Abstract

This clarification text was prepared for İGA Havalimanı İşletmesi A.Ş. (‘‘Company’ or Our Party) in order to process personal data of users (“User”) who visit the website of İGA named https://flyista.com/en, in accordance with the EU General Data Protection Regulation(GDPR), Constitution of the Republic of Turkey, international conventions regarding human rights signed by our country, Personal Data Protection Law numbered 6698 (‘‘LPPD’’) and relevant legislation and decisions of the Turkish Data Protection Authority and ensure that related persons use their rights effectively. All personal data shared with our company may be processed in accordance with the law, in connection with our activity and service objectives, and in a measured manner, according to principles in Article 4 of the LPPD and Article 5 of the GDPR.

Personal Data Processed on Our Website

The personal data collected during the operation of our website may vary depending on which services you use on our website.

  • Identity; The name and surname that you will share with us when creating a member account on our website, the name and surname that you will provide in case you want to contact us and convey your requests and complaints, the name and surname that you will share with us when filling out the form in the “share your story” section,

  • Contact; The contact information that you will share with us when creating a member account on our website, the e-mail address that you will provide when you apply for additional services such as e-newsletter, the e-mail adress that you will provide in case you want to contact us and convey your requests and complaints,

  • If you contact us via https://flyista.com/en/contact# , your name, surname and email address will be processed upon your explicit consent.

  • Location; This is the location information collected by the browser, if you allow the browser you are using. This information is used on the screens displaying the clock on our website to show the user the time and weather according to the user's time zone.

  • Process security information; tracking records of IP and MAC address

  • Legal action; Information or personal data requested from judicial and administrative authorities, the data that are processed to resolve legal disputes, etc.

  • Request, complaint information; Information and records collected within the scope of requests and complaints convey to us about our services for website users.

  • Audio -visual data; photos, visual or audio documents that you will convey to us in the “Your Story” section

  • In case you prefer to use "Your Story" option to share your own stories with us via link of "https://flyista.com/en/yourstory" on our website, your personal data such as your name, surname, your story photos depending your choice, travel text, travel document are processed only if you give your explicit consent.

    After your post is checked by the editors, the post is approved to be published on website. These posts, publicly published on our website, can be shared by our website users on other social media platforms. During these sharings, related services are provided by social media sites named Facebook, Twitter, Instagram, Pinterest ("service providers"). We are not responsible for the privacy practices of such other sources or third parties. Therefore, we recommend that you read the privacy statements of each source that may process personal data.

Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). To review Facebook plugins and views, you can visit: https://developers.facebook.com/docs/plugins

Twitter is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA. To review Twitter buttons and views, you can visit: https://dev.twitter.com/web/tweet-button

Pinterest is operated by Pinterest Inc., 651 Brannan Street, San Francisco, CA 94107, USA. To review the Pinterst buttons and their views, you can visit: https: //policy.pinterest.com/en/privacy-policy

Instagram is operated by Facebook, Inc., ATTN: Privacy Operations 1601 Willow Road Menlo Park, CA 94025 USA. To review Instagram buttons and views, you can visit: https://help.instagram.com/155833707900388

Purposes of Processing Your Personal Data

Your personal data will be processed in accordance with the personal data processing conditions and principles specified in GDPR 5th, 6th and 4th and 5th article of LPPD within the scope of purposes stated below;

  1. To benefit from the additional services offered by the company,

  2. To display the time and weather conditions for the user according to the user's time zone,

  3. Producing content on the website according to users requests,

  4. To fulfil the legal obligations of the company,

  5. To resolve legal disputes that may arise in the future,

  6. Protection and use of the rights of the data owner on the legal basis,

  7. To share their requests and complaints with us and take the necessary steps regarding the complaints.

Your personal data will not be processed for any purpose other than specific purposes above.

Transfer of Your Personal Data

Your personal data will be transfered, within the procedures and principles stipulated in the relevant legislation and in accordance with the conditions and purposes of transferring personal data specified in the 44th, 45th, 46th, 48th, 49th articles in GDPR and the 8th and 9th articles in LPPD to:

  1. authorized official institutions and organizations and private persons authorized by law for the purpose of fulfilling the legal obligation or to entitle, use or protect the rights of the Company,

  2. judicial authorities to carry out or follow judicial proceedings.

Collection Method of Your Personal Data and Legal Reason

Your personal data can only be processed in case one of the personal data processing conditions stipulated in LPPD or GDPR take place. Your personal data are collected by automatic methods as recording your IP information and MAC addresses during your visit to the website, filling out the forms on our website, and by your browser for location data if you give your permission.

IP and MAC addresses of users visiting our website are collected in accordance with Law No. 5651. All other personal data collected on our site are subject to explicit consent, for legal reasons specified in paragraph 1 of Article 6 of the GDPR and paragraph 1 of Article 5 of the LPPD and subparagraphs a, ç and f of the second paragraph and these data collected in a limited and measured manner for the purposes stated in 3th Article of this Clarification Form.

Storage and Destruction of Your Personal Data

The Personal data processed within the activities of our website are stored for a period stipulated in the relevant legislation or in accordance with our processing purposes.

Your personal data is destroyed in case;

The disappearance of all purposes requiring the processing of personal data and the reasons requiring their storage, the amendment or abolition of the relevant legislation provisions,

The processing of personal data is only based on explicit consent and if the data subject withdraws his explicit consent,

The data owner demands the destruction of their personal data by exercising the rights specified in the 15,16,17,18,19,20,21 articles of the GDPR and the 11th article of the LPPD and the application is accepted by us,

The application made by the data owner regarding to request of deletion, destruction or anonymization of his personal data is rejected by us or application is left unanswered within the period stipulated in the GDPR and LPPD; If the data subject makes a complaint to the Board or control authority where the data owner is subject to GDPR and this request is approved by the Board or the control authority,

The maximum period requiring the storage of personal data has expired and conditions that legitimize the storage of personal data do not exist for a longer period.

Rights of the Data Owner

Every data owner whose personal data is processed on our website has the right to manage and determine destiny of their personal data. In this context, users can withdraw their consent for the processing of their personal data at any time. If you do not give consent to the processing of your personal data or withdraw your consent, you can continue to use our website. However you cannot use additional services such as contacting us, creating your own story, e-newsletter.

You cannot delete, change or remove the personal data, content that you share with us but you can always request making these transactions from us.

If you are data subject within the scope of LPPD you have rights below as per 11th Article of LPPD;

  • You can get information about whether your personal data is processed by us,

  • If your personal data are processed by us, you can request information from us,

  • You can learn for which purposes we process your personal data and whether your personal data are used in accordance with these purposes,

  • You can get information about the third parties to whom we have transferred your personal data located in our country or abroad,

  • If we have processed your personal data incompletely or incorrectly, you can request making correction and informing third parties to whom we have transferred your personal data regarding this correction ,

  • In spite of that we have processed your personal data in accordance with the provisions of the LPPD and other relevant national and international legislation, in case the reasons for the processing of your personal data disappear, you can request the deletion or destruction of your personal data and the informing third parties to whom we have transferred your personal data regarding to correction made in this context,

  • If the result occurs against you by analyzing the data we process only through automated systems, you can object to this result,

In the event that you suffer any damage due to the processing of your personal data contrary to the Law, you can demand the compensation of the damage arising from unlawful data processing.

You can contact us via our contact information below for the purpose of exercising your rights listed above and convey the relevant requests to us easily. We will serve a reply to you as soon as possible and within 30 days at the latest, depending on the nature of your application. As a rule, data owners' applications are answered for free. However, we reserve the right to charge you a fee according to the price list will be determined by the Personal Data Protection Board if additional costs emerge.

In order to use your rights regulated in Article 11 of the LPPD, you can apply to our Company via the e-mail address customercare@igairport.aero or by hand at the address “Tayakadın Mahallesi, Terminal Cadde, No: 1/1 Arnavutköy/İSTANBUL”.

If you are in the scope of GDPR (in case you are citizen of EU Members or Iceland, Lichtenstein, Norway), besides having the rights set forth in Article 11 of the LPPD and above, you have right to;

  • Request a copy of your stored personal data (In terms of other copies requested by the data owner, reasonable fee can be charged based on administrative costs. If the data owner makes the request electronically and unless otherwise requested by the data owner, the information is provided in electronic way which is widely used.),
  • Receive your personal data in a structured, machine-readable format and ask us to move / transfer these data to another data controller, 
  • You can request the restriction of the processing activity in case of the conditions specified in article 18 of the GDPR,
  • In some instances, you can object to the processing of your personal data. (in particular, when we do not need to process the data to meet a contractual or other legal requirement, or where we use the data directly for marketing purposes),
  • If you have unresolved concerns, you can make a complaint to a data protection authority, in particular the data protection authority where you live, work, or where you think a breach has occurred

We would like to point out that in some cases your rights may be limited under the GDPR. If the fulfillment of your request will disclose personal data about another person, violate the rights of a third party (including our rights), or if you want us to delete your data that is required to be processed by us to protect or preserve legitimate interests, these rights may be limited under the GDPR. Relevant exemptions are included in the GDPR. If there is a requirement to limit your right in responding to any request you make, you will be informed about the relevant exemption /exemptions.

You can contact us via our contact information below for the purpose of exercising your rights listed above and convey the relevant requests to us easily. We will serve a reply to you as soon as possible and within 30 days at the latest, depending on the nature of your application. As a rule, data owners' applications are answered for free. However, we reserve the right to charge you a fee according to the price list will be determined by the Personal Data Protection Board if additional costs emerge.

In order to use your rights stated above, you can apply to our Company via e-mail address of customercare@igairport.aero or by hand at the address “Tayakadın Mahallesi, Terminal Cadde, No: 1/1 Arnavutköy/İSTANBUL”.