WEBSITE PRIVACY NOTICE

WEBSITE PRIVACY NOTICE

WEBSITE PRIVACY NOTICE

 

  1. DATA CONTROLLER

 

Your personal data may be processed by TAV Ege Terminal Investment, Development and Operation Co (the “Company”), acting as the data controller, within the scope described below, in accordance with the Law No. 6698 on the Protection of Personal Data (the “Law”), through the activities carried out on this website (https://izmirairport.com/).

 

  1. METHOD OF COLLECTION, LEGAL BASIS, AND PURPOSES OF PROCESSING OF YOUR PERSONAL DATA

Your personal data is collected automatically when you browse the website https://izmirairport.com/, perform transactions on the website, or contact us through our communication channels.

Your collected personal data will be processed in accordance with the fundamental principles set forth under the Law and within the personal data processing conditions specified in Article 5 of the Law, for the purposes outlined below.

Personal data obtained through the website shall be securely deleted, destroyed, or anonymized within a reasonable period once the purposes of processing cease to exist, without prejudice to the retention periods stipulated under applicable legislation.

Categories of Personal Data

Legal Ground

Purpose of Processing

Identity (name and surname)

 

 

 

Processing is necessary for the conclusion or performance of a contract to which the data subject is a party (Article 5/2(c) of the Law)

 

Processing is necessary for compliance with a legal obligation to which the data controller is subject (Article 5/2(ç) of the Law)

Processing is necessary for the establishment, exercise, or protection of a right (Article 5/2(e) of the Law)

 

Processing is necessary for the legitimate interests of the data controller, provided that such processing does not harm the fundamental rights and freedoms of the data subject (Article 5/2(f) of the Law)

Planning and/or execution of activities necessary to ensure the legal, commercial, and technical security of our Company and the relevant persons having a business relationship with our Company

 

Carrying out the necessary work by our business units for the realization of the commercial and/or operational activities conducted by our Company and execution of the related business processes

 

Follow-up of requests and/or complaints

Contact Data (phone number, email address)

 

 

Processing is necessary for the conclusion or performance of a contract to which the data subject is a party (Article 5/2(c) of the Law)

 

Processing is necessary for compliance with a legal obligation to which the data controller is subject (Article 5/2(ç) of the Law)

 

Processing is necessary for the establishment, exercise, or protection of a right (Article 5/2(e) of the Law)

 

Planning and/or execution of activities necessary to ensure the legal, commercial, and technical security of our Company and the relevant persons having a business relationship with our Company

 

Carrying out the necessary work by our business units for the realization of the commercial and/or operational activities conducted by our Company and execution of the related business processes

 

Planning and/or execution of our Company’s commercial, financial, and/or business strategies

 

Follow-up of requests and/or complaints

Transaction Security (IP address and log records)

 

Processing is necessary for compliance with a legal obligation to which the data controller is subject (Article 5/2(ç) of the Law)

 

Ensuring system and infrastructure management for the effective, secure, and uninterrupted operation of the website

 

Detection, prevention, and execution of legal processes related to unlawful activities such as fraud, theft, and misuse

 

Follow-up of legal processes and establishment, exercise, and protection of our rights and interests

 

Ensuring compliance with ground services security policies and procedures

 

  1. PARTIES TO WHOM YOUR PERSONAL DATA IS TRANSFERRED AND PURPOSES OF TRANSFER

Your personal data may be transferred to the parties listed below for the purposes specified, in accordance with the personal data processing conditions and purposes set forth under Articles 8 and 9 of the Law:

 

Parties

Data Categories

Purpose of Transfer

Legal Basis of International Transfer

 

Service Providers (Information technology infrastructure service providers)

Identity, Contact, Customer Transaction, Transaction Security

Your personal data obtained through our website is stored on the servers of cloud service providers located abroad in order to receive storage and hosting services, based on our legitimate interests legal ground.

 

The transfer is carried out based on standard contractual clauses executed pursuant to Article 9/4(c) of the Law.

Authorized Public Institutions and Organizations (judicial authorities or relevant law enforcement authorities)

Identity, Contact, Audio Recording Data

Your personal data may be shared for the resolution of legal disputes or upon request in accordance with applicable legislation.

 

No international transfer is carried out.

 

 

  1. RIGHTS OF THE DATA SUBJECT UNDER ARTICLE 11 OF THE LAW NO. 6698

As a data subject, you are entitled to the rights set forth under Article 11 of the Law. You may submit your requests regarding your rights by completing the TAV Ege Terminal Investment, Development and Operation Co. Data Subject Application Form, which is available at https://izmirairport.com/, and sending it to our Company.

 

Depending on the nature of your request, your application will be concluded free of charge as soon as possible and at the latest within thirty days. However, if the process requires an additional cost, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Board.