Cookie Policy

HALALSUMMER PRIVACY AND COOKIE POLICIES

Our privacy and cookie policies

Welcome to HALALSUMMER's privacy policy.

At HALALSUMMER. we know that making an online reservation requires a great deal of trust on your part. HALALSUMMER respects your privacy and is committed to protecting your personal data. With this privacy policy, we will inform you about how we treat your personal data when you visit our website (regardless of where you visit from), your privacy rights and how the law protects you.

This privacy policy is layered, which means you can click on the areas indicated below. Please use the Glossary to understand the meaning of certain terms used in this privacy policy.

1. IMPORTANT INFORMATION AND WHO WE ARE

2. THE DATA WE COLLECT ABOUT YOU

3. HOW IS YOUR PERSONAL DATA COLLECTED?

4. HOW WE USE YOUR PERSONAL DATA

5. DISCLOSURE OF YOUR PERSONAL INFORMATION

6. INTERNATIONAL TRANSFERS

7. DATA SECURITY

8. DATA STORAGE

9. YOUR LEGAL RIGHTS

10. GLOSSARY




1. IMPORTANT INFORMATION AND WHO WE ARE

THE PURPOSE OF THIS CONFIDENTIALITY POLICY

This privacy policy aims to provide information about how HALALSUMMER collects and processes your personal data through your use of this website, including the data you may provide through this website when you register for our newsletter or purchase a product or service or participate in a competition.

It is important that you read this privacy policy together with any other privacy policies or fair processing policies we may provide in certain circumstances when we collect or process personal data about you so that you can fully understand how and why we use your data. This privacy policy supplements, and is not intended to override, other notices and privacy policies.

SUPERVISOR

HALALSUMMER is the controller and responsible for your personal data (referred to as "we", "us" or "our" in this privacy policy).

We have designated a data protection officer (DPA) who is responsible for overseeing questions about this privacy policy. If you have any questions about this privacy policy, including requests to exercise your statutory privacy rights, please contact the DPA using the details provided below.

CONTACT DETAILS

If you have any questions about this privacy policy or our privacy practices, please contact VKG in the following ways:

Full name of the legal entity: :  CANKAT SEYAHAT ACENTELİĞİ TURİZM TAŞIMACILIK EMLAK OTOMOTİV TARIM GIDA TEKSTİL TİCARET VE SANAYİ LİMİTED ŞİRKETİ 

E-mail address: info@cankattur.com

Mailing address: Konaklı, Kuyumcu Caddesi No:12, 07400 ALANYA / ANTALYA

Telephone number: +90 242 606 06 45

You have the right to lodge a complaint at any time with the Personal Data Protection Authority (KVKK), Turkey's supervisory authority on data protection matters (https://sikayet.kvkk.gov.tr/). However, we would very much like to engage with you to address your concerns before you contact the KVKK, so please contact us first.

PRIVACY POLICY CHANGES AND YOUR DUTY TO KEEP US INFORMED OF CHANGES

We regularly review our privacy policy. This version was last updated on July 10, 2019.

It is important that the personal information we store about you is accurate and up to date. Please let us know if your personal data changes during your relationship with us.

THIRD PARTY CONNECTIONS

This website may contain links to third party websites, plug-ins and applications. Clicking or activating these links may allow third parties to collect or share data about you. We do not control these third party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of each website you visit.

2. THE DATA WE COLLECT ABOUT YOU

Personal data or personal information means any information about a person that identifies that person. It does not include data where identifiers have been removed (anonymized data).

We may collect, use, store and transfer your different personal information that we have grouped about you as follows:

- Identity Data includes first name, maiden name, last name, patronymic or similar identifier, marital status, title, date of birth and gender.
- Contact Data includes billing address, delivery address, e-mail address and telephone numbers.
- Financial Data includes bank account and payment card information.
- Transaction Data includes details of payments to and from you and other details of products and services you have purchased from us.
- Technical Data includes internet protocol (IP) address, your login details, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technological products on the devices you use to access this website.
- Profile Data includes your username and password, purchases or orders you make, interests, preferences, feedback and survey responses.
- Usage Data includes information about how you use our website, products and services.
- Marketing and Communications Data includes your preferences for receiving marketing from us and our third parties and your communication preferences.

We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data, but is not legally considered personal data because it does not directly or indirectly reveal your identity. For example, we may collect your Usage Data to calculate the percentage of users who access a particular website feature. However, if we combine or link Aggregated Data with your personal data and thereby directly or indirectly identify you, we treat the combined data as personal data to be used in accordance with this privacy policy.

We do not collect any Special Categories of Personal Data about you (which includes details about your race or ethnic origin, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). We also do not collect any information about criminal convictions and offenses.

IF YOU CANNOT PROVIDE YOUR PERSONAL DATA
 Where we are required to collect 
personal data by law or under the terms of a contract we enter into with you and you fail to provide that data when we request it, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we will contact you when we need to cancel a product or service you have received from us.

3. HOW IS YOUR PERSONAL DATA COLLECTED?

We use different methods to collect data from and about you, including the following:

- Direct interaction. You may provide us with your Identity, Contact and Financial Data by filling in forms or by writing to us by post, telephone, email or otherwise. This includes personal data you provide in the following situations:

 -you book and/or purchase and/or show interest in our products or services; 
- you create an account on our website; 
- you subscribe to our service or publications; 
- you ask us to reach out to you through marketing methods; 
- you enter a competition, promotion or survey; or 
- you give us feedback, leave a review or contact us.
- Automated technologies or interactions. When you interact with our website, we automatically collect Technical Data about your hardware, browser movements and patterns. We collect this personal data using cookies, server logs and similar technologies. If you visit other websites that use our cookies, we may also receive Technical Data about you. Please see our cookie policy for more information.
- Third parties or publicly available sources. We will receive personal information about you from third parties and public sources in the following ways:
 Technical Data from the following parties:

(a) analytics providers outside the EU, such as Google, Facebook, Instagram, Twitter, LinkedIn;

(b) advertising networks such as Criteo within the EU and Taboola, Facebook, Google, Sojern, Tripadvisor outside the EU; and

(c) Google, Yahoo, MSN or other similar information search providers outside the EU.

·         Contact, Financial and Transaction Data from providers of technical, payment and delivery services such as WorldPay, Wirecard, Ingenico, Adyen, PaYU, Iyizico within or outside the EU.

4. HOW WE USE YOUR PERSONAL DATA

We will only use your personal data when permitted by law. We will most often use your personal data in the following situations:

·         When we need to perform the contract we are about to enter into or have entered into with you, for example, to use your data to provide accommodation and to enable other service providers to book the service you have requested;

·         Where necessary for our legitimate interests (or the interests of a third party) and your interests, and where fundamental rights do not override those interests.

·         When we have to comply with a legal obligation.

For more information about the legal basis for processing your personal data, see section 10 under "Glossary - Legal basis".

In general, we do not consider consent to be a legal basis for processing your personal data, but we will obtain your consent before sending direct marketing communications to the third party via email or text message. You have the right to withdraw consent to marketing at any time by contacting us.

OUR PURPOSES FOR USING YOUR PERSONAL DATA

We have provided a description of all the reasons and legal bases on which we plan to use your personal data in tabular form below. Where appropriate, we have indicated what our legitimate interests are.

Please note that we may process your personal data for more than one legal ground depending on the purpose for which we use your data. Please contact us if you need details of the grounds on which we rely to process your personal data, where more than one legal basis is given in the table.

Objective/Activity #1 
To register as a new customer

Data type 
(a) Identity 
(b) Contact

Legal grounds for processing, including legitimate interest grounds 
Contracting with you

Purpose/Activity #2 
To process and ship your order, including: 
(a) Managing payments, fees and charges 
(b) Collecting and collecting monies we are owed

Data type 
(a) Identity 
(b) Communication 
(c) Financial 
(d) Transaction 
(e) Marketing and Communication

Legal grounds for processing, including legitimate interest grounds 
(a) entering into a contract with you 
(b) necessary for our legitimate interests (to collect debts owed to us)

Purpose/Activity #3 
To manage our relationship, which includes: 
(a) Notifying you about changes to our terms or privacy policy 
(b) Asking you to leave a review or take a survey

Data type 
(a) Identity 
(b) Contact 
(c) Profile 
(d) Marketing and Communications

Legal grounds for processing, including legitimate interest grounds 
(a) Contracting with you 
(b) Necessary to comply with a legal obligation (
c) Necessary for our legitimate interests (keeping our records up to date and examining how our customers use our products/services)

Objective/Activity #4 To enter 
a prize draw, contest, or complete a survey

Data type 
(a) Identity 
(b) Contact 
(c) Profile 
(d) Usage 
(e) Marketing and Communication

Legal grounds for processing, including legitimate interest grounds 
(a) Contracting with you 
(b) Necessary for our legitimate interests (to study how our customers use our products/services and to grow our business)

Objective/Activity #5 
To manage and maintain our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and data hosting)

Data type 
(a) Identity 
(b) Communication 
(c) Technical

Legal grounds for processing, including legitimate interest grounds 
(a) Necessary for our legitimate interests (to run our business, provide administration and IT services, network security, to prevent fraud, and as part of business restructuring or group restructuring) 
(b) Necessary to comply with a legal obligation

Purpose/Activity #6 
To deliver relevant website content and advertisements and to measure or understand the effectiveness of the advertisements we serve

Data type 
(a) Identity 
(b) Contact 
(c) Profile 
(d) Usage 
(e) Marketing and Communication 
(f) Technical

Legal bases for processing, including legitimate interest bases 
Necessary for our legitimate interests (to study and improve how customers use our products/services, to grow our business, and to inform our marketing strategy)

Purpose/Activity #7 
Use data analytics to improve our website, products/services, marketing, customer relationships and experiences

Data type 
(a) Technical 
(b) Usage

Legal bases for processing, including legitimate interest bases 
Necessary for our legitimate interests (identifying the types of customers for our products and services, keeping our website up to date and relevant, developing our business and informing our marketing strategy)

Objective/Activity #8 
To make suggestions and recommendations for goods or services that may be of interest to you

Data type 
(a) Identity 
(b) Communication 
(c) Technical 
(d) Usage
(e) Profile 
(f) Marketing and Communication

Legal bases for processing, including legitimate interest bases 
Necessary for our legitimate interests (to study how our customers use our products/services and to grow our business)

MARKETING

We strive to provide choices regarding certain uses of personal data, in particular marketing and advertising.

OUR PROMOTIONAL OFFERS

We may use your Identity, Contact, Technical, Usage and Profile Data to provide you with ideas about what we think you want or need or what may be of interest to you. This is how we decide which products, services and offers would be suitable for you (we call this marketing).

If you have requested information from us or purchased goods or services from us and have not opted out of receiving this marketing, you will receive marketing communications.

THIRD PARTY MARKETING

Before we share your personal data with any third party for marketing purposes, we will obtain your explicit consent.

DON'T GIVE UP

You can ask us or third parties to stop sending you marketing messages at any time by logging in to the website and checking or unchecking the relevant boxes to set your marketing preferences or, where such options are not available, by following the unsubscribe links in any marketing message sent to you.

If you opt-out of receiving these marketing messages, this will not apply to personal data provided as a result of a product/service purchase, warranty registration, product/service experience or other transactions.

COOKIES

You can set your browser to reject all or some browser cookies or to alert you when websites set or access cookies. If you disable or reject cookies, please note that some parts of this website may not be accessible or function properly. For more information about the cookies we use, please see "Our Cookie Policy".

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

**A cookie is a small text file that we store in your browser or on your computer's hard disk if you accept it. *Cookies** may contain information that can then be read by a web server on the domain that sent you the cookie. Some cookies will only be used if you use certain features and some cookies are necessary for the operation of our platform, i.e. our website, emails and all other methods we use to provide our services.
 We use cookies for different purposes on our platform:

Mandatory Cookies: These cookies are used to ensure the full functionality of our website, which adapts itself according to the platform and device used by our visitors, to ensure the proper functioning of the platform, to register or log in to an account, to make or manage reservations. Mandatory cookies are necessary for us to offer all the features of our website.

Functional Cookies: We also use functional cookies to remember your preferences and help you use our website in an efficient and user-friendly way. Functional cookies help us remember your searches for locations and facilities, dates and guest counts, currency, language and facilities displayed. We also use cookies to remember your registered account so that you can log in to your account without having to retype your credentials. These cookies are not essential for our platform to work, but are part of our user-friendly recommendations that we offer on our platform.

Performance Cookies: Performance cookies tell us how you use our platform. These cookies help us collect user acquisition channels, analyze and optimize their efficiency, understand visitor behavior on the platform, including pages visited and actions taken, emails opened and clicked, and date and time stamp information. Performance cookies help us understand visitor interaction with our platform, including mouse movements and scrolling activity, searches, filter selections, sorting and text entered in search boxes.

Cookies for Marketing Purposes: We use cookies from third parties to analyze and optimize our online activities. These include tracking your visiting behavior on our platform after you have been shown an online advertisement. This includes retargeting ads that may show our ad depending on your browser, which happens through anonymous cookie ID and device ID. In short, we will use this information to make our website and the ads displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.

We also use cookies from third parties to provide better service, improve our platform and deliver personalized advertising. You can find more information about each cookie we use and the purposes for which we use them in the table below:

Cookie Google
Objective: To display personalized ads on Google sites based on recent searches and previous interactions; to collect user information for videos served by Youtube; to measure traffic on our website, identify the browser, timestamp for interactions, and browser/source page that referred the user to our website, serve ads that are more relevant to you and your interests, match ads served on the internet.

Cookie: DoubleClick
Objective: To record and report the website user's actions after viewing or clicking on one of the advertiser's advertisements in order to measure the effectiveness of an advertisement and deliver targeted advertisements to the user.

Cookie Criteo
Objective: To conduct retargeting campaigns to deliver personalized advertising. The information disclosed may include anonymous identification generated by cookies, pixel tags or similar technologies placed on web pages, advertisements and emails sent to users. Encrypted e-mail addresses associated with HALALSUMMER users.

Cookie Facebook
Objective: To conduct retargeting campaigns to deliver personalized advertising. The information disclosed may include; advertising ID and device ID to segment groups of users by customer groups, encrypted email address associated with HALALSUMMER membership, IP address, anonymous ID generated by cookies, pixel tags or similar technologies placed on web pages, advertisements and emails sent to users.

Cookie Yandex
Objective: To improve the performance of our website. Information about your use of our website collected by cookies will be transferred to Yandex and stored on Yandex's server in the EU and Russian Federation. Yandex will process this information to evaluate how you use the website, compile reports for us in our website operation and provide other services. Yandex processes this information as set out in the Yandex. Metrica Service Terms of Use.
 You can choose to use cookie files by selecting the settings corresponding to your browser. You can also use the https://yandex.com.tr/support/metrika/general/opt-out.html tool. However, this may affect some website functionality. By using this website, you agree that Yandex may process your data in the above manner and for the above purposes.

How to disable cookies You can 
usually enable or later disable the use of cookies with a built-in function in your browser. To learn more about controlling cookie settings through your browser: Click here for more information about managing cookie settings in 
Mozilla Firefox; Click here
 for more information about managing cookie settings in Google Chrome; Click here for more information about managing cookie settings in 
Microsoft Internet Explorer;
For more information about managing cookie settings in Safari, click here; For more information about managing cookie settings in 
Microsoft Edge, click here.
 If you would like to learn more about cookies or how to control, disable or delete them, please visit www.allaboutcookies.org. In addition, some third-party advertising networks, including Google, allow users to disable or customize preferences associated with Internet browsing. To learn more about this feature from Google, click here.

HALALSUMMER cookies expire 12 months after the last visit. Third parties determine the validity periods of their own cookies.

Social Login

We give you the option to register and sign in through your Facebook or Google account. If you register via Facebook, Facebook will ask for your permission to send us certain data from your Facebook account. This includes your first name, last name and email address so that your identity and gender can be verified, but may also include general location, a link to your Facebook profile, your time zone, your date of birth, your profile picture, your "Like" information and your friends list. 
This data will be collected by Facebook and transmitted to us in accordance with the policies in the Facebook privacy policy. You can control the information we receive from Facebook through your privacy settings in your Facebook account.
 This data will be used to create, provide and personalize your account. The legal basis is Article 6, paragraphs 1a, b, and f of the GDPR. 
If you register on our Site via Facebook or Google, your account is 
automatically linked to your 
respective Facebook or Google account and you authorize us to collect, store and use any information they may provide to us (e.g. your email address).

CHANGE OF PURPOSE

We will only use your personal data for the purposes for which we collected it, unless we need to use your personal data for another reason and we reasonably consider that reason to be compatible with the original purpose. If you would like an explanation of the compatibility of the new purpose for processing with the original purpose, please contact us.

If we need to use your personal data for an unrelated purpose, we will inform you and explain the legal basis that allows us to do so.

Please note that we may process your personal data without your knowledge or consent, in accordance with the above rules, where required or permitted by law.

5. DISCLOSURES OF YOUR PERSONAL INFORMATION

We may share your personal information with the following parties for the purposes set out in the table above.

·         Internal Third Parties as defined in the glossary.

·         External Third Parties as defined in the glossary.

·         Certain third parties listed in the table above.

·         Third parties to whom we may choose to sell, transfer or merge part of our business or assets. Or, we may wish to acquire or merge with other businesses. If there is a change in our business, the new owners may use your personal data as set out in this privacy policy.

We require all third parties to respect the security of your personal data and to act in accordance with the law. We do not allow our third party service providers to use your personal data for their own purposes and we only allow them to process your Personal data for the purposes specified and in accordance with our instructions.

6. INTERNATIONAL TRANSFERS

We share your personal data within the HALALSUMMER.COM CANKAT TUR. This includes transferring your data outside the European Economic Area (EEA).

We ensure the protection of your personal data by requiring all our group companies to follow the same rules in the processing of your personal data. These rules are called "binding corporate rules". For more details, see European Commission: Binding corporate rules.

Most of our external third parties are located outside the EEA, so the processing of your personal data will involve transferring data outside the EEA.

When we transfer your personal data outside of the EEA, we will endeavor to ensure that a similar level of protection is provided for transfers to a company within the HALALSUMMER.COM CANKAT TUR. However, we cannot guarantee the same level of protection where data is transferred to external service providers, e.g. a hotel or transfer company where you book accommodation or airport transfers through our platform. We will not share any of your personal data other than that which is necessary for your accommodation or transfer booking or as required by the laws of that country.

If you would like more information about the system used by us when transferring your personal data outside the EEA, please contact us.

7. DATA SECURITY

We have taken the necessary security measures to prevent accidental loss, use or unauthorized access, alteration or disclosure of your personal data. In addition, access to your personal data is restricted to employees, agents, contract holders and other third parties who have a business need to know. They will only process your personal information according to our instructions and are subject to a duty of confidentiality.

We have established procedures for dealing with any suspected personal data breach and will notify you and the applicable breach regulator where legally required to do so.

8. DATA STORAGE

HOW LONG WILL YOU USE MY PERSONAL DATA?

We will retain your personal data for as long as reasonably necessary to fulfill the purposes for which we collected it, including for legal, regulatory, tax, accounting and reporting requirements. We may retain your personal data for longer in the event of a complaint or if we have reasonable grounds to believe that there is a possibility of litigation in relation to our relationship with you.

To decide how long to retain personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes by other means, and legal, regulatory, tax, accounting and reporting requirements.

Details of retention periods for different aspects of your personal data are available in our retention policy, which you can request by contacting us.

In some cases you can ask us to delete your data: see the "your legal rights" section below for more information.

In some cases, we anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without prior notice to you.

9. YOUR LEGAL RIGHTS

Under certain circumstances, you have rights under data protection laws in relation to your personal data. You can do the following:

-Request access to your personal data. -Request rectification of your 
personal data. -Request deletion of your 
personal data.
-Object to the processing of your personal data. -Request restrictions on the processing of your 
personal data. -Request the transfer of your 
personal data. -Right to withdraw 
consent
. If you wish to exercise any of the rights mentioned above, please contact us.

GENERALLY NO REMUNERATION IS REQUIRED

You do not need to pay a fee to access your personal data (or to exercise any of the other rights). However, if your request is manifestly unfounded, repetitive or excessive, we may charge a reasonable fee. Or we may refuse to comply with your request in these circumstances.

WHAT WE CAN ASK FROM YOU

We may need to request specific information from you to help us confirm your identity and to ensure your right to access your personal data (or to continue to exercise other rights). This is a security measure to ensure that personal data is not disclosed to anyone who is not entitled to receive it. We may also contact you to request more information about your request to speed up our response.

RESPONSE TIME LIMIT

We try to respond to all legal requests within one month. If your request is complex or you have made a large number of requests, this may take longer than one month. In this case, we will inform you and keep you informed.

 

10. GLOSSARY

LEGAL BASIS

Legitimate Interests means the interests of our business in running and managing our business to enable us to provide you with the best service/product and the best and safest experience. Before we process your personal data for our legitimate interests, we make sure that we consider and balance the potential impact on you and your rights (both positive and negative). Your personal data will not be used for activities where our interests override our influence over you (unless we have your consent or are required or permitted to do so by law). You can find out more about how we assess our legitimate interests against the potential impact on you for some activities by contacting us.

Contracting means processing your data when it is necessary for the performance of a contract to which you are a party or taking steps at your request before entering into such a contract.

Complying with a legal obligation means processing your personal data where necessary to comply with a legal obligation to which we are subject.

THIRD PARTIES

INTERNAL THIRD PARTIES

Other companies outside the EU that act as joint controllers or processors in the NAMILA Group and provide us with various services, e.g. IT and systems management services, and leadership reporting.

EXTERNAL THIRD PARTIES

·         Service providers based in countries outside the EU that serve as processors providing IT and system management services.

·         Professional advisors acting as processors or joint controllers, including lawyers, bankers, auditors and insurers providing consulting, banking, legal, insurance and accounting services in Turkey.

·         Service providers providing airport transfers, accommodation and other ground handling services in connection with the performance of your contract with us.

YOUR LEGAL RIGHTS

 You are entitled to the following:

Request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check the data we lawfully process.

Request for rectification of personal data about you. This enables you to correct incomplete or inaccurate data we hold about you, but we may need to verify the accuracy of new data you provide to us.

Request to have your personal data erased. This allows you to request that we erase or remove your personal data where there is no valid reason for us to continue processing it. You can also exercise your right to opt-out of processing if we process your information unlawfully or if we need to erase your personal data to comply with local law, in which case (see below) you have the right to ask us to erase or remove your personal data. Please note, however, that we may not always be able to fulfill your request for erasure for certain legal reasons, which will be communicated to you at the time you submit your request for erasure.

Object to the processing of your personal data. You can object to personal data processing based on a legitimate interest (or in the interest of a third party) that you consider affects your fundamental rights and freedoms in a particular case. You also have the right to object to our processing of your personal data for direct marketing purposes. In some cases, we may demonstrate that we have legal grounds for processing your information that override your rights and freedoms.

Request to restrict the processing of your personal data. This allows you to request that we stop processing your personal data for a period of time in the following scenarios:

·         If you want us to determine the accuracy of the data.

·         If you do not want us to delete your data even if our use of your data is unlawful.

·         If you want us to retain data to establish, exercise or defend legal claims, even if we are not required to retain the data.

·         You oppose our use of your data, but we need to verify whether we have overridden the legal grounds to use it.

Request to transfer your personal data to you or a third party. We will provide your personal data to you or a third party of your choice in a structured, commonly used, machine-readable format. Note that this right only applies to information that you have consented to us using in the first place or information that we use to perform a contract.

Withdraw consent at any time where consent to the processing of personal data has been given. However, this will not affect the lawfulness of processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide you with certain products or services. We will inform you of the validity of this at the time you withdraw your consent.