Data controller registry
Categories, purposes, recipients, retention periods, data-subject groups, transfers abroad and security measures in the VERBIS registry.
Bera Turizm İnşaat Seyahat Tic. A.Ş.
Alanya
Konaklı Mah. Kuyumcu Cad. No.12 07410 Alanya / Antalya / Türkiye
Telephone: 0 242 510 05 00 · Fax: 0 242 565 03 15 · Email: alanya@bera.com.tr
Konya
Nişantaş Mah. Dr. M. Hulusi Baybal Cad. No.9 42060 Selçuklu / Konya / Türkiye
Telephone: 0 332 238 42 42 · Fax: 0 332 238 10 89 · Email: konya@bera.com.tr
The information below is taken from the VERBIS registry of the Turkish Personal Data Protection Authority. Registry record
Categories
The personal data categories processed by the controller named above are listed below.
1-Identity
Personal data
Name and surname, mother's and father's name, mother's maiden name, date of birth, place of birth, marital status, identity card serial number, Turkish ID number, etc.
2-Contact
Personal data
Address number, email address, contact address, registered electronic mail (KEP), telephone number, etc.
4-Personnel
Personal data
Payroll information, disciplinary investigation, hiring records, asset declaration, résumé, performance evaluation reports, etc.
5-Legal proceedings
Personal data
Information in correspondence with judicial authorities, information in the case file, etc.
6-Customer transactions
Personal data
Call-center records, invoice, promissory note and cheque details, counter receipt details, order information, request information, etc.
7-Physical premises security
Personal data
Entry and exit records of employees and visitors, camera recordings, etc.
8-Transaction security
Personal data
IP address, website sign-in and sign-out information, password information, etc.
9-Risk management
Personal data
Information processed to manage commercial, technical and administrative risks, etc.
10-Finance
Personal data
Balance-sheet information, financial performance, credit and risk information, asset information, etc.
11-Professional experience
Personal data
Diploma details, courses attended, in-service training, certificates, transcript details, etc.
12-Marketing
Personal data
Purchase history, surveys, cookie records, information obtained through campaigns, etc.
13-Visual and audio records
Personal data
Visual and audio recordings, etc.
18-Association membership
Special category personal data
Association membership information, etc.
21-Health information
Special category personal data
Information on disability, blood type, personal health information, devices and prostheses used, etc.
23-Criminal conviction and security measures
Special category personal data
Information on criminal convictions, information on security measures, etc.
26-Other information - Family information, employment data, signature information, website usage data, request and complaint management, reputation management, incident management, insurance information, vehicle information, compliance information, audit and inspection information, residence and work permit information for foreign nationals
Personal data
Data types to be specified by the user, etc.
Purposes
The purposes for which the controller named above processes personal data are listed below.
1-Identity
- Carrying out emergency management processes
- Carrying out information security processes
- Carrying out selection and placement of candidates, interns and students
- Carrying out candidate application processes
- Meeting obligations arising from employment contracts and legislation for employees
- Carrying out benefits and interests processes for employees
- Carrying out audit and ethics activities
- Carrying out training activities
- Managing access authorizations
- Carrying out activities in line with the legislation
- Carrying out finance and accounting
- Carrying out loyalty processes for the company, products and services
- Ensuring security of physical premises
- Carrying out business continuity activities
- Carrying out logistics activities
- Carrying out after-sales support for goods and services
- Carrying out sales of goods and services
- Carrying out marketing analysis
- Carrying out performance evaluation
- Carrying out advertising, campaign and promotion processes
- Carrying out risk management processes
- Carrying out social responsibility and civil-society activities
- Ensuring security of movable property and resources
- Carrying out the remuneration policy
- Carrying out marketing of products and services
- Carrying out investment processes
- Carrying out talent and career development
- Carrying out assignment processes
- Following up and carrying out legal affairs
- Carrying out internal audit, investigation and intelligence activities
- Carrying out communication activities
- Planning human resources processes
- Carrying out and supervising business activities
- Carrying out occupational health and safety activities
- Carrying out procurement of goods and services
- Carrying out production and operations for goods and services
- Carrying out customer relationship management
- Carrying out activities for customer satisfaction
- Organization and event management
- Carrying out retention and archiving
- Carrying out contract processes
- Following up requests and complaints
- Carrying out supply-chain management
- Ensuring security of the controller's operations
- Work and residence permit procedures for foreign staff
- Providing information to authorized persons, institutions and organizations
- Carrying out management activities
- Creating and following up visitor records
2-Contact
- Carrying out business continuity activities
- Carrying out logistics activities
- Carrying out after-sales support for goods and services
- Carrying out social responsibility and civil-society activities
- Carrying out investment processes
- Carrying out management activities
- Carrying out emergency management processes
- Carrying out information security processes
- Carrying out selection and placement of candidates, interns and students
- Carrying out candidate application processes
- Meeting obligations arising from employment contracts and legislation for employees
- Carrying out benefits and interests processes for employees
- Carrying out audit and ethics activities
- Carrying out training activities
- Managing access authorizations
- Carrying out activities in line with the legislation
- Carrying out finance and accounting
- Carrying out loyalty processes for the company, products and services
- Carrying out assignment processes
- Following up and carrying out legal affairs
- Carrying out internal audit, investigation and intelligence activities
- Carrying out communication activities
- Planning human resources processes
- Carrying out and supervising business activities
- Carrying out occupational health and safety activities
- Carrying out procurement of goods and services
- Carrying out sales of goods and services
- Carrying out production and operations for goods and services
- Carrying out customer relationship management
- Carrying out activities for customer satisfaction
- Organization and event management
- Carrying out marketing analysis
- Carrying out advertising, campaign and promotion processes
- Carrying out risk management processes
- Carrying out retention and archiving
- Carrying out contract processes
- Following up requests and complaints
- Ensuring security of movable property and resources
- Carrying out supply-chain management
- Carrying out marketing of products and services
- Ensuring security of the controller's operations
- Work and residence permit procedures for foreign staff
- Providing information to authorized persons, institutions and organizations
- Creating and following up visitor records
4-Personnel
- Ensuring security of movable property and resources
- Carrying out business continuity activities
- Carrying out emergency management processes
- Carrying out information security processes
- Carrying out selection and placement of candidates, interns and students
- Carrying out candidate application processes
- Meeting obligations arising from employment contracts and legislation for employees
- Carrying out benefits and interests processes for employees
- Carrying out audit and ethics activities
- Carrying out training activities
- Managing access authorizations
- Carrying out activities in line with the legislation
- Carrying out finance and accounting
- Carrying out assignment processes
- Following up and carrying out legal affairs
- Carrying out internal audit, investigation and intelligence activities
- Carrying out communication activities
- Planning human resources processes
- Carrying out and supervising business activities
- Carrying out occupational health and safety activities
- Carrying out performance evaluation
- Carrying out retention and archiving
- Carrying out contract processes
- Carrying out the remuneration policy
- Carrying out talent and career development
- Providing information to authorized persons, institutions and organizations
- Carrying out management activities
5-Legal proceedings
- Meeting obligations arising from employment contracts and legislation for employees
- Carrying out benefits and interests processes for employees
- Carrying out audit and ethics activities
- Carrying out activities in line with the legislation
- Carrying out finance and accounting
- Following up and carrying out legal affairs
- Carrying out internal audit, investigation and intelligence activities
- Carrying out communication activities
- Planning human resources processes
- Carrying out occupational health and safety activities
- Carrying out procurement of goods and services
- Carrying out sales of goods and services
- Carrying out customer relationship management
- Carrying out retention and archiving
- Carrying out contract processes
- Following up requests and complaints
- Providing information to authorized persons, institutions and organizations
- Carrying out management activities
- Carrying out after-sales support for goods and services
6-Customer transactions
- Carrying out information security processes
- Carrying out activities in line with the legislation
- Carrying out finance and accounting
- Carrying out loyalty processes for the company, products and services
- Carrying out communication activities
- Carrying out sales of goods and services
- Carrying out production and operations for goods and services
- Carrying out customer relationship management
- Carrying out activities for customer satisfaction
- Carrying out marketing analysis
- Carrying out advertising, campaign and promotion processes
- Carrying out retention and archiving
- Carrying out contract processes
- Following up requests and complaints
- Carrying out marketing of products and services
- Providing information to authorized persons, institutions and organizations
- Carrying out after-sales support for goods and services
7-Physical premises security
- Carrying out business continuity activities
- Carrying out occupational health and safety activities
- Managing access authorizations
- Meeting obligations arising from employment contracts and legislation for employees
- Carrying out emergency management processes
- Carrying out information security processes
- Carrying out audit and ethics activities
- Carrying out activities in line with the legislation
- Ensuring security of physical premises
- Following up and carrying out legal affairs
- Carrying out internal audit, investigation and intelligence activities
- Carrying out communication activities
- Carrying out and supervising business activities
- Carrying out performance evaluation
- Following up requests and complaints
- Ensuring security of movable property and resources
- Creating and following up visitor records
8-Transaction security
- Carrying out information security processes
- Carrying out audit and ethics activities
- Managing access authorizations
- Carrying out activities in line with the legislation
- Carrying out finance and accounting
- Ensuring security of physical premises
- Carrying out retention and archiving
- Providing information to authorized persons, institutions and organizations
- Carrying out management activities
- Carrying out assignment processes
9-Risk management
- Carrying out emergency management processes
- Following up and carrying out legal affairs
- Carrying out communication activities
- Carrying out occupational health and safety activities
- Carrying out business continuity activities
- Carrying out risk management processes
- Carrying out contract processes
- Carrying out investment processes
10-Finance
- Meeting obligations arising from employment contracts and legislation for employees
- Carrying out benefits and interests processes for employees
- Carrying out finance and accounting
- Following up and carrying out legal affairs
- Carrying out and supervising business activities
- Carrying out procurement of goods and services
- Carrying out sales of goods and services
- Carrying out retention and archiving
- Carrying out contract processes
- Providing information to authorized persons, institutions and organizations
- Carrying out investment processes
- Carrying out business continuity activities
- Carrying out activities in line with the legislation
11-Professional experience
- Carrying out management activities
- Carrying out talent and career development
- Carrying out the remuneration policy
- Carrying out business continuity activities
- Carrying out occupational health and safety activities
- Carrying out selection and placement of candidates, interns and students
- Carrying out candidate application processes
- Meeting obligations arising from employment contracts and legislation for employees
- Carrying out benefits and interests processes for employees
- Carrying out training activities
- Carrying out activities in line with the legislation
- Carrying out assignment processes
- Following up and carrying out legal affairs
- Planning human resources processes
- Carrying out and supervising business activities
- Carrying out retention and archiving
- Providing information to authorized persons, institutions and organizations
12-Marketing
- Carrying out finance and accounting
- Carrying out communication activities
- Carrying out after-sales support for goods and services
- Carrying out sales of goods and services
- Carrying out customer relationship management
- Carrying out activities for customer satisfaction
- Carrying out marketing analysis
- Carrying out advertising, campaign and promotion processes
- Carrying out contract processes
- Following up requests and complaints
- Carrying out marketing of products and services
13-Visual and audio records
- Carrying out contract processes
- Carrying out occupational health and safety activities
- Carrying out training activities
- Carrying out candidate application processes
- Carrying out selection and placement of candidates, interns and students
- Carrying out emergency management processes
- Carrying out information security processes
- Meeting obligations arising from employment contracts and legislation for employees
- Carrying out audit and ethics activities
- Ensuring security of physical premises
- Following up and carrying out legal affairs
- Carrying out internal audit, investigation and intelligence activities
- Carrying out and supervising business activities
- Organization and event management
- Carrying out retention and archiving
- Providing information to authorized persons, institutions and organizations
18-Association membership
- Carrying out benefits and interests processes for employees
- Carrying out finance and accounting
- Carrying out investment processes
21-Health information
- Carrying out emergency management processes
- Carrying out selection and placement of candidates, interns and students
- Carrying out candidate application processes
- Meeting obligations arising from employment contracts and legislation for employees
- Carrying out benefits and interests processes for employees
- Carrying out activities in line with the legislation
- Carrying out assignment processes
- Planning human resources processes
- Carrying out occupational health and safety activities
- Providing information to authorized persons, institutions and organizations
23-Criminal conviction and security measures
- Meeting obligations arising from employment contracts and legislation for employees
- Carrying out benefits and interests processes for employees
- Ensuring security of physical premises
- Carrying out assignment processes
- Following up and carrying out legal affairs
- Carrying out internal audit, investigation and intelligence activities
- Planning human resources processes
- Carrying out retention and archiving
- Following up requests and complaints
- Ensuring security of the controller's operations
- Providing information to authorized persons, institutions and organizations
26-Other information - Family information
- Carrying out emergency management processes
- Meeting obligations arising from employment contracts and legislation for employees
- Carrying out benefits and interests processes for employees
- Carrying out activities in line with the legislation
- Carrying out finance and accounting
- Following up and carrying out legal affairs
- Carrying out communication activities
- Planning human resources processes
- Organization and event management
- Carrying out social responsibility and civil-society activities
- Carrying out contract processes
- Providing information to authorized persons, institutions and organizations
26-Other information - Employment data
- Carrying out training activities
- Managing access authorizations
- Carrying out activities in line with the legislation
- Carrying out assignment processes
- Following up and carrying out legal affairs
- Planning human resources processes
- Carrying out and supervising business activities
- Carrying out occupational health and safety activities
- Carrying out business continuity activities
- Carrying out logistics activities
- Carrying out performance evaluation
- Carrying out contract processes
- Carrying out the remuneration policy
- Carrying out talent and career development
- Providing information to authorized persons, institutions and organizations
- Carrying out management activities
26-Other information - Signature information
- Carrying out emergency management processes
- Carrying out candidate application processes
- Meeting obligations arising from employment contracts and legislation for employees
- Carrying out training activities
- Carrying out activities in line with the legislation
- Carrying out finance and accounting
- Carrying out assignment processes
- Following up and carrying out legal affairs
- Carrying out internal audit, investigation and intelligence activities
- Planning human resources processes
- Carrying out and supervising business activities
- Carrying out occupational health and safety activities
- Carrying out business continuity activities
- Carrying out procurement of goods and services
- Carrying out sales of goods and services
- Carrying out customer relationship management
- Carrying out retention and archiving
- Carrying out contract processes
- Providing information to authorized persons, institutions and organizations
- Carrying out management activities
26-Other information - Website usage data
- Carrying out information security processes
- Carrying out selection and placement of candidates, interns and students
- Carrying out candidate application processes
- Managing access authorizations
- Carrying out communication activities
- Carrying out after-sales support for goods and services
- Carrying out sales of goods and services
- Carrying out marketing analysis
- Carrying out advertising, campaign and promotion processes
- Carrying out retention and archiving
- Following up requests and complaints
- Carrying out marketing of products and services
- Providing information to authorized persons, institutions and organizations
- Creating and following up visitor records
26-Other information - Request and complaint management
- Carrying out audit and ethics activities
- Carrying out internal audit, investigation and intelligence activities
- Carrying out and supervising business activities
- Carrying out activities for customer satisfaction
- Following up requests and complaints
26-Other information - Reputation management
- Carrying out customer relationship management
- Carrying out activities for customer satisfaction
- Carrying out marketing analysis
- Following up requests and complaints
26-Other information - Incident management
- Carrying out emergency management processes
- Carrying out information security processes
- Carrying out and supervising business activities
- Carrying out occupational health and safety activities
- Carrying out business continuity activities
- Carrying out risk management processes
26-Other information - Insurance information
- Meeting obligations arising from employment contracts and legislation for employees
- Carrying out benefits and interests processes for employees
- Planning human resources processes
- Carrying out occupational health and safety activities
- Providing information to authorized persons, institutions and organizations
26-Other information - Vehicle information
- Carrying out emergency management processes
- Ensuring security of physical premises
- Carrying out internal audit, investigation and intelligence activities
- Carrying out logistics activities
- Carrying out procurement of goods and services
- Ensuring security of movable property and resources
26-Other information - Compliance information
- Carrying out information security processes
- Carrying out selection and placement of candidates, interns and students
- Carrying out candidate application processes
- Carrying out training activities
- Carrying out activities in line with the legislation
- Carrying out assignment processes
- Planning human resources processes
- Carrying out business continuity activities
- Ensuring security of the controller's operations
- Carrying out talent and career development
- Providing information to authorized persons, institutions and organizations
26-Other information - Audit and inspection information
- Carrying out information security processes
- Carrying out audit and ethics activities
- Carrying out training activities
- Managing access authorizations
- Carrying out activities in line with the legislation
- Carrying out finance and accounting
- Ensuring security of physical premises
- Following up and carrying out legal affairs
- Carrying out internal audit, investigation and intelligence activities
- Carrying out and supervising business activities
- Carrying out occupational health and safety activities
- Carrying out business continuity activities
- Following up requests and complaints
- Providing information to authorized persons, institutions and organizations
26-Other information - Residence and work permit information for foreign nationals
- Carrying out selection and placement of candidates, interns and students
- Carrying out candidate application processes
- Meeting obligations arising from employment contracts and legislation for employees
- Work and residence permit procedures for foreign staff
- Providing information to authorized persons, institutions and organizations
Recipients
The recipient groups to which the controller named above transfers the data it holds are listed below.
- Natural persons or private-law legal entities
- Affiliates and subsidiaries
- Suppliers
- Authorized public institutions and organizations
- Other - organizations from which contracted services are purchased or with which we cooperate
- Group companies
Retention periods
The retention periods for the data processed by the controller named above are listed below by data category.
1-Identity
10 years
2-Contact
10 years
4-Personnel
10 years
5-Legal proceedings
10 years
6-Customer transactions
10 years
7-Physical premises security
Other: 90 days
8-Transaction security
2 years
9-Risk management
10 years
10-Finance
10 years
11-Professional experience
10 years
12-Marketing
10 years
13-Visual and audio records
10 years
18-Association membership
10 years
21-Health information
15 years
23-Criminal conviction and security measures
10 years
26-Other information - Family information
10 years
26-Other information - Employment data
10 years
26-Other information - Signature information
10 years
26-Other information - Website usage data
2 years
26-Other information - Request and complaint management
10 years
26-Other information - Reputation management
2 years
26-Other information - Incident management
10 years
26-Other information - Insurance information
10 years
26-Other information - Vehicle information
10 years
26-Other information - Compliance information
10 years
26-Other information - Audit and inspection information
10 years
26-Other information - Residence and work permit information for foreign nationals
10 years
Data subject groups
The groups of persons concerned by the data processed by the controller named above are listed below.
1-Identity
Job applicant, Employee, Shareholder / partner, Intern, Supplier's employee, Supplier's representative, Person receiving a product or service, Parent, guardian or representative, Visitor, Other (family member or relative), Prospective customer
2-Contact
Job applicant, Employee, Shareholder / partner, Prospective customer, Intern, Supplier's employee, Supplier's representative, Person receiving a product or service, Parent, guardian or representative, Other (family member or relative)
4-Personnel
Employee, Intern
5-Legal proceedings
Employee, Supplier's representative, Person receiving a product or service, Intern, Supplier's employee, Parent, guardian or representative
6-Customer transactions
Prospective customer, Person receiving a product or service
7-Physical premises security
Employee, Prospective customer, Intern, Person receiving a product or service, Visitor, Supplier's employee, Supplier's representative
8-Transaction security
Employee, Prospective customer, Intern, Person receiving a product or service
9-Risk management
Employee, Intern
10-Finance
Employee, Prospective customer, Intern, Supplier's representative, Person receiving a product or service, Supplier's employee, Parent, guardian or representative
11-Professional experience
Employee, Intern, Job applicant
12-Marketing
Prospective customer, Person receiving a product or service
13-Visual and audio records
Employee, Prospective customer, Intern, Person receiving a product or service, Job applicant
18-Association membership
Employee
21-Health information
Employee, Intern, Job applicant
23-Criminal conviction and security measures
Employee, Intern
26-Other information - Family information
Employee, Intern
26-Other information - Employment data
Employee, Intern
26-Other information - Signature information
Other (family member or relative), Job applicant, Employee, Shareholder / partner, Intern, Supplier's employee, Supplier's representative, Person receiving a product or service, Parent, guardian or representative, Visitor
26-Other information - Website usage data
Job applicant, Prospective customer, Person receiving a product or service, Visitor
26-Other information - Request and complaint management
Employee, Prospective customer, Intern, Person receiving a product or service
26-Other information - Reputation management
Prospective customer, Person receiving a product or service
26-Other information - Incident management
Employee, Intern
26-Other information - Insurance information
Employee
26-Other information - Vehicle information
Person receiving a product or service, Supplier's employee, Supplier's representative
26-Other information - Compliance information
Job applicant, Employee, Intern
26-Other information - Audit and inspection information
Employee, Intern, Supplier's employee, Supplier's representative, Person receiving a product or service
26-Other information - Residence and work permit information for foreign nationals
Job applicant, Employee
Transfers abroad
Whether the personal data processed by the controller named above are transferred to foreign countries is shown below.
1-Identity
Name and surname, mother's and father's name, mother's maiden name, date of birth, place of birth, marital status, identity card serial number, Turkish ID number, etc.
Transferred
2-Contact
Address number, email address, contact address, registered electronic mail (KEP), telephone number, etc.
Transferred
Security
The security measures taken by the controller named above for the personal data it processes are listed below.
- Key management is applied.
- Network security and application security are ensured.
- A closed-system network is used for personal data transfers over the network.
- Security measures are taken for the procurement, development and maintenance of information technology systems.
- The security of personal data stored in the cloud is ensured.
- Access logs are kept regularly.
- Corporate policies on access, information security, use, retention and destruction have been prepared and put into practice.
- Data masking is applied where necessary.
- Confidentiality undertakings are made.
- Authorizations of employees who change duties or leave employment are removed.
- Up-to-date anti-virus systems are used.
- Firewalls are used.
- Extra security measures are taken for personal data transferred on paper, and the documents are sent in a confidentiality-classified format.
- Policies and procedures for personal data security have been established.
- Personal data security issues are reported quickly.
- Personal data security is monitored.
- Necessary security measures are taken for entry to and exit from physical environments that contain personal data.
- Physical environments that contain personal data are protected against external risks (fire, flood and similar events).
- The security of environments that contain personal data is ensured.
- Personal data are reduced as far as possible.
- Personal data are backed up, and the security of the backed-up data is also ensured.
- User account management and an authorization control system are applied and monitored.
- Periodic and random internal audits are carried out and commissioned.
- Log records are kept so that users cannot alter them.
- Current risks and threats have been identified.
- Intrusion detection and prevention systems are used.
- Cybersecurity measures have been taken and their application is monitored continuously.
- Special category personal data transferred on portable memory, CD or DVD are transferred in encrypted form.
- Service providers that process data are audited at intervals on data security.
- Awareness of data security is ensured among service providers that process data.
- Data-loss prevention software is used.
- Disciplinary rules containing data security provisions exist for employees.
- Training and awareness work on data security is carried out for employees at intervals.
- An authorization matrix has been created for employees.
- Protocols and procedures for the security of special category personal data have been established and are applied.
- If special category personal data are sent by email, they are sent encrypted, using KEP or a corporate email account.
- Secure encryption and cryptographic keys are used for special category personal data and are managed by different units.
- Signed contracts contain data security provisions.
- Encryption is applied.