Protection and Processing of Personal Data

 

 

UCUZUCUR.COM PERSONAL DATA PROTECTION 

AND PROCESSING INFORMATION TEXT

Last Updated: October 02, 2024

The purpose of this Personal Data Protection and Processing Information Text (Information) is to fulfill the information obligation imposed by Article 10 of the Law on the Protection of Personal Data (KVKK) No. 6698 regarding the use of personal data obtained during the use of the website www.ucuzucur.com (Ucuzucur) managed by Miles Turizm Yatırımları Ticaret Limited Şirketi (Miles Turizm) and/or received from third parties. In addition, it is to inform the Users in a transparent manner about the collection methods, processing purposes, legal reasons and rights of personal data collected by MİLES TURİZM or entered into UCUZUCUR by the positive actions of the Users regarding the use of UCUZUCUR.

UCUZUCUR, which offers airline ticket reservation and sales services, works as an agent for various airline companies. As part of this activity, personal data may be processed as required by the use of UCUZUCUR’s functions, as specified in this disclosure text.

UCUZUCUR takes the highest possible security measures to ensure that personal data is collected, stored and shared in accordance with the law and to protect its confidentiality. In order to achieve this purpose, users’ personal data is processed within the scope and conditions detailed below.

MİLES TURİZM may update and change these Disclosure provisions at any time by publishing them on UCUZUCUR. Updates and changes made by MİLES TURİZM will be valid from the date they are published on UCUZUCUR.

A. DATA CONTROLLER

According to the KVKK, your personal data will be collected and processed by MİLES TURİZM as the data controller within the scope described below.

B. COLLECTED PERSONAL DATA

MİLES TURİZM collects various static (fixed) and dynamic (variable) data from Users using the methods specified below. The data collected by MİLES TURİZM depends on the services and features used by the Users.

Under this heading, the data processed within the scope of the Services provided by MİLES TURİZM and considered as personal data under the KVKK are listed in groups below. Unless otherwise explicitly stated, the terms "personal data" and "special personal data" include the following information within the scope of the terms and conditions specified in the Information Text:

PERSONAL DATA COLLECTED

Identity and Contact Information: Name, surname, mobile phone, home phone, work phone, address, e-mail address, billing information, TR identity number (national identity number), ID photocopy and other similar documents.

Identity Verification Information: Users' membership information, passwords used to verify identity and access the account, Membership type, Social media accounts, contact information, password hints, User numbers.

Demographic Data: Date of birth, age, gender, marital status, interests, travels, preferred language data.

Usage Data and Favorites: Data collected from your devices through various software and technological tools, including but not limited to the reasons for calling MİLES TURİZM or Call Centers, reservation codes, voice recordings, flight ticket destination search information, date and time data when UCUZUCUR was used, flight tickets viewed through UCUZUCUR, dates, times, landing and take-off locations, banner redirection modules such as users can be directed to the relevant product and product supplier companies can contact the user, data specified in the relevant advertisement or banner, filtering, sorting, prioritization options, last login date to UCUZUCUR, membership type, collected points, websites visited, number of pages viewed, duration of visit, entered search terms, information about flights visited, errors and similar problems that occur during service use.

Location Data: Includes data related to users' precise or approximate locations. Location data extracted from GPS data and IP and port addresses, while the user is using MİLES TURİZM's mobile applications, the location data on the mobile device can be used if the User approves.

Cookie Data: Browser information, IP and port data, browser movements, browser selection information and all data that can be obtained through cookies.

Payment Data: Credit card data, invoice and payment information (name, surname, invoice address, Turkish identity number, tax identification number), invoices sent to members and receipt samples of payments received from members, payment number, invoice number, invoice amount, invoice cut-off date, etc.

Survey Responses: Responses to periodic surveys organized by MILES TURİZM within UCUZUCUR and responses to surveys conducted by real and legal persons with whom MILES TURİZM cooperates.

Travel Data: Flight information searches, destination data of interest, reservation information, travel date, time information, meal preferences, flight insurance data, delay and ticket usage data, disability and illness data, baggage data, preferred airline data.

WHERE ARE PERSONAL DATA STORED AND PROCESSED

Your personal data that we obtain may be stored in another country, either domestically or abroad, where MİLES TURİZM or its affiliates, subsidiaries or service providers with whom it cooperates have facilities, and may be processed in accordance with the purposes set forth in this Disclosure Text and in proportion to these purposes.

Your personal data collected within the scope of this Disclosure Text will be processed in accordance with the provisions herein and within the scope of the legislation in force in the country where the data is stored and processed, and within the scope of the security measures foreseen.

FOR WHICH PURPOSES WILL PERSONAL DATA BE PROCESSED

In line with the purposes set forth in the disclosure text and the Terms of Use Agreement, your personal data will be processed in accordance with the Principles and Processing Conditions regulated by the KVKK No. 6698 and for the purposes detailed below:

Identity and Contact Information: Primarily as required by the service contract, internal evaluation, communication, User registration, obtaining potential customer information, developing after-sales processes, business development, collection, customer portfolio management, promotion, analysis, complaint management, managing customer satisfaction processes, marketing, advertising, research, billing, event notification, execution of operational activities, measurement and development of service quality, audit, control, optimization, customer verification, marketing, sales, advertising, after-sales services, detection and prevention of fraud;

Identity Verification Information: User registration, problem/error reporting, control, development and execution of operational activities, development of after-sales processes, business development, collection, internal evaluation, customer portfolio management, measurement of service quality, communication, optimization, audit, risk management, audit, customer verification, detection and prevention of fraud;

Demographic Data: Promotion, internal evaluation, analysis, communication, development of after-sales processes, business development, collection, usage data and areas of interest, favorites, marketing, sales, advertising, audit and control, risk management, development of after-sales processes, business development, collection, internal evaluation, customer portfolio management, after-sales services, measurement and development of service quality, communication, execution of complaint management processes, execution and development of operational activities, registration, problem/error reporting;

Usage Data and Favorites: User registration, problem/error reporting, control, execution and development of operational activities, after-sales services and development of after-sales processes, business development, collection, internal evaluation, online behavioral advertising and marketing, customer portfolio management, measurement and development of service quality, communication, optimization, audit, risk management and control, promotion, analysis, determination of areas of interest, scoring, profiling, marketing, sales, advertising, communication, execution of complaint management processes, registration, problem/error reporting;

Location Data: Use of location-dependent or location-related UCUZUCUR functions, audit and control, risk management;

Cookie Data: Control, execution and development of operational activities, after-sales services and development of after-sales processes, business development, collection, internal evaluation, online behavioral advertising and marketing, customer portfolio management, measurement and development of service quality, communication, optimization, audit, risk management and control, promotion, analysis, determination of areas of interest, scoring, profiling, marketing, sales, advertising, communication, complaint management processes, registration, problem/error reporting;

Payment Data: Managing the billing process, accounting, development of after-sales processes, business development, collection, internal evaluation, scoring, profiling, customer portfolio management, after-sales services, communication, marketing, audit, control, processes carried out with payment service providers;

Survey Responses: Information requested from users who respond to periodic surveys organized by MİLES TURİZM within UCUZUCUR, real and/or legal persons with whom MİLES TURİZM cooperates for the use of UCUZUCUR functions and for these functions to be fulfilled by MİLES TURİZM, and third real and legal persons with whom UCUZUCUR cooperates within the scope of all processing activities specified above in accordance with the purposes of use, to directly market to these users, perform statistical analysis, improve their processes and create a database;

Travel Data: Establishment and execution of the contract, execution and development of operational activities, after-sales services and development of after-sales processes, business development, collection, in-company evaluation, online behavioral advertising and marketing, customer portfolio management, measurement and development of service quality, communication, optimization, audit, risk management and control, promotion, analysis, determination of areas of interest, scoring, profiling, marketing, sales, advertising, communication, complaint management processes, registration, problem/error reporting;

Travel Data: Establishment and execution of the contract, execution and development of operational activities, after-sales services and development of after-sales processes, business development, collection, in-company evaluation, online behavioral advertising and marketing, customer portfolio management, measurement and development of service quality, communication, optimization, audit, risk management and control, promotion, analysis, determination of areas of interest, scoring, profiling, marketing, sales, advertising, communication, execution of complaint management processes, registration, problem/error reporting.

It will be processed within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698 for the purposes of fulfilling the obligations arising from the contracts made with business partners/customers/suppliers by MİLES TURİZM, establishing rights, protecting rights, conducting commercial and legal evaluation processes, conducting legal and commercial risk analyses, conducting legal compliance processes, conducting financial affairs, fulfilling legal requirements, fulfilling the decisions of authorized institutions, organizations and authorities, and responding to their requests, in order to fulfill legal and commercial obligations within the framework of the contracts made or activities carried out with third parties in a business relationship with MİLES TURİZM and the obligations arising from legal regulations.

PERIOD OF STORAGE OF PERSONAL DATA

MİLES TURİZM will store the personal data it obtains for the period required for the purpose for which it is processed, within the framework of the conditions specified in this Disclosure text and the Terms of Use Agreement, so that Users can benefit from the Service in the best way possible, and in order to fulfill the obligations arising from the nature of the Terms of Use Agreement.

In addition, in the event of any dispute that may arise from the Terms of Use Agreement, MİLES TURİZM may store personal data for the limited purpose of conducting administrative or judicial processes within the scope of the dispute and for the statute of limitations determined in accordance with the relevant legislation.

D. TO WHOM AND FOR WHAT PURPOSE PERSONAL DATA PROCESSED MAY BE TRANSFERRED

MİLES TURİZM may share the personal data of the User and the new data obtained using these personal data or the personal information entered into UCUZUCUR by the positive actions of the Users, primarily to fulfill the requirements of the Membership Agreement and the Services, to improve the User experience (including improvement and personalization), to ensure the security of the Users, to detect and prevent fraud, to develop the Services, to conduct operational evaluation research, to fix errors, to verify User identities, to improve system performance, in order to achieve any of the purposes specified in the processing purposes section above, with outsourcing service providers, airline companies, airport administrations, national and international airline regulatory and supervisory bodies, airline coordination organizations, law offices, research companies, call centers, software companies related to complaint management and ensuring security, agencies, consultancy companies, companies in the printing sector, banks, third party real and/or legal entities including social media platforms and authorized institutions, organizations, authorities, administrative and judicial bodies within the scope of legal obligations.

In addition, the User's Name and Contact Information may be shared with payment institutions for the purpose of identity verification in accordance with the framework agreement of the payment institution that the User will approve at the payment stage and in accordance with the "Regulation on Measures to Prevent Laundering Proceeds of Crime and Financing of Terrorism" published in the Official Gazette dated January 9, 2008 and numbered 26751.

Your personal data obtained through cookies placed on your device may be shared with third parties within the scope and purposes specified in this Disclosure Text.

MİLES TURİZM may transfer personal data to third parties domestically and abroad within the categories and purposes specified above, limited and proportionate to these purposes. When the User wants to log in to UCUZUCUR with Facebook or Google, the login information may be shared with Google or Facebook providers located abroad for the purpose of identity verification.

E. METHOD AND LEGAL REASON FOR COLLECTING PERSONAL DATA

MİLES TURİZM collects your personal data in order to work more qualified and provide you with the best experience. Your data is collected using the following methods:

Data You Provide Directly to MİLES TURİZM: It refers to personal data provided by MİLES TURİZM on the Users' own initiative for the performance of the Service and before or during the use of UCUZUCUR. This personal data covers all personal data provided directly by Users as a result of MİLES TURİZM's positive actions. For example, name-surname, contact information, identity information, flight ticket reservation-sales information, invoice information, demographic data are included in such data.

Data We Obtain When You Use Our Platform: It covers personal data regarding the usage habits of Users obtained through certain software or technological tools during the service provided by MİLES TURİZM. For example, location data and preferred destinations, as well as areas of interest and usage data, are included in this type of data.

In order to conduct online behavioral advertising and marketing, MİLES TURİZM may associate the behavior of the user visiting the site, even if they are not a member, with a cookie in the browser and define remarketing lists based on metrics such as the number of pages viewed, duration of visits and number of goal completions.

Your personal data collected through these methods may be processed and transferred for the purposes specified in this Disclosure Text within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698.

Legal bases for collecting personal data;

Membership Agreement, Terms of Use and execution of the contract based on these, establishment and protection of rights

Legal regulations regulating electronic commerce activities, financial and tax matters, consumer protection and other issues

MİLES TURİZM's activities related to UCUZUCUR are based on its legitimate interest in collecting the data necessary for the provision of services, especially to prevent fraud.

F. OUR PRECAUTIONS AND COMMITMENTS REGARDING DATA SECURITY

MİLES TURİZM undertakes to protect personal data securely. Technical and administrative measures are carried out using various methods and security technologies to prevent unlawful processing and access of personal data and to ensure the protection of personal data in order to ensure the appropriate level of security.

MİLES TURİZM will not disclose the personal data it obtains to anyone else in violation of this Disclosure Text and the provisions of the KVKK No. 6698 and will not use it for purposes other than the purpose of processing. MİLES TURİZM declares that in case of sharing personal data of Users with external source service providers in accordance with this Disclosure Text, it will carry out the necessary warning and inspection activities to ensure that the said external source suppliers also comply with the commitments under this article.

In case links are provided to other applications via UCUZUCUR, MİLES TURİZM does not bear any responsibility for the privacy policies and contents of the linked applications.

The User undertakes that the information subject to this Disclosure is complete, accurate and up-to-date, and that in case of any change in this information, they will immediately update it at https://www.ucuzucur/kullanici/profil. MİLES TURİZM will not have any responsibility if the User does not provide up-to-date information.

When the periods required by law to be stored expire, judicial processes are completed or other requirements are eliminated, personal data is deleted, destroyed or anonymized directly by MİLES TURİZM or upon the User's request.

G. RIGHTS OF THE PERSONAL DATA OWNER STATED IN ARTICLE 11 OF LAW NO. 6698

As personal data owners, if you submit your requests regarding your rights to MİLES TURİZM using the methods set out below, MİLES TURİZM will finalize the request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. No fee will be charged for up to ten pages of response. A processing fee of 1 Turkish Lira will be charged for each page over ten pages. If the response to the application is given on a recording medium such as a CD or flash memory, the fee that may be requested by MİLES TURİZM will not exceed the cost of the recording medium.

In this context, personal data owners;

To learn whether or not their personal data has been processed,

To request information about their personal data if they have been processed,

To learn the purpose of processing personal data and whether they are used in accordance with their purpose,

To know the third parties to whom personal data is transferred domestically or abroad,

To request correction of personal data if they are processed incompletely or incorrectly and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,

To request deletion or destruction of personal data if the reasons requiring processing are eliminated despite the fact that it has been processed in accordance with the provisions of Law No. 6698 and other relevant laws and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,

To object to the emergence of a result against the person by analyzing the processed data exclusively through automated systems,

To request compensation for the damages incurred due to the unlawful processing of personal data.

You may submit your request regarding exercising your rights specified above in Turkish; You can send it by hand with documents proving your identity to Miles Tourism Investments Trade Limited Company, as the data controller, "Atakent Mah. Turgut Özal Bulvarı Dumankaya Miks Sitesi B-3 Blok No. 48/3/24 Küçükçekmece, Istanbul / Turkey - 34307", through a notary, as an e-mail registered to [email protected] or by other methods determined by the Personal Data Protection Authority.

MİLES TURİZM reserves the right to verify your identity before responding.

In your application;

Your name, surname and signature if the application is in writing,

For citizens of the Republic of Turkey, your T.C. identity number, if you are a foreigner, your nationality, passport number or your identity number if you have one,

Your residence or workplace address for notification,

Your e-mail address, telephone and fax number for notification, if any,

Your subject of the request must be included and, if any, information and documents related to the subject must also be added to the application.