Law on the Protection of Personal Data (LPPD)

Company: Zenrota Turizm Seyahat ve Ticaret Limited Şirketi (Zenrota Tourism Travel and Trade Limited Company)

Effective Date: 

1. Introduction

Pursuant to the Law on the Protection of Personal Data No. 6698 ("LPPD"), as Zenrota, we value the security of your personal data and, in this context, as the Data Controller, we process your personal data within the framework explained below.

2. Processed Personal Data

The personal data provided by you or obtained within the scope of our services may include:

• Identity Information (name, surname, T.R. identity number, date of birth, etc.)
• Contact Information (phone, e-mail, address, etc.)
• Financial Information (payment information, invoicing information, etc.)
• Travel Information (plane/bus ticket, hotel reservation, car/villa/yacht rental, tour packages, etc.)
• Digital Data (IP address, device information, cookie records, etc.)

3. Purposes of Processing Personal Data

The collected personal data is processed for the following purposes in accordance with Articles 5 and 6 of the LPPD:

• To carry out reservation and purchase transactions
• To improve service quality and ensure customer satisfaction
• To send campaign and informational announcements
• To fulfill legal obligations
• To prevent security and fraud activities

4. Transfer of Personal Data

Your personal data may be transferred, in accordance with the relevant provisions of the LPPD, to:

• Our service provider business partners (airline companies, bus companies, hotels, car/villa/yacht rental companies, etc.),
• Authorized public institutions and organizations,
• Financial institutions for payment transactions.

5. Method of Collecting Personal Data and Legal Basis

Your personal data is collected through our website, call center, mobile applications, contracts, forms, and electronic environments.

Your data is processed based on the legal grounds of the performance of the contract, fulfillment of legal obligations, our legitimate interests, and your explicit consent.

6. Processing of Special Categories of Personal Data within the Scope of Health Tourism

Your special categories of personal data, especially health data, which are shared with us or obtained during the provision of services within the scope of health tourism, are processed solely for the following purposes and by taking the necessary security measures, in accordance with Article 6 of the Law on the Protection of Personal Data No. 6698, the Turkish Ministry of Health's legislation regarding health tourism, and relevant regulations:

• Planning, provision, and coordination of health tourism services,

  (planning treatment processes, communication with relevant medical centers/healthcare organizations, appointment processes, consultation services, management of pre-assessment forms and medical reports)

• Sharing necessary information with domestic and international healthcare organizations,

  (solely for the purpose of fulfilling the service and in compliance with LPPD art.6/3)

• Fulfillment of legal obligations, audits, and requests from the Ministry of Health
• Creation, storage, and reporting of international patient records
• Conducting post-treatment follow-up and satisfaction processes

Your special categories of personal data can only be processed and transferred based on:

$\emptyset$ Your explicit consent, or

$\emptyset$ Regarding data on health and sexual life, for the purposes of protecting public health, conducting medical diagnosis, treatment, and care services, by persons under the obligation of secrecy or authorized institutions/organizations in accordance with LPPD art.6/3.

Zenrota takes all necessary technical and administrative security measures, in line with the Board decisions, for the protection of special categories of personal data. In this context, data is protected within the framework of access restrictions, encryption, logging, authorization matrix, and confidentiality policies.

7. Your Rights Under the LPPD

In accordance with Article 11 of the LPPD, you have the following rights:

• To learn whether your personal data is being processed
• To request information if your personal data has been processed
• To learn the purpose of the processing and whether the data is used for that purpose
• To know the third parties to whom the data is transferred domestically or abroad
• To request the rectification (correction) of incomplete or inaccurate data
• To request the deletion or destruction of the data within the framework of the conditions stipulated in the LPPD
• To request that these operations be notified to third parties
• To object to the emergence of a result against you solely through the analysis of processed data by automated systems
• To demand compensation for damages if you suffer damage due to the unlawful processing of your data

8. Contact
 

You can contact us to exercise your rights under the LPPD:

📧 Email: [email protected]

📞 Phone: +90 539 234 65 02

🏢 Address: Altunizade Mahallesi, Okul Sokak No:1 Altunizade Sitesi A Blok Kat: 4 Daire: 17, 34662 Üsküdar / İstanbul