Turkish Airlines Privacy Notice For Shop&Miles

Introduction

Türk Hava Yolları Anonim Ortaklığı (hereinafter referred to as “THY”, “Company” or “We”), pays the utmost attention to the lawfulness of the processing of personal data relating to its customers. This Privacy Notice (“Privacy Notice”) herein have been prepared in accordance with relevant legislation primarily the Article 10 of Law No. 6698 on Protection of Personal Data ('Law') and the EU General Data Protection Regulation (Regulation (EU) 2016/679) (the “GDPR”) to ensure that the personal data of our customers are processed in a transparent manner during processes within the scope of the Shop&Miles (“Shop&Miles”).

In this respect, within this Privacy Notice we provide you information on, as a data controller, which personal data of yours we process and for what purposes within Shop&Miles processes, the third parties we share your data with, your rights and methods that you may contact us.

For more detailed information about the processing of your personal data, you may read the Turkish Airlines Privacy Notice for Miles&Smiles on https://www.turkishairlines.com/en-int/miles-and-smiles/terms-and-conditions/privacy-notice-for-miles-and-smiles/index.html. If you are a passenger subject to GDPR, please find more detailed information on https://www.turkishairlines.com/en-pl/legal-notice/gdpr-privacy-notice/

How Do We Collect Your Personal Data? What Is the Legal Basis for Processing Your Personal Data?

Your personal data can be collected within services we provide with Shop&Miles that is carried out within Miles&Smiles program via Turkish Airlines’ online channels.

As per the Law, your personal data may only be processed where one or more conditions that are stipulated under Law are present. As THY, regardless of the purpose for which we process your personal data, we process it in accordance with the provisions of national and international law, primarily the general principles stated under Article 4 of the Law and by relying on conditions for lawful data processing listed under Article 5 and 6 of the Law:

• It is explicitly permitted by any law
• The processing is directly related to the execution or performance of a contract
• The fulfillment of obligations which THY is subjected to in accordance with the current national or international regulation
• Our legitimate interests, provided that they do not negatively affect the fundamental rights and freedoms of our Customers.

In addition to the above-listed conditions for processing personal data, in some cases we may request your explicit consent to process your personal data. In such cases, your personal data is processed limited to the scope of the explicit consent you have provided with your freewill. You have the opportunity to withdraw your explicit consent at any time.

Which Personal Data We Process?

General information on your personal data processed by THY are as follows (For more detailed information about the processing of your personal data, you may read the Turkish Airlines Privacy Notice for Miles&Smiles on https://www.turkishairlines.com/en-int/miles-and-smiles/terms-and-conditions/privacy-notice-for-miles-and-smiles/index.html):

• Identification Information: name-surname, identification number, passport information
• Contact Information: e-mail address, address, mobile phone number, fax number and contact address details;   
• Customer Process Information: personal data recorded in purchase process such as order, request, shopping history
• Financial Information: credit/debit card details, bank account details, IBAN details, balance information and other financial information; 
• Process sSecurity iInformation: information on website passwords and pins which are created by your party during your utilization of the products or services which are offered on the digital mediums; 
• Request/complaint management information: information and records gathered in relation to the requests and complaints made to our Company regarding our products and services which are associated with the data subject, as well as information in the reports regarding the conclusion of such requests/complaints by our relevant business units;

Why Do We Process Your Personal Data?

We process personal data of customers for the following purposes (For more detailed information about the purposes of your personal data, you may read the Turkish Airlines Privacy Notice for Miles&Smiles on https://www.turkishairlines.com/en-int/miles-and-smiles/terms-and-conditions/privacy-notice-for-miles-and-smiles/index.html 

• Planning and execution of the sales processes of Shop&Miles services,
• Conducting of the after-sale support services regarding the Goods/Services,
• Spending Miles at Shop&Miles and Miles&Smiles Program Partners’ online&offline platforms and to provide Miles for spendings with a credit card, 
• Performing transactions such as buying Miles, transferring Miles, activating miles that are outdated, paying ticket taxes with Miles and converting Miles,
• Contacting our customers and management of customer relations, 
• Provision of information regarding products and services, 
• Conducting of financial and accounting operations, 
• Establishment of information technologies infrastructures and execution and auditing of information security processes and operations, 
• Management and conclusion of your requests and complaints, 
• Prevention of fraud and counterfeiting. 
• Fulfillment of our obligations arising from legislations applicable to our Company and provision of information to the competent authorities and organizations as per the legislation, 

To Whom We Transfer Your Personal Data and Why?

Under certain circumstances, we may transfer your personal data that we process to third parties residing within borders or abroad, in accordance with the provisions of national and international law, particularly Article 8 and 9 of the Law.

The categories of third parties that we may transfer your data to can be listed categorically as follows:

•     Our business partners residing within borders or abroad; e.g., agencies, transportation service providers, global distribution systems, partner airlines that will provide you services during connecting flightsMiles&Smiles Program Partners, (updated list and further information is available under https://www.turkishairlines.com/en-tr/miles-and-smiles/program-partners/index.html)

•      Group companies, e.g. certain services offered by THY are carried out by our affiliates, within this context, your personal data may be shared with our relevant affiliates. You may find more detained information regarding our group companies on Türk Hava Yolları Anonim Ortaklığı Policy on Protection and Processing of Personal Data or from the following link: https://www.turkishairlines.com/en-tr/press-room/about-us/index.html Suppliers; e.g. software companies that we procure technical services, supply companies, transportation service providers,

Enlightenment Regarding Commercial Electronic Communications

According to the Law on Electronic Commerce no. 6563 and the Regulation on Commercial Communication and Commercial Electronic Communications, in accordance with the consent given, your personal data may be processed in order to provide information about our services, to promote our goods and services and to keep you informed about our campaigns. In accordance with the relevant legislation, your permissions regarding commercial electronic communication must be recorded in the Communication Management System (CMS), and within this scope, the contact address (phone number or e-mail address), permission date, communication channel, recipient type and data of permission source will be shared with CMS. You can visit https://iys.org.tr for detail information.

What are Your Rights as Data Subjects?

As data subjects, you are entitled to a number of rights under Article 11 of the Law in relation to your personal data. We would like to inform you about the rights that you are entitled to and the ways you may use them.

The rights you have under the Article 11 of the Law are as follows:

• Learn whether data relating you is being processed.
• Request further information if personal data relating to you has been processed.
• Learn the purpose for the processing of personal data and whether data are being processed in compliance with such purpose.
• Learn the third-party recipients to whom the data are disclosed within the country or abroad.
• Request rectification of the processed personal data which is incomplete or inaccurate and request such process to be notified to third persons to whom personal data is transferred.
• Request deletion or destruction of personal data in the event that the data is no longer necessary in relation to the purpose for which the personal data was collected, despite being processed in line with the Law and other applicable laws and request such process to be notified to third persons to whom personal data is transferred
• Object to negative consequences that you experienced as a result of analysis of the processed personal data by solely automatic means.
• Demand compensation for the damages that you have suffered as a result of an unlawful processing operation.
• If you are a passenger subject to GDPR, please find more detailed information on https://www.turkishairlines.com/en-pl/legal-notice/gdpr-privacy-notice/

In order to easily exercise your rights listed above and send us your relevant requests You may contact us through our contact information below. We will respond you in the shortest time possible, based on the nature of your request and within 30 days at the latest. As a general rule, responses to data subject requests are given free of charge; however, we reserve the right to charge you according to the tariff to be determined by the Personal Data Protection Board in case the request requires additional costs.

Contact Information

Türk Hava Yolları A.O. Genel Yönetim Binası 

Yeşilköy Mah. Havaalanı Cad. No:3/1 34149 Bakırköy/İstanbul

00 90 212 463 63 63

https://www.turkishairlines.com/en-tr/any-questions/customer-relations/index.html