As Mesa Casa Turizm Yatırımları ve İşletmeciliği A.Ş. (“Mesa”), the protection of fundamental rights and freedoms, particularly the right to privacy, as well as ensuring and safeguarding information security and respecting ethical values are among our fundamental principles. As the Data Controller under the Personal Data Protection Law No. 6698 (“Law No. 6698”), our Company provides the following information regarding the protection of your Personal Data in order to fulfil its obligation to inform under Article 10 of the Law No. 6698.

Purposes of Processing and Transferring Personal Data  

Mesa collects and processes your Personal Data in physical and/or electronic environments, in the categories specified below, for the purposes of providing you with information regarding the projects you are interested in; enabling you to benefit from the products and services offered by our Company, carrying out the activities necessary for the provision of such products and services, ensuring the legal and commercial security of our Company and persons with whom our Company has a business relationship, and determining our Company’s commercial and business strategies.

• Identity Information (e.g. Name, Surname)
• Professional Information
• Contact Information (telephone number, address, e-mail address)
• Other Information (Other personal data required for the information form may also be collected.) 

Your Personal Data may be transferred to our service providers, group companies, affiliates, suppliers, business partners, project partners, public institutions and/or private legal entities, solely to the extent necessary for the purposes set out above and for compliance with our legal obligations, where permitted by applicable legislation and deemed necessary within the scope of such purposes.

In addition, your Personal Data may be shared with lawyers, notaries, auditors, consultants and other relevant public authorities and institutions where necessary for the implementation of our corporate policies, internal audit, risk management and reporting activities, for the fulfilment of our legal obligations in line with the purposes specified above, and where necessary for the establishment, exercise or defence of legal rights and interests.

Method of Collection of Personal Data and Legal Grounds

Your Personal Data is collected, used, recorded, stored and processed by our Company through forms or messaging features on our relevant websites, Instagram, Facebook, LinkedIn and YouTube, by providing data subjects with clear and comprehensible written information, in accordance with the principle of lawfulness and fairness, in connection with and limited to the legitimate purposes specified above, and in compliance with the principle of proportionality.

Your Personal Data is processed and shared with the persons and entities specified above on the legal grounds set forth in Article 5/2 of the Personal Data Protection Law No. 6698 (“Law No. 6698”), including the following:

a) Where expressly provided for by law;
b) Where the processing of Personal Data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of the contract;
c) Where processing is necessary for the Data Controller to comply with its legal obligations;
d) Where processing is necessary for the establishment, exercise or protection of a legal right;
e) Where processing is necessary for the legitimate interests of the Data Controller, provided that the fundamental rights and freedoms of the Data Subject are not prejudiced.

Retention Period of Personal Data

Your Personal Data will be retained for the retention periods specified under the applicable legislation or for as long as necessary for the purposes of processing referred to above, and will subsequently be deleted, destroyed or anonymised in accordance with the Law No. 6698.

Security of Personal Data

Our Company is an affiliate of Mesa Holding A.Ş., and your Personal Data is retained on the  holding company’s central infrastructure and servers in accordance with data security standards. Your Personal Data is processed and retained by taking all necessary information security measures to prevent unauthorised access, loss or damage, ensuring that it is not used beyond the specified purpose and scope, encrypting it where necessary, and restricting access to authorised persons only.

Your Rights Pursuant to Article 11 of the Law No. 6698 and Our Contact Information

Pursuant to Article 11 of the Law No. 6698, you have the right to request information regarding  your Personal Data and to request the deletion, destruction, or anonymisation of your Personal Data  by applying to Mesa. You may access further information regarding our policies on Personal Data and cookies, as well as the Data Subject Application Form, on our Company’s website at www.mesacasa.com.tr.

Data Controller:
Mesa Casa Turizm Yatırımları ve İşletmeciliği A.Ş.
Kuzguncuk Mah. Abdullahağa Cad. Mesa Group Cemil Molla Köşkü No: 23 İç Kapı No:1 Üsküdar İstanbul
Tel:
Mersis no: 0619134531400001
KEP: mesacasaturizm@hs01.kep.tr
www.mesacasa.com.tr