WEBSITE PRIVACY AND SECURITY POLICY

1. Purpose

   This policy outlines the security and privacy policies that visitors of websites operated under MED VISION TURIZM TICARET ANONIM SIRKETI DAIMA HOLIDAYS are deemed to accept.

2. Scope

   This policy applies to the entire scope defined for the Information Security Management System (ISMS) of MED VISION TURIZM TICARET ANONIM SIRKETI DAIMA HOLIDAYS.

3. Definitions

   • Organization: MED VISION TURIZM TICARET ANONIM SIRKETI DAIMA HOLIDAYS
   • Stakeholder: Entities, groups, or individuals that may be directly or indirectly affected by the Organization's activities, either positively or negatively.
   • Third Party: Legal entities and personnel providing services to the Organization under a contract.
   • Personnel: Employees of the Organization.
   • Information Security: Protection of the confidentiality, integrity, and accessibility of the Organization's assets.
   • ISMS: Information Security Management System.
   • IT Department: Daima Hotels Information Technology Department.
   • Websites: Websites operated under MED VISION TURIZM TICARET ANONIM SIRKETI DAIMA HOLIDAYS.
   • Customer: Visitor of the Websites.

4. Application

   During your visit to this website and your use of the services provided, how the information about you and the services you request will be used and protected is subject to the terms set forth in this policy. By visiting this website and requesting the services offered, you accept the terms of this policy.

   Websites may request certain personal information (e.g., name, age, interests, email, etc.) from you to serve you better. This information, collected on the Organization's computers, is used exclusively within the Organization for periodic campaign activities, special promotions for customer profiles, and customer classification to prevent unsolicited emails.

5. Processing of Personal Data of Data Owners

   Through this policy, we inform visitors about:

   • Personal data obtained and the legal basis and methods of collection,
   • The purposes of processing personal data,
   • Sharing personal data with third parties,
   • Retention periods for personal data,
   • Rights of data owners,
   • Measures taken to ensure the security of personal data.

6. Data Owners' Rights

   Pursuant to Article 11 of the Law on Personal Data Protection, data owners have the following rights regarding their personal data:

   • To learn whether personal data is processed,
   • To request information if personal data has been processed,
   • To know the purpose of processing personal data and whether it is used in line with its purpose,
   • To know third parties to whom personal data is transferred within the country or abroad,
   • To request correction if personal data is processed inaccurately and to notify third parties to whom the data was transferred,
   • To request deletion or destruction of personal data if the reasons for processing have ceased and to inform third parties to whom the data was transferred,
   • To object to any negative outcome derived from processing exclusively by automated systems,
   • To request compensation for damages in case of unlawful processing of personal data.

7. Measures for Ensuring the Security of Personal Data

   In accordance with Article 12 of the Law on Personal Data Protection, the Organization ensures an appropriate security level by taking necessary technical and administrative measures to:

   • Prevent the unlawful processing of personal data,
   • Prevent unlawful access to personal data,
   • Ensure the preservation of personal data.

8. Enforcement of Website Privacy Policy

   This Privacy and Security Policy is dated 01.03.2020. If any changes are made to the entire or specific clauses, the enforcement date will be updated accordingly. The policy will be published on the Organization’s Websites and made accessible to relevant individuals upon request.