Personal Data Protection (KVKK) Notice

This English text is provided for convenience only; in the event of any discrepancy, the Turkish version prevails.

Pursuant to the Turkish Personal Data Protection Law No. 6698 ("KVKK"), your personal data will be processed by Reşat Mendi Otelcilik Sistemleri Bilgisayar Sanayi Turizm ve Ticaret Anonim Şirketi (MERSİS NO: 0-7340-1010-1400012) (the "COMPANY"), acting as Data Controller, in connection with our business purposes — used, recorded, stored, updated, transferred and/or classified within the framework described below.

In this context, in accordance with the laws and regulations enacted to protect fundamental rights and freedoms — above all the privacy of private life — our Company takes all technical and administrative measures to ensure the appropriate level of security in order to prevent the unlawful processing of and unlawful access to your personal data, and to ensure its safekeeping.

Personal Data We Process

Identity Data: Name, surname
Contact Data: Telephone number, e-mail address
Transaction Security Data: IP address, website entry/exit records, traffic data, log records

Collection Methods and Legal Grounds

Our Company may collect your personal data through our website www.rmosweb.com, our Head Office and branch locations, customer service points, other customer service channels and social media accounts, via contact forms, your purchases of our products and services, cookies, web analytics tools and similar technologies, security cameras when you visit one of our locations, and visitor entry records — by automatic and non-automatic written, verbal and digital means. Our legal grounds for processing your personal data are:

Processing being necessary for the personal data of the parties to a contract, provided that it is directly related to the conclusion or performance of that contract, on which basis we carry out:

Updating customer contact details,
Opening sales records and carrying out invoicing activities,
Conclusion or performance of the sales contract arising from your purchase of our products and services, and order tracking,
Provision of the products and services you purchased and after-sales services.

Processing being expressly stipulated by law and being mandatory for the data controller to fulfil its legal obligations, on which basis we carry out:

Fulfilment of requests from official authorities,
Provision of information to authorised institutions as required by legislation,
Compliance with retention obligations set out in legislation,
Responding to data subject applications in accordance with legislation and carrying out the necessary actions.

Processing being mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, on which basis we carry out:

Management of customer relations,
Monitoring of financial transactions,
Work carried out by our business units to enable relevant persons to benefit from the products and services offered by our Company, including sales and marketing activities, and the execution of the related business processes.

Personal Data Processed

The personal data processed by our Company may vary depending on your relationship with us and includes: name, surname, telephone number, e-mail address, postal address, information you submit via our websites and official social media channels (newsletter subscription, career page job application form, contact form, social media contact buttons), your transactions, browsing and behaviour, information about the device you use and your internet connection (such as brand, model, language preference, browser information, IP, location, wireless connection status), cookie data, and your areas of interest.

Processing of Your Personal Data and Purposes

Your personal data is processed;

For the purposes of providing you with the products and services you request and fulfilling the requirements of the contract between you and our Company, on the legal ground that processing is necessary for the personal data of the contracting parties, provided it is directly related to the conclusion or performance of a contract;
For the purposes of resolving requests, transactions and complaints relating to the RMOS Software developed, sold and supported by our Company, carrying out after-sales support processes, and performing product sales, delivery, returns and after-sales customer support services, on the legal grounds that processing is necessary for the conclusion or performance of a contract or mandatory for our Company's legitimate interests;
For the purposes of planning and executing supply chain management and Company operations, managing relations with business partners and/or suppliers, planning and executing product/service sales processes, serving our website and application users better, conducting marketing analyses, measuring and improving customer satisfaction, improving service channels, conducting business activities, audit, internal control, legal, finance and in-house operations, training activities, organisation and event management, information security and physical security processes, storage and archiving activities, and ensuring that activities are conducted in compliance with legislation, on the legal ground that processing is mandatory for our Company's legitimate interests;
For the purposes of complying with our Company's legal obligations and making the necessary notifications to competent public authorities, on the legal grounds that processing is mandatory for our Company to fulfil its legal obligations and for the establishment, exercise or protection of a right in the event of any dispute;
For the purposes of promoting and marketing our Company's products and services, enabling you to benefit from campaigns, promotions, discounts and advantages, providing general or personalised advertisements, announcements, newsletters and campaign information, and sending satisfaction survey forms, on the legal ground of your explicit consent.

With Whom and For What Purposes Do We Share Your Personal Data?

Your personal data may be transferred to third parties to the extent necessary and relevant for the purposes stated above and in accordance with legislation. Within our Company's standard processes, your personal data may be transferred to: Company sales points, regional directorates and business partners so that your transactions and requests on our website and other service channels can be fulfilled; third-party cookie providers for the purposes stated in the "Cookie Policy"; companies and agencies from which we receive support for marketing, promotion, advertising and communication; cargo and logistics companies delivering spare-part orders to you; service providers supporting push notifications, SMS/e-mail communications and call-centre services; consultancy, audit, legal, information technology, logistics and archiving suppliers supporting our internal operations, audit, internal control, IT systems, legal and accounting processes; and persons and institutions authorised to request your personal data.

Your Rights Under the KVKK

Under Article 11 of the KVKK you have the following rights:

To learn whether your personal data is processed and to request information in this regard,
To learn the purpose of processing and whether the data is used in accordance with that purpose,
To know the third parties to whom your personal data is transferred, in Turkey or abroad,
To request correction of incomplete or inaccurate data and to request that such correction be notified to the third parties to whom the data has been transferred,
To request deletion or destruction of personal data where the grounds for processing no longer exist, even though it was processed in accordance with the KVKK and other applicable laws, and to request that this be notified to the third parties to whom the data has been transferred,
To object to a result arising to your detriment from the analysis of processed data exclusively by automated systems,
To claim compensation for damages arising from unlawful processing of your personal data.

Application and Contact

You may submit your requests regarding the rights listed above to our Company in writing, subject to identity verification, and in accordance with the applicable regulations of the Personal Data Protection Authority. You may apply by completing the "Personal Data Request Form" available on our website and submitting it in person or by post; or via your e-mail address already registered with our Company to kvkk@rmosyazilim.com; or with a secure electronic signature to our registered electronic mail (KEP) address resatmendiotelcilik@hs01.kep.tr.

Your application will be answered within 30 days. For your application to be processed properly, legislation requires that it contains your name, surname, Turkish ID number (nationality and passport number for foreign nationals), the address to which our reply can be sent, and documents verifying your identity; if applying by e-mail, the e-mail address you use must already be registered in our systems; and your request must be stated in a specific, clear and understandable manner.

Consents given for receiving commercial electronic messages may be withdrawn at any time. You may submit such requests through the methods indicated in the relevant communication, via kvkk@rmosyazilim.com, or through the Commercial Electronic Message Management System (İYS) platform within the framework of the applicable legislation.

Identity of the Data Controller

MERSİS No: 0-7340-1010-1400012
Trade Name: REŞAT MENDİ OTELCİLİK SİSTEMLERİ BİLG. SAN. TUR. VE TİCARET ANONİM ŞİRKETİ
Address: Akdeniz Üniversitesi Akdeniz Tekno Kenti K:2 No:3 Konyaaltı / Antalya, Türkiye
Telephone: +90 242 227 8731 – 77 08
KEP Address: resatmendiotelcilik@hs01.kep.tr