Maxxroyal Members Loyalty Programme Privacy Notice
Prepared in accordance with the Personal Data Protection Act No. 6698.
Dear Maxxroyal Members,
As part of the Maxx Royal Members Loyalty Programme, Voyag Tourism, Hotel Management, Construction, Industry and Trade Joint Stock Company, MRA Tourism and Hotel Management Joint Stock Company and ETS Ersoy Tourist Services JSC ("the Company" or "Maxx Royal"), we wish to inform you, in accordance with the Law on the Protection of Personal Data No. 6698, regarding the personal data we will process in our capacity as "Data Controller".
A privacy notice regarding your personal data that has been or will be processed is provided below.
1. Identity of the Data Controller
| Company Name |
|
| Address | Merdivenköy Mah. Nur Sok. C Blok No:1, İç Kapı No:26, Kadıköy/İstanbul |
| Telephone | +90 242 715 33 80 |
| E-posta / Email | kvkk@maxxroyal.com |
| KEP | voyageotel@hs01.kep.tr |
2. Personal Data We Process, Purposes & Legal Bases
| Personal Data Processing Process | Data Collected | Purpose of Processing | Legal Basis |
|---|---|---|---|
|
Maxxroyal Members Account Creation, Accommodation/ Expenditure Information Tracking and Points Transactions |
Identity (First Name, Surname, Date of Birth, Gender), Contact (Email, Telephone), Customer Transaction Information (Membership No, Points Balance, Purchase Amount, Accommodation History) |
Processing membership procedures, verifying identity, calculating and updating loyalty points, ensuring you benefit from gifts, discounts and benefits |
Necessity for performance of a contract; legitimate interests of the data controller |
|
Behavioural Analysis and Profiling: Analysis and Reporting |
Customer Transaction Information (accommodation habits, preferred hotels, survey results) |
Developing services, measuring customer satisfaction, analysing user preferences, providing personalised content, offers and campaigns, planning and carrying out marketing activities | Explicit consent |
|
Commercial Electronic Communications Process |
Contact details (email, telephone); Legal transaction details (commercial communication consent/refusal, time and date of consent, method of communication) |
Establishing commercial communication; advertising, campaigns, surveys, notifications and marketing activities | Explicit consent; data controller's legal obligation |
3. Purpose of Transferring Personal Data & Recipient Groups
| Recipient Group | Purpose of the Transfer | Legal Basis for the Transfer |
|---|---|---|
| Suppliers and Business Partners | Data obtained on an outsourced basis, limited to services necessary for the company's commercial activities (server, storage, archiving, mobile network, hosting, IT support, legal) | Legitimate interests of the data controller |
| Authorised Bodies and Organisations | Fulfil legal obligations regarding notifications, declarations and audits; judicial/official correspondence; legal disputes and exercise of legal rights | Data controller's legal obligation; establishment, exercise or defence of a legal claim |
| Group Companies | Use of shared software and email servers; loyalty card discounts, ticketing, transfers, and guide services | Legitimate interests of the data controller |
4. Method of Collecting Personal Data
- Automatically via physical and/or electronic membership application forms, the website or mobile app when you submit your details.
- Automatically, via point-of-sale (POS) systems, online systems, hotel management systems and loyalty programme software.
- By you submitting your personal data via the contact form on the website or social media channels, collected by semi-automated means.
5. Your Rights Under the Law
As a data subject, you may contact us by post at "Merdivenköy Mah. Nur Sok. Block C, No. 1, Internal Door No. 26, Kadıköy/Istanbul" or by email at kvkk@maxxroyal.com regarding the rights you hold under Article 11 of the Act, as detailed in our Personal Data Processing and Privacy Policy available on the website.