CUSTOMER DISCLOSURE TEXT ON THE PROCESSING AND PROTECTION OF PERSONAL DATA

DEFINITIONS
a) Explicit consent: Consent on a specific subject, based on information and expressed with free will,
b) Anonymization: Making personal data impossible to associate with an identified or identifiable natural person under any circumstances, even by matching with other data,
c) Relevant person: The real person whose personal data is processed. Customers (passengers) receiving service from the Business within the scope of this lighting text
d) Personal data: Any information relating to an identified or identifiable natural person,
e) Processing of personal data: Obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available, of personal data fully or partially automatically or non-automatically provided that it is a part of any data recording system. all kinds of operations carried out on the data such as bringing, classifying or preventing its use.
g) Institution: Personal Data Protection Authority,
ğ) Data processor: The natural or legal person who processes personal data on behalf of the data controller, based on the authority given by the data controller,
h) Data registration system: The registration system in which personal data is processed and structured according to certain criteria,
ı) Data controller: means the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.
 
 
DATA RESPONSIBLE AND RELATED PERSON IDENTITY
This clarification text was published by FERAH TURİZM SEYAHAT İNŞAAT TİCARET VE SANAYİ LİMİTED ŞTİ. (hereinafter referred to as aegeanferrylines.com), in the capacity of data controller, during the acquisition of the personal data specified in Article 10 of the Law, in order to enlighten the passengers regarding the procedures and principles regarding the processing of personal data of the Customer (passengers), or the person authorized by him. , To the persons affiliated; It is obliged to provide information on the identity of the Data Controller and its representative, if any, for what purpose the personal data will be processed, to whom and for what purpose the processed personal data can be transferred, the method and legal reason for collecting personal data, and other rights listed in Article 11.
This Clarification Text will be updated and updated by aegeanferrylines.com when necessary.
DATA COLLECTION METHOD AND LEGAL REASON
aegeanferrylines.com collects the data of the "Relevant Persons" in accordance with the law, in accordance with the KVKK, in automatic or non-automatic ways, verbally, in writing or electronically, through the channels listed below, and in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK. is processed.
Your personal data may be completely or completely based on the legal grounds "it is necessary for the data controller to fulfill its legal obligations" in Article 5 of the Law on the Protection of Personal Data and "the data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject". partially automated means or non-automatic methods provided that they are part of the data recording system.
The personal data of the persons concerned are generally collected as written in the paragraph above. Concrete examples regarding the collection method of personal data are provided below, but are not limited to these.
With the application forms published in written or electronic environment,
verbal at the box office,
With reservation forms from agencies
With the information coming from the call center system,
to the Company via e-mail, cargo, reference and similar methods.
By means of all communication methods, including correspondence carried out over e-mail addresses, short messages sent, information forms, and all kinds of communication channels,
Through reference (relatives) persons,
Visual and audio recording systems,

LAW BASES
consumer legislation
Tax Legislation,
Law of Obligations,
Commercial Law Legislation,
Food Legislation
Environmental Legislation
Identity Declaration Law
Notification Law
Law on Regulation of Broadcasts on the Internet and Combating Crimes Committed Through These Broadcasts
Legislation Related to Electronic Communication Vs. All Relevant Legislations
 
PROCESSED PERSONAL AND SPECIAL DATA
DATA CATEGORY: IDENTITY
Name, surname, date of birth, nationality, place of birth, gender, TR identity number, passport information (passport number, type)
DATA CATEGORY: CONTACT
phone number, e-mail address,
DATA CATEGORY: LOCATION
Information of the passenger's place to be taken by transfer
DATA CATEGORY: CUSTOMER TRANSACTION
Request information, billing information, call center records, guest check-in, hotel name, room number, departure time, return time, departure place, guest pick-up location and location, ticket type
DATA CATEGORY: FINANCIAL DATA:
Credit card information, Bank Account No.
DATA CATEGORY: PHYSICAL SPACE SECURITY
camera recordings,
DATA CATEGORY: MARKETING
shopping history,
DATA CATEGORY: VISUAL AND AUDIO RECORDINGS:
Photographs, audio recordings, camera recordings of real people
DATA CATEGORY: HEALTH INFORMATION:
Disability status/definition,
DATA CATEGORY: OTHER:
License plate, special preferences (preferred services and products), people traveling with

PURPOSE OF DATA COLLECTION AND PROCESSING
All kinds of data that can be associated with a natural person, specified in the list titled "Your Processed Personal and Private Data", which are kept electronically or in print according to the Law, are defined as "Personal Data". Personal data can be shared with relevant institutions and organizations if required by law, and is processed in accordance with the law and honesty, in an accurate and up-to-date manner when necessary, for specific, clear and legitimate purposes, within the framework of the principles of being relevant, limited and proportional to the purpose for which they are processed.
Personal Data may be processed by the data controller or the legal/real persons to be appointed in accordance with the KVKK for the following purposes;
Execution of Emergency Management Processes
Execution of Information Security Processes
Conducting Audit / Ethical Activities
Execution of Activities in Compliance with the Legislation
Execution of Finance and Accounting Affairs
Providing Physical Space Security
Follow-up and Execution of Legal Affairs
Carrying out Internal Audit / Investigation / Intelligence Activities
Execution of Communication Activities
Execution / Supervision of Business Activities
Execution of Logistics Activities
Execution of Good / Service Sales Processes
Execution of Goods / Services Production and Operation Processes
Conducting Marketing Analysis Studies
Execution of Advertising / Campaign / Promotion Processes
Execution of Storage and Archive Activities
Execution of Contract Processes
Execution of Marketing Processes of Products / Services
Ensuring the security of data controller operations
Providing information to authorized persons, institutions and organizations,
Execution of management activities
I/O control
Determination of working conditions
In order to protect the health and safety of the guest,
Fulfilling the legal obligations specified in the KVKK,
Fulfillment of legal obligations

TO WHOM AND FOR WHAT PURPOSES THE PROCESSED PERSONAL DATA MAY BE TRANSFERRED
Provided that your processed personal data is limited to mandatory information, at home or abroad;
We use your data; We always keep your data safely and securely for reservation, information processing, advertising, marketing, promotion, business development, security, promotion, campaign notification, as well as with our business partners, suppliers (authorized or employees), our company's officials, shareholders,
For the purpose of providing our services to legally authorized public institutions and private individuals by taking the necessary precautions and sharing and transferring them and fulfilling our legal obligations, (Ministry of Health, Ministry of Commerce, Ministry of Interior, Ministry of Transport and Infrastructure)
With the authorities of the country you want to go to,
Personal and private data are transferred to the judicial authorities or the relevant law enforcement authorities upon request, in order to resolve legal disputes or in accordance with the relevant legislation.
Due to the information technologies used by the data controller, servers located abroad, primarily EU countries, America and Russia, and companies that provide this server support, and companies that provide cloud computing services in cases where cloud computing is used,
With the relevant auditing and consultancy firms, independent audit firms, financial advisor/accounting firms, law firms for the purpose of fulfilling our obligations pursuant to the provisions of the relevant legislation and auditing our commercial activities,
In order to fulfill legal requirements and/or fulfill the demands of official authorities, it can be transferred with public institutions and organizations, by obtaining express consent in cases where express consent is required by law (except for cases where express consent is not required by law) and within the framework of conditions determined by law.
In cases where express consent is required by law, it can be transferred by obtaining explicit consent (except for cases where express consent is not required by law) and within the framework of the conditions determined by law.

PERSONAL DATA STORAGE PERIOD:
Your personal and private data will be deleted within 10 years from the date of transaction.
Your camera recordings will be kept and deleted for 75 days, but in case of complaints and suspicions, the relevant recordings will be kept during the statute of limitations.
After the time has passed, your personal data will be deleted, destroyed and/or anonymized by the data controller or upon your request, by methods within the scope of the Personal Data Protection Law and relevant regulations. You can always withdraw your consent for the processing of personal data, except for data that must be processed by law.

DATA OWNER RIGHTS:
According to Article 11 of the Law, you have the following rights:
a. Learning whether personal data is processed or not,
b. If personal data has been processed, requesting information about it,
c. Learning the purpose of personal data and whether they are used in accordance with its purpose,
c. Knowing the third parties to whom personal data is transferred at home or abroad, requesting correction of personal data in case of incomplete or incorrect processing,
D. Requesting the deletion or destruction of personal data, (For a request, request a form from the Human Resources Department)
to. Requesting notification of the transactions made pursuant to subparagraphs (d) and (e) to third parties to whom personal data has been transferred,
f. Objecting to the emergence of a result against the person himself by analyzing the processed data only through automatic systems,
g. To request the compensation of the damage in case of loss due to the unlawful processing of personal data,
Your requests in your application will be concluded free of charge within thirty days at the latest, depending on the nature of the request. However, if the transaction requires a separate cost for the Company, the fee in the tariff determined in the Communiqué on the Procedures and Principles of Application to the Data Controller may be charged by the Personal Data Protection Board.
In matters related to the processing of your personal data, you must submit your application to our Company in writing, by filling out the application form on the Company's website, or by using a registered e-mail (KEP) address, secure electronic signature, mobile signature or your e-mail address that you have previously informed us and included in our records. required. Depending on the nature of your request and your application method, the Company may request additional verifications (such as sending a message to your registered phone, calling) in order to determine whether the application belongs to you and thus protect your rights. For example, if you apply through your e-mail address registered with the Company, we may contact you using another communication method registered with the Company and request confirmation of whether the application belongs to you.
Exceptions to the Right of Application
Pursuant to Article 28 of the KVK Law, personal data owners will not be able to assert their rights in the following matters.
Processing personal data for purposes such as research, planning and statistics by anonymizing with official statistics
Processing personal data for art, history, literature or scientific purposes or within the scope of freedom of expression, provided that it does not violate national defense, national security, public security, public order, economic security, privacy of private life or personal rights or does not constitute a crime
Processing of personal data within the scope of preventive, protective and intelligence activities carried out by public institutions and organizations that have been given duty and authority by law to ensure national defense, national security, public safety, public order and economic security.
Processing of personal data by judicial authorities or execution authorities in relation to investigation, prosecution, trial or execution proceedings
Pursuant to article 28/2 of the KVK Law; In the cases listed below, personal data owners will not be able to assert their rights, with the exception of demanding the compensation of the damage.
Processing of personal data is necessary for the prevention of crime or for criminal investigation Processing of personal data made public by the personal data owner himself
Personal data processing is necessary for the execution of supervisory or regulation duties and for disciplinary investigation and prosecution by the authorized and authorized public institutions and organizations and professional organizations in the nature of public institutions based on the authority given by the law.
The processing of personal data is necessary for the protection of the economic and financial interests of the state with regard to budget, tax and financial matters.

8-CONTACT INFORMATION
FERAH TURİZM SEYAHAT İNŞAAT TİCARET VE SANAYİ LİMİTED ŞTİ. (aegeanferrylines.com)
Andifli Mah. Hükümet Cad. No:1,2 Kaş, Antalya / Türkiye
info@aegeanferrylines.com