CS Global Health Tourism and Consulting Services Inc.
INFORMATION ON THE PROTECTION OF PERSONAL DATA
As CS Global Health Tourism and Consulting Services Inc., we attach great importance to your security and, within this scope, we would like to inform you about the “Personal Data Protection Law,” which has been enacted to protect individuals’ fundamental rights and freedoms, particularly the right to privacy, and to ensure the protection of personal data.
Information: The Personal Data Protection Law No. 6698 (“Law”) was adopted on March 24, 2016, and entered into force on April 7, 2016. However, pursuant to Article 32 titled “Enforcement,” Articles 8, 9, 11, 13, 14, 15, 16, 17, and 18 of the Law came into effect as of October 7, 2016. The Law was enacted to protect fundamental rights and freedoms, particularly the right to privacy, in the processing of personal data, and to regulate the obligations, procedures, and principles that natural and legal persons processing personal data must comply with. Accordingly, this document is provided on behalf of CS Global Health Tourism and Consulting Services Inc., to fulfill the disclosure obligation arising from Article 10 of the Law, and the “Consent for the Protection and Sharing of Personal Data” is presented for the review and information of users/visitors. This text contains summary information on personal data; for more detailed and updated policies, please review the provisions of the “Privacy Statement and Personal Data Policy” in the “Policies and Notices” section available on our website wwwflutravel.com.
Data Controller Information
As detailed below, CS, acting in the capacity of Data Controller pursuant to the Personal Data Protection Law, will collect, use, and process your personal data in compliance with the relevant legislation. The Data Controller representative to be appointed by CS Global Health Tourism and Consulting Services Inc. will be announced later at wwwflutravel.com, once the legal infrastructure is established, and duly registered in the Data Controllers Registry.
How will your personal data be processed?
As CS Global Health Tourism and Consulting Services Inc., in the capacity of data controller, we may collect your personal and/or sensitive personal data through our company, retail sales channels, call centers, kiosks, affiliates, websites, and social media accounts, among others. With your consent, such data may be fully or partially obtained, recorded, stored, retained, altered, updated, periodically checked, reorganized, classified, preserved for the period required by the purpose of processing or the relevant law, shared or transferred with private or legal entities with whom we cooperate, or with public institutions and organizations to which we are legally obliged, and/or third parties residing in Turkey or abroad, such as insurance companies and banks. Where necessary, they may also be transferred abroad, processed, or restricted from use.
What are the purposes and legal grounds for processing your personal data?
Primarily, to provide and distribute the information requested by our customers from CS Global Health Tourism and Consulting Services Inc., to deliver the services we offer in compliance with contractual and technological requirements, and to improve our products and services, we will process the personal and/or sensitive personal data you share with us in compliance with the Law No. 6698 and the relevant legislation. Additionally, personal data may be processed for purposes such as: recording identity, address, and other necessary details for the services you receive from us; preparing all documents forming the basis of transactions in electronic or paper format; complying with information retention, reporting, and disclosure obligations requested by authorities; and fulfilling contractual requirements.
As a rule, personal data cannot be processed without the explicit consent of the data subject, except where:
-
it is directly related to the establishment or performance of a contract,
-
it is necessary for the exercise or protection of a right,
-
it is necessary for the fulfillment of the data controller’s legal obligations,
-
it has been made public by the data subject,
-
it is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, or
-
it is explicitly stipulated by law.
In such cases, personal data may be processed without the explicit consent of the data subject.
Information on parties to whom your personal data may be transferred
For the above-mentioned purposes, your personal and/or sensitive personal data may be shared, with your consent, with: our parent company CS Global Health Tourism and Consulting Services Inc. and its affiliates, our direct/indirect domestic/foreign subsidiaries, business partners, service providers, banks, domestic/foreign institutions, and other related third parties. Our company may also share necessary personal information with event organizers (as we act as intermediaries in event ticket sales), banks, car rental companies, insurance companies, courier/cargo companies, and other relevant parties, depending on the scope of the requested service.
How is your personal data collected?
Your personal and/or sensitive personal data may be collected with your consent verbally, in writing, or electronically through our website, sales and marketing staff, forms collected during customer visits, digital marketing and call centers, social media, organizers, and business partners. Additionally, data may be collected via our stores, retail outlets, kiosks, internet branch, social media, and call centers.
Explicit Consent for Personal and/or Sensitive Personal Data:
Customers renting services via our website, users of our site, and/or those sharing personal data, give their consent to the collection, processing, and transfer (domestic/abroad) of their personal and/or sensitive personal data within the legal framework by ticking the “Consent Text under the Personal Data Protection Law” published on our site.
Customers renting services through our retail outlets consent by signing the “Consent Text under the Personal Data Protection Law” with their name and surname. For rentals made through our call centers, personal data is collected, processed, and transferred based on customers’ keypad preferences regarding “data collection, processing, and transfer.” In the absence of consent, some features of the website may be disabled, services may be partially or fully unavailable, and rental transactions may not be possible.
What is the status of data collected before the publication of the Law?
According to the Law, personal data processed before its publication must be brought into compliance within two years. However, consents lawfully obtained before the Law are deemed valid unless revoked within one year. As our customers are considered to have accepted the Terms of Use and Privacy Policy (which include detailed provisions regarding personal data collection and processing), your consents lawfully given prior to the publication of the Law remain valid unless explicitly withdrawn within one year.
What are your rights under the Law No. 6698?
According to Article 11 of the Law, you have the right to apply to our Company and:
a) Learn whether your personal data has been processed,
b) Request information if processed,
c) Learn the purpose of processing and whether it is used in accordance with the purpose,
ç) Know the third parties to whom it is transferred domestically/abroad,
d) Request correction if it is incomplete/incorrect,
e) Request deletion/destruction under Article 7 of the Law,
f) Request notification to third parties regarding correction/deletion,
g) Object to adverse results arising solely from automated systems,
ğ) Request compensation for damages in case of unlawful processing.
These rights will enter into force as of AUTOMATIC DATE OF THE DAY WILL BE INSERTED.
MERSIS No: 0215064297100001
Contact: +90 543 960 43 25
CS Global Health Tourism and Consulting Services Inc.
Email: kurumsal@flurota.com
