GENERAL PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA

1. Data Controller

In accordance with Law No. 6698 on the Protection of Personal Data (the “Law”), your personal data is processed by Emre İnşaat Turizm Sanayi ve Ticaret A.Ş. (“Emre Hotels” or the “Company”) in its capacity as data controller.

2. Purposes of Processing Personal Data

Your personal data is processed for the following purposes: conducting emergency management processes; conducting information security processes; conducting selection and placement processes for employee candidates, interns and students; conducting the application processes of employee candidates; conducting audit and ethics activities; conducting training activities; managing access authorisations; conducting activities in compliance with legislation; conducting finance and accounting affairs; conducting loyalty processes for the company, its products and services; ensuring the security of physical premises; conducting assignment processes; following up and conducting legal affairs; conducting internal audit, investigation and intelligence activities; conducting communication activities; planning human resources processes; conducting and auditing business activities; conducting occupational health and safety activities; receiving and evaluating suggestions for the improvement of business processes; conducting business continuity activities; conducting logistics activities; conducting procurement processes for goods and services; conducting after-sales support services for goods and services; conducting sales processes for goods and services; conducting production and operation processes for goods and services; conducting customer relationship management processes; conducting activities aimed at customer satisfaction; organisation and event management; conducting marketing analysis studies; conducting performance evaluation processes; conducting advertising, campaign and promotion processes; conducting risk management processes; conducting storage and archiving activities; conducting social responsibility and civil society activities; conducting contract processes; conducting strategic planning activities; following up requests and complaints; ensuring the security of movable property and resources; conducting supply chain management processes; implementing the remuneration policy; conducting marketing processes for products and services; ensuring the security of the data controller’s operations; work and residence permit procedures for foreign personnel; conducting talent and career development activities; providing information to authorised persons, institutions and organisations; conducting management activities; and creating and tracking visitor records.

3. Method and Legal Basis for Collecting Personal Data

Your personal data in question is collected on the basis of one of the following legal grounds: the processing being “expressly provided for by law”; “being necessary to process the personal data of the parties to a contract, provided that it is directly related to the conclusion or performance of that contract”; “being mandatory for the Company to fulfil its legal obligations”; “being mandatory for the establishment, exercise or protection of a right”; “the personal data having been made public by the data subject”; or “processing being mandatory for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the data subjects” – or on the basis of your explicit consent. It is collected through job application forms, customer information forms, various documents submitted to the Company, letters and e-mails sent to the Company, the call centre, the Company’s website, social media tools, third parties such as persons and companies to which the Company provides services or from which it receives services, business partners, subcontractors, suppliers of services and products and group companies, employment agencies and job search portals, mobile applications, corporate communication accounts and devices, the Company’s IT systems and devices, security cameras, fingerprint and facial recognition systems (authorised Company personnel only), and systems such as GPS, automatic toll collection (OGS) and vehicle tracking (TTS) in Company vehicles.

4. To Whom and for What Purposes Personal Data May Be Transferred

Your personal data may be transferred – for the purposes of conducting emergency management processes; conducting information security processes; conducting selection and placement processes for employee candidates and interns; conducting audit and ethics activities; organising training activities; conducting activities in compliance with legislation; conducting finance and accounting activities; conducting assignment processes; following up and conducting legal affairs; fulfilling obligations arising from employment contracts and legislation; conducting and auditing business activities; conducting occupational health and safety activities; carrying out quality control activities; conducting logistics activities; conducting loyalty processes for the company, its products and services; conducting production and operation processes for goods and services; conducting storage and archiving activities; conducting contract processes; following up requests and complaints; conducting fringe benefits processes; conducting investment processes; providing information to authorised persons, institutions and organisations; and conducting management activities, and limited to the data necessary for the fulfilment of the relevant purposes – to shareholders, to the Company’s group companies, subsidiaries, affiliates and business partners, to natural persons or private-law legal entities (organisations with which the Company cooperates in order to fulfil its contractual or legal obligations, such as independent audit firms, insurance companies, law firms and banks), and to authorised public institutions and organisations.

5. Rights of the Data Subject under Article 11 of the Law

You may submit your requests and applications within the scope of Article 11 of the Law, which regulates the rights of the data subject.

After completing the application form available on our website, you may submit your application:

• in person with a wet-ink signature, or by sending it to our postal address through a notary public;
• electronically, using registered electronic mail (KEP), a secure electronic signature, a mobile signature, or the e-mail address that you have previously notified to our Company and that is registered in our system.

For detailed information, you may review our Company’s “Policy on the Protection and Processing of Personal Data”.