Our Company attaches great importance to the privacy of the users who visit our website and to the protection of their personal data. This Disclosure Statement has been prepared pursuant to the Personal Data Protection Law No. 6698 (“PDPL”, known in Türkiye as “KVKK”) to inform you, as the data subject, about the purposes for which your personal data collected through the above website operated by our Company as data controller is processed, the legal grounds, the parties to whom it is transferred and your rights.
1. General Structure of Our Website and Data Processing Activity
Our website is essentially a static brand-promotion site and does not contain any user membership, registration system, newsletter subscription or database mechanism that continuously stores or tracks user data in the background. Personal data processing activities on our site are limited to only two areas: the Contact Form and the Job Application Form.
2. Personal Data Processed, Purposes of Processing and Legal Grounds
The data processed in connection with the actions you take on our site is detailed below, form by form:
A. Data Processed via the Contact Form
- Data Processed: Name, E-mail Address, Phone Number.
- Purpose of Processing: Enabling visitors to make one-off contact with our Company, receiving questions, suggestions, requests or complaints, and responding to the person concerned.
- Legal Ground: Pursuant to Article 5/2-f of the PDPL, processing being necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
B. Data Processed via the Job Application Form
- Data Processed: First Name, Last Name, Phone Number, E-mail Address, City of Residence, District of Residence, Age, Gender, Education Level, Experience Details and the CV Document Uploaded by the Applicant (in PDF format).
- Purpose of Processing: Within the scope of the human resources and employment consultancy processes carried out by our Company, evaluating applications made to job postings, identifying suitable positions and managing the candidate pool.
- Legal Ground: Pursuant to Article 5/2-c of the PDPL, processing of the personal data of the parties to a contract being necessary, provided that it is directly related to the establishment or performance of the contract; and, given the nature of the work, "Explicit Consent" as the legal ground for sharing data with suitable hotel companies.
3. Transfer and Sharing of Personal Data
Our Company's data transfer policy is based on the principles of transparency and data minimization:
- Contact Form Data: The name, e-mail and phone details submitted via the form are used once only, through our Company's corporate e-mail infrastructure, to respond to the request in question, and are never shared with any third party, institution or organization.
- Job Application Form Data: Career data collected through this form is subject to a preliminary assessment within MY Hotel Investment and Management Consultancy. Depending on the nature of the application, if the candidate is found suitable, the data and CV document are shared only with the relevant contracted hotel/tourism businesses that have a staffing need and are conducting the recruitment process. Beyond this, the data is never sold to third parties or transferred for commercial purposes.
4. Method of Collecting Personal Data and Retention Period
Your personal data is collected by automated means, entirely in a digital environment, when you fill in and submit the forms on our website of your own free will.
Retention and Destruction Processes: Data submitted via the contact form is not stored permanently in our systems and is deleted once your request has been handled and the necessary communication completed. Data submitted with job applications is processed throughout the application and evaluation process (until the employment consultancy activity is completed); within a reasonable period following an unsuccessful outcome or the closing of the position, it is completely deleted from our systems, destroyed or anonymized.
Important Reminder (For Candidates): We kindly ask that the CVs you upload for job applications do not contain sensitive data considered "Special Categories of Personal Data" under the PDPL, such as religion, sect, race, political opinion, philosophical belief, health data or membership of associations/foundations.
5. Rights of the Data Subject Listed in Article 11 of the Law
Pursuant to Article 11 of the PDPL, every user whose data is processed (the Data Subject) may apply to our Company to exercise the following rights:
- To learn whether their personal data is being processed,
- To request information about the processing, if their personal data has been processed,
- To learn the purpose of the processing and whether the data is used in accordance with that purpose,
- To know the third parties to whom their personal data is transferred, in Türkiye or abroad,
- To request correction of their personal data if it is incomplete or inaccurate,
- To request deletion or destruction of the data within the framework of Article 7 of the PDPL,
- To request that correction, deletion and destruction operations be notified to the third parties to whom the data has been transferred,
- To object to a result arising against them through the analysis of the processed data exclusively by automated systems,
- To claim compensation for damages incurred due to unlawful processing of their personal data.
6. Contact and Application Method
To exercise the rights stated above and to submit any question, opinion or request regarding your personal data, you may send your application in writing with a wet signature to our Company's official address by courier/post, or reach us through the communication channels on our website. For your application to comply with PDPL standards, it is a legal requirement that it include your full name, signature, Turkish ID number (or nationality and passport number for foreign nationals), address for notification and contact details.
