transferred to third parties within a contractual relationship in order to provide the services we have undertaken and to carry out quality control of the services provided.
The necessary technical and administrative measures are taken to prevent data breaches when transferring data to third parties. For example, SSL and transport layer security are used during data transfer.
Your personal data may be shared with programme partner institutions and organisations we work with in order to carry out our activities; with third parties acting as service providers and/or intermediary service providers; with business partners providing private integrator services; with third parties providing independent audit services; with persons and institutions in Türkiye from whom we obtain cloud data storage services; with organisations in Türkiye with which we have agreements for sending commercial electronic messages to our customers; with our financial advisers; with the Interbank Card Centre; with the banks we have agreements with; with payment service providers; with various agencies, advertising companies and survey companies in Türkiye as part of various marketing activities, in order to serve you better and ensure customer satisfaction; with other third parties in Türkiye and our relevant business partners, shareholders and affiliates; with third parties from whom we receive services under a contractual relationship; with our lawyers and consultants; and with legally authorised public institutions and private legal entities.
Rights of the Data Subject
Under Article 11 of the KVKK, the data subject has the right to:
a. Learn whether personal data relating to them is being processed,
b. Request information about this if personal data relating to them has been processed,
c. Learn the purpose of processing personal data and whether it is used in accordance with that purpose,
ç. Know the third parties in Türkiye or abroad to whom personal data has been transferred,
d. Request the correction of personal data if it has been processed incompletely or inaccurately,
e. Request the deletion or destruction of personal data if the reasons requiring its processing no longer exist, even though it has been processed in accordance with the provisions of the Law and other relevant laws,
f. Request that the actions taken as a result of correction, deletion and destruction requests be notified to the third parties to whom the personal data has been transferred,
g. Object to a result arising to their detriment from the analysis of the processed data exclusively by means of automated systems,
ğ. Request compensation for damages if they suffer loss due to the unlawful processing of personal data
as set out in the Law.
To exercise these rights, you may submit your request in accordance with Article 13 of the KVKK and the Communiqué on the Procedures and Principles of Application to the Data Controller, in writing to Villa Biz's address at “Taşyaka Mah. Baha Şıkman Cad. No:10 Fethiye-MUĞLA”, stating your name, surname and signature; your Turkish ID number if you are a citizen of the Republic of Türkiye, or your nationality, passport number or ID number, if any, if you are not; your residential or business address for notifications; your e-mail address and telephone number for notifications; and the subject of your request, together with the information and documents necessary to verify your identity, and/or by using the Application Form; or via the e-mail address with which your membership has been verified; or, if you do not have a membership, by e-mail to obtain general information about the KVKK. Your application will be assessed by Villa Biz and concluded free of charge within thirty days. However, if the process involves an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.
Data Controller : Villa Biz İnşaat Emlak Turizm Sanayi ve Ticaret Ltd. Şti.
Tax Office / Tax No : Fethiye V.D. 9251170115
Address : TAŞYAKA MAH. BAHA ŞIKMAN (PTL) CAD. KAYABAŞI IŞ HANI BLOK NO: 10 İÇ KAPI NO: 2 FETHİYE / MUĞLA
Registered e-mail (KEP) address : [email protected]
Contact Telephone : 0252 350 00 71
Trade Registry No : FETHİYE - 14382
MERSİS : 0925117911500001
E-mail address : [email protected]