PRIVACY NOTICE ON THE PROTECTION OF PERSONAL DATA

WESTLEYBLUE TURİZM TEKNOLOJİ VE DANIŞMANLIK A.Ş takes all necessary security measures to ensure the lawful collection, storage and sharing of your personal data and to protect your privacy at the highest level possible.

Our goal is to inform you in the most transparent way possible about the ways in which your personal data is collected, processed, shared, the legal reasons behind it and your rights, in accordance with Article 10 of the Personal Data Protection Law numbered 6698 and your satisfaction.

a) Data Controller

In accordance with the Personal Data Protection Law numbered 6698 (“Law No. 6698”), your personal data will be collected and processed within the scope explained below by. WESTLEYBLUE TURİZM TEKNOLOJİ VE DANIŞMANLIK (“COMPANY”) as the data controller.

b) Purpose of Processing Personal Data

The COMPANY may collect personal data in categories such as identity information, contact information, customer information, customer transaction information, transaction security information, legal transaction and compliance information, and marketing and sales information from parties such as customers, employees, potential customers, job applicants, business partners, website and store visitors, and suppliers for various purposes.

Your collected personal data will be processed within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law No. 6698 for the following purposes, including but not limited to, reviewing, evaluating, and responding to requests coming from official authorities or from you;

Providing you with COMPANYS products and services, fulfilling our obligations towards you, organizing records and documents, complying with local and international legal regulations regarding information storage, reporting, informing, tax and other obligations,

Providing you with personalized advertisements, campaigns, benefits, and other advantages for sales and marketing activities aimed at improving the quality of services and products,

Communicating to provide you with necessary information regarding the information technology requirements, system structure, necessity of the information technology support services received, and these services and products,

To conduct traffic measurement, statistical analysis, segmentation/profiling, and customer relationship activities for sales and marketing purposes,

Measuring and increasing customer satisfaction, managing complaints, gathering feedback and suggestions regarding new products and services, receiving reports on problems and errors, providing information to you regarding products and services, complaints, and requests,

Online behavioral advertising and marketing, customer portfolio management, measurement and improvement of service quality, communication, optimization, auditing, risk management and control, promotion, analysis, identification of interests, scoring, profiling, marketing, sales, advertising, communication,

Any comparative product and/or service offers, modeling, existing or new product studies and/or developments, and any products and services that will be presented to you for use in accordance with the laws and related legislation regulating the activities stated in the COMPANY’s articles of association that require you to disclose your personal data to the COMPANY,

Complying with the information storage, reporting, and notification obligations envisaged by official institutions, fulfilling the requirements of contracts, and fulfilling the legal obligations to which the COMPANY is subject regarding the use of these services,

To manage the financial operations, communication, market research and social responsibility activities, procurement operations (demand, offer, evaluation, order, budgeting, contracting), internal system and application management operations, and legal operations conducted by the COMPANY in line with the purpose of determining and implementing the COMPANY’s commercial and business strategies,

To review, evaluate, and respond to requests coming from official authorities or from you.

C) Who the processed personal data may be transferred to and for what purposes

Your collected personal data may be transferred, solely for the purposes stated above, to:

The business partners, shareholders, subsidiaries of the COMPANY,

Individuals or organizations permitted by the Turkish Commercial Code, Turkish Code of Obligations and other legislation,

Authorized public institutions, administrative and legal authorities,

Real or legal persons that we receive services from, cooperate with for product/service comparison, analysis, evaluation, advertising and for the realization of the purposes stated above, program partner institutions and organizations, institutions we have agreements with for sending messages to our customers, and cargo companies that deliver orders placed through our online store, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law No. 6698

d) The Method and Legal Basis for Personal Data Collection

Your personal data is collected through various channels such as our stores, website, mobile application, call centers, and social media accounts, and other channels that may be established in the future, through verbal, written, or electronic means. The legal basis for collecting your personal data is based on the purposes mentioned above and within the legal framework, such as performing the contract, being explicitly provided for by the law, being mandatory for establishing, using or protecting a right, being necessary for the legitimate interests of the company without harming your fundamental rights and freedoms, and fulfilling the legal obligations of the company

e) The Rights of Personal Data Owners Listed in Article 11 of Law No. 6698.

If you, as the personal data owners, submit your requests regarding your rights listed in Article 11 of Law No. 6698 to the COMPANY through the methods regulated below, the COMPANY will conclude the request as soon as possible and within a maximum of thirty days, depending on the nature of the request. If the response to the application is given in a recording medium such as a CD or flash drive, the fee requested by our COMPANY will not exceed the cost of the recording medium. Within this scope, personal data owners have the right to:

Learn whether their personal data is processed or not,

Request information if their personal data is processed,

Learn the purpose of processing personal data and whether they are used in accordance with that purpose,

Know the third parties to whom personal data is transferred within the country or abroad,

Request the correction of their personal data if they are incomplete or inaccurate and request that the transaction made in this context be notified to third parties to whom personal data is transferred,

Request the deletion or destruction of personal data if the reasons requiring processing cease to exist, despite being processed in accordance with Law No. 6698 and other relevant laws, and request that the transaction made in this context be notified to third parties to whom personal data is transferred,

Object to the occurrence of a result against the person by exclusively analyzing the processed data through automated systems,

Demand compensation in case of damages due to the unlawful processing of personal data.

You can submit your request related to exercising your above-mentioned rights in writing and in Turkish, in accordance with the first paragraph of Article 13 of Law No. 6698 and the Communique on Procedures and Principles of Data Controllers for Application to the Data Controller No. 30356 dated 10.03.2018, either by using a registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the electronic mail address previously notified to and registered in our system. The COMPANY reserves the right to verify your identity before responding to your request.

In your application;

a) Your name, surname and if the application is in writing, your signature,

b) Your Republic of Turkey identity number for Turkish citizens, your nationality and passport number for foreigners, or your identification number if you have one,

c) Your residential or business address for notification purposes,

d) If available, your email address, phone and fax number,

e) Your request subject,

are mandatory and any information and documents related to the subject must be attached to the application if available.

You can submit your written applications, along with the necessary documents, to WESTLEYBLUE TURİZM TEKNOLOJİ VE DANIŞMANLIK A.Ş as the data controller, by mail to the following address: Maslak Mah. Aos 55. Sk. 42 Maslak B Blok Sitesi No: 4 İç Kapi No: 542 Sarıyer / Istanbul.

You can also send your applications by e-mail to support@business.westleyblue.com.

It is essential that the information and documents requested are provided accurately and completely, depending on the nature of your request. In case the requested information and documents are not provided adequately, there may be some delays or difficulties in conducting the necessary investigations related to your request. Therefore, the company reserves its legal rights in this regard. For this reason, it is necessary to send your application with complete and accurate information and documents, depending on the nature of your request.

 

If you, as the personal data owners, submit your requests regarding your rights listed in Article 11 of Law No. 6698 to the COMPANY through the methods regulated below, the COMPANY will conclude the request as soon as possible and within a maximum of thirty days, depending on the nature of the request. If the response to the application is given in a recording medium such as a CD or flash drive, the fee requested by our COMPANY will not exceed the cost of the recording medium. Within this scope, personal data owners have the right to:

Learn whether their personal data is processed or not,

Request information if their personal data is processed,

Learn the purpose of processing personal data and whether they are used in accordance with that purpose,

Know the third parties to whom personal data is transferred within the country or abroad,

Request the correction of their personal data if they are incomplete or inaccurate and request that the transaction made in this context be notified to third parties to whom personal data is transferred,

Request the deletion or destruction of personal data if the reasons requiring processing cease to exist, despite being processed in accordance with Law No. 6698 and other relevant laws, and request that the transaction made in this context be notified to third parties to whom personal data is transferred,

Object to the occurrence of a result against the person by exclusively analyzing the processed data through automated systems,

Demand compensation in case of damages due to the unlawful processing of personal data.

You can submit your request related to exercising your above-mentioned rights in writing and in Turkish, in accordance with the first paragraph of Article 13 of Law No. 6698 and the Communique on Procedures and Principles of Data Controllers for Application to the Data Controller No. 30356 dated 10.03.2018, either by using a registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the electronic mail address previously notified to and registered in our system. The COMPANY reserves the right to verify your identity before responding to your request.

In your application;

a) Your name, surname and if the application is in writing, your signature,

b) Your Republic of Turkey identity number for Turkish citizens, your nationality and passport number for foreigners, or your identification number if you have one,

c) Your residential or business address for notification purposes,

d) If available, your email address, phone and fax number,

e) Your request subject,

are mandatory and any information and documents related to the subject must be attached to the application if available.

You can submit your written applications, along with the necessary documents, to WESTLEYBLUE TURİZM TEKNOLOJİ VE DANIŞMANLIK A.Ş as the data controller, by mail to the following address: Maslak Mah. Aos 55. Sk. 42 Maslak B Blok Sitesi No: 4 İç Kapi No: 542 Sarıyer / Istanbul.

You can also send your applications by e-mail to support@business.westleyblue.com.

It is essential that the information and documents requested are provided accurately and completely, depending on the nature of your request. In case the requested information and documents are not provided adequately, there may be some delays or difficulties in conducting the necessary investigations related to your request. Therefore, the company reserves its legal rights in this regard. For this reason, it is necessary to send your application with complete and accurate information and documents, depending on the nature of your request.