Information Text Regarding the Processing of Personal Data

Data Controller: Aricia Istanbul

19 Mayıs Mah. Turaboğlu St. Hamdiye Yazgan İş Merkezi no: 4 inner gate no: 2 Kadıköy/İstanbul

As Aricia Istanbul ( or the “ Company ”); We have prepared this information text in order to inform you about the processing, storage and transfer of your personal data within the framework of the activities arising from the Personal Data Protection Law No. 6698 (" KVKK ") and relevant legislation and legal regulations.

What are the Purposes of Processing Your Personal Data?

Although it may vary depending on the service or commercial activity offered by Aricia Istanbul, the personal data we obtain from you in order to ensure that our Company provides the best services;

  • Execution of Information Security Processes
  • Conducting Audit / Ethics Activities
  • Conducting Activities in Compliance with Legislation
  • Conducting Finance and Accounting Affairs
  • Execution of Commitment Processes for Company / Product / Services
  • Ensuring Physical Space Security
  • Follow-up and Execution of Legal Affairs
  • Carrying out Communication Activities
  • Carrying out Logistics Activities
  • Execution of Goods / Service Purchasing Processes
  • Execution of Goods/Service After-Sales Support Services
  • Execution of Goods / Service Sales Processes
  • Execution of Goods / Service Production and Operation Processes
  • Execution of Customer Relationship Management Processes
  • Carrying out Activities for Customer Satisfaction
  • Organization and Event Management
  • Conducting Marketing Analysis Studies
  • Execution of Advertising, Campaign and Promotion Processes
  • Carrying out Storage and Archive Activities
  • Execution of Contract Processes
  • Carrying out Sponsorship Activities
  • Execution of Supply Chain Management Processes
  • Execution of Marketing Processes of Products / Services
  • Tracking of Requests / Complaints
  • Providing Information to Authorized Persons, Institutions and Organizations
  • Creating and Tracking Visitor Records

will operate for its purposes.

What are the Collecting Methods of Your Personal Data?

Your personal data; forms, contracts, electronic tracking and physical access control systems in the workplace (EX: CCTV), information systems and electronic devices (EX: telecommunication infrastructure and telephones), third parties (EX: KKB and Findeks), online website, our own site Cookies created by , are collected through Tracking Cookies (EX:Hotjar) created by third parties, site usage measurement systems (EX:Google Analytics) and other documents declared by the relevant person.

What is the Legal Reason for Collecting Your Personal Data?

Your personal data is processed by Aricia Istanbul within the scope of the establishment or execution of the contract, the legal obligation of the data controller and the legitimate interest of the data controller in accordance with the relevant legislation, especially the Turkish Commercial Code, Turkish Code of Obligations and KVKK regulations, in line with the realization of the purposes explained above.

Do We Transfer Your Personal Data to a Third Party?

Your personal data,

  • Within the scope stipulated by the legal regulation, for the purposes of carrying out the activities in accordance with the legislation, monitoring and carrying out legal affairs, providing information to authorized persons, institutions and organizations, fulfilling the obligations arising from the employment contract and legislation for employees, carrying out / auditing business activities and carrying out occupational health / safety activities. Authorized Public Institutions and Organizations within and
  • Within the scope stipulated by the legal regulation, it can be transferred to Real Persons or Private Law Entities within the country for the purpose of carrying out activities in accordance with the legislation and providing information to authorized persons, institutions and organizations .

What are your rights regarding your personal data?

Regarding your personal data;

  • Learning whether your personal data is being processed or not,
  • Requesting information if your personal data has been processed,
  • Learning the purpose of processing personal data and whether they are used for their intended purpose,
  • Knowing the third parties to whom your personal data is transferred at home or abroad,
  • To request correction of your personal data if it is incomplete or incorrectly processed,
  • Requesting the deletion or destruction of your personal data within the framework of the conditions stipulated in the KVKK legislation,
  • When you request the correction of incomplete or inaccurate data and the deletion or destruction of your personal data, request that this situation be notified to third parties to whom we have transferred your personal data, and
  • If you suffer damage due to unlawful processing of personal data, you have the right to request compensation for this damage .

Your applications and requests regarding your personal data,

  • With wet signature and ID photocopy, 19 Mayıs Mah. Turaboğlu St. By sending to the address Hamdiye Yazgan İş Merkezi no: 4 İç Kapı no: 2 Kadıköy/İstanbul,
  • You can forward it to Aricia Istanbul by sending it to our address info@ariciaistanbul.com using your registered e-mail (KEP) address and secure electronic signature or mobile signature .

In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, in the application of the Relevant Person, name, surname, signature if the application is written, TR ID number, (passport number if the applicant is a foreigner), residence or workplace address subject to notification, It is mandatory to include the e-mail address, telephone number and fax number used for notification, if any, and information regarding the subject of the request.

In order to exercise the above-mentioned rights, the Relevant Person must clearly and understandably state the requested matter in the application that includes explanations regarding the right he/she requests to use. Information and documents regarding the application must be attached to the application.

Although the subject of the request must be related to the applicant personally, if acting on behalf of someone else, the applicant must be specifically authorized in this regard and this authority must be documented (special power of attorney). In addition, the application must include identity and address information and documents verifying identity must be attached to the application.

Requests made by unauthorized third parties on behalf of someone else will not be taken into consideration.

Your claims regarding your personal data will be evaluated and responded to within 30 days from the date of receipt. If your application is evaluated negatively, the reasoned rejection reasons will be sent via e-mail or postal mail to the address you specified in your application.