KVKK POLICY

This policy has been prepared within the scope of the Law No. 6698 on the Protection of Personal Data (KVKK) and the KVKK Policy Book. It aims to regulate, determine the conditions to be followed, and declare and announce the procedures related to the processing of personal data by KİRMAN PREMIUM, i.e., BURAK TURİZM YATIRIM İŞLETMECİLİK PAZARLAMA VE TİCARET A.Ş., at its enterprises, accommodation facilities, workplaces such as SPA, sauna, and Turkish bath, and in legal, commercial or financial relations with its customers, personnel, and other real or legal persons it interacts with.

Obligation to Inform

Within the scope of the Law No. 6698 on the Protection of Personal Data, which came into force on 07.04.2016, the personal data processed during relations between KİRMAN PREMIUM and its customers, employees, and other related persons must be legally regulated due to the obligations and requirements imposed by the law.

KİRMAN PREMIUM attaches utmost importance to the security and confidentiality of personal data belonging to its customers, personnel, and related individuals. The security of personal data is prioritized during service delivery.

Pursuant to the relevant law, all personal data that can be associated with a real person (including special categories of personal data) are considered personal data under the Law. These personal data are processed by KİRMAN PREMIUM, acting as the Data Controller, within the boundaries required by the law and through the methods described below.

“Processing of personal data” refers to any operation performed on personal data such as collection, recording, storage, preservation, alteration, reorganization, disclosure, transfer, acquisition, making available, classification or prevention of use—whether by fully or partially automatic means or non-automatic methods as part of a data recording system.

Purpose and Legal Basis for Processing Personal Data

Personal data may be collected by automatic or non-automatic methods such as platform registration, telephone, fax, e-mail, SMS, social media channels, mobile applications, and audio or video recordings, both verbally or in writing, in physical or electronic environments by KİRMAN PREMIUM.

In accordance with Article 5 of Law No. 6698, personal data may be processed based on:

The explicit consent of the data subject,

Clear stipulation in the laws,

Necessity for the protection of life or physical integrity of the person or another person who is unable to express consent due to actual impossibility,

Necessity for processing personal data of the parties of a contract, provided it is directly related to the establishment or execution of that contract,

Necessity for the data controller to fulfill a legal obligation,

Personal data being made public by the data subject,

Necessity for the establishment, exercise, or protection of a right,

Legitimate interests of the data controller, provided it does not harm fundamental rights and freedoms of the data subject.

Under Article 6 of the Law, sensitive personal data may be processed with the explicit consent of the data subject or in cases permitted by law.

Sharing and Transfer of Personal Data

Personal data may be shared with or transferred to official institutions upon legal request, or with domestic/international business partners, project partners, program and cooperation partners, suppliers, audit firms, financial institutions, lawyers, accountants, and other consultants, under strict security measures. International transfers are also subject to these provisions.

KİRMAN PREMIUM may store, process, or transfer personal data to systems located abroad (e.g., EU countries, USA, UK), including servers, hosting services, software, cloud systems, and other electronic environments.

Method of Collecting Personal Data

Personal data is collected via contracts, approval forms, electronic or physical application processes, call centers, websites, social media platforms, market research, public records, official databases, digital applications, and other verbal, written, or visual interactions.

These data are processed and stored in accordance with the processing conditions under Articles 5 and 6 of the Law and within the scope of this policy.

Data Subject Rights
(Article 11 of the Law No. 6698)

Data subjects may request from KİRMAN PREMIUM, via the email address provided below, to:

Learn whether their personal data is processed,

Request information if their data is processed,

Learn the purpose and whether it is used accordingly,

Learn about third parties to whom the data is transferred domestically or abroad,

Request correction if the data is incomplete or incorrect,

Request deletion or destruction of data if processing is no longer necessary,

Request notification of actions taken to third parties,

Object to adverse outcomes via automated systems,

Demand compensation in case of unlawful processing.

Data Controller Information and Application

KİRMAN PREMIUM is the registered data controller listed in the VERBIS system at www.kvkk.gov.tr.

Requests must include the applicant’s full name, ID number, contact information, and a clear description of the request, and may be submitted:

In person,

Through a notary,

Or via the registered email address listed on our website.

All applications and communications must be in Turkish. Physical applications must be signed.

Responses are generally provided free of charge. However, a processing fee may apply if specified by relevant authorities.

For detailed information or questions about this policy, please contact:

Company Name: BURAK TURİZM YATIRIM İŞLETMECİLİK PAZARLAMA VE TİCARET A.Ş.
Address: Ilıca Mahallesi 9. Sokak No:13 Manavgat / Antalya
Email: kvkk@kirmanpremium.com
Phone: +90 242 329 21 00