गोपनीयता नीति

परिचय

Skyway Travel पर्यटन क्षेत्र में कार्यरत एक कंपनी है जो तुर्की के Ürgüp, Nevşehir में स्थित है और परिवहन टिकट, निजी ट्रांसफ़र, आवास, भोजन सेवाएँ, पैकेज टूर और पूर्ण-दिवसीय सेवाओं की बिक्री करती है। Skyway Travel तुर्की व्यक्तिगत डेटा संरक्षण कानून (KVKK) का पालन करने के लिए बाध्य है और इसके अंतर्गत निम्नलिखित के लिए प्रतिबद्ध है:

• व्यक्तिगत जानकारी का संग्रह और उपयोग।
• जानकारी की गुणवत्ता और सुरक्षा सुनिश्चित करना।
• व्यक्तियों के उनके डेटा से संबंधित अधिकारों का सम्मान करना।

Skyway Travel अपने व्यवसाय संचालन के दौरान प्राप्त सभी व्यक्तिगत डेटा की सुरक्षा, उचित प्रबंधन और संरक्षण के लिए प्रतिबद्ध है। यह नीति समय-समय पर समीक्षा और सुधार के अधीन है।

उद्देश्य

इस दस्तावेज़ का उद्देश्य व्यक्तिगत डेटा के प्रसंस्करण से संबंधित सिद्धांतों, प्रक्रियाओं और जिम्मेदारियों को परिभाषित करना है।

दायरा

यह नीति Skyway Travel की सभी प्रक्रियाओं पर लागू होती है जिनमें ग्राहक डेटा का उपयोग किया जाता है।

इस नीति का पालन Skyway Travel के सभी कर्मचारियों और आपूर्तिकर्ताओं द्वारा अनिवार्य है।

परिभाषाएँ

व्यक्तिगत डेटा: कोई भी जानकारी जिससे किसी व्यक्ति की पहचान की जा सके।

संवेदनशील डेटा: जैविक, स्वास्थ्य, जातीय, राजनीतिक या धार्मिक जानकारी।

व्यक्तिगत डेटा का प्रसंस्करण: संग्रह, भंडारण, उपयोग, संशोधन या हटाने की कोई भी प्रक्रिया।

सहमति: व्यक्तिगत डेटा के प्रसंस्करण के लिए व्यक्ति की स्वतंत्र और स्पष्ट अनुमति।

• • Prior: Must be obtained prior to collection.
• • Free: Must not be forced or conditioned.
• • Unequivocal and express: There must be no doubt as to its manifestation and it must be recorded in some tangible medium.

व्यक्तिगत डेटा बैंक: संरचित डेटा संग्रह।

Holder of the personal data bank: Natural person, legal person of private law or public entity that determines the purpose and content of the personal data bank, the processing of such data, and the security measures.

डेटा नियंत्रक: वह संस्था जो डेटा के उद्देश्य और उपयोग को निर्धारित करती है।

Anonymization procedure: Processing of personal data that prevents identification or does not make the holder of the personal data identifiable. The procedure is irreversible.

Disassociation procedure: Processing of personal data that prevents identification or does not make the holder of the personal data identifiable. The procedure is reversible.

अनुपालन अधिकारी

Skyway Travel will assign and communicate the corresponding responsibilities to all personnel and suppliers for compliance with this Policy.

The area responsible for annually reviewing this Policy and making the respective adjustments within Skyway Travel will be the General Management. Likewise, the General Management will be responsible for answering any questions related to the application and scope of this Policy.

Notwithstanding the above, all employees of Skyway Travel as well as all suppliers and third parties with whom Skyway Travel is linked in the regular exercise of its business and have access to or process personal data are subject to compliance with the Policy. Finally, no employee of Skyway Travel shall perform on behalf of the Company actions or incur in omissions that involve a breach of the Law.

गोपनीयता

This Policy will be for the internal and exclusive use of Skyway Travel and, therefore, is confidential. Any use other than that indicated is prohibited and must be expressly authorized in writing by the General Management.

The personal data to which both Skyway Travel employees and related third parties have access or participate in its treatment may not be treated or used in any way without the prior consent of the owner of the personal data even after the termination of their relationship with Skyway Travel, except for the exceptions regulated by law.

In the case of workers who by the nature of their duties have access to confidential and sensitive personal information, Skyway Travel will seek to develop specific training and awareness actions. Persons involved in the processing of personal data are obliged to keep professional secrecy and maintain confidentiality with respect to them. This obligation will be maintained even after the end of their relationship with Skyway Travel.

सिद्धांत

All employees of Skyway Travel must permanently comply with the principles established in the Law in the performance of their duties, which are detailed below:

a. Legality. The processing of personal data carried out by Skyway Travel shall be following the provisions of the Law. Collecting personal data by fraudulent, unfair, or unlawful means is prohibited.

b. Consent. Skyway Travel may not process personal data that does not have the prior, express, unambiguous, and free consent of the owner as required, except as otherwise provided by law.

c. Purpose. Skyway Travel will collect personal data clearly indicating the purpose for which it makes such collection, which must be determined, explicit, and lawful. The personal data object of the treatment will not be used for different or incompatible purposes with those that motivated its collection, except with the consent of its owner. In this regard, Skyway Travel will comply with implementing measures to ensure:

• • The collection, storage, and conservation of personal data comply with the principles of proportionality and purpose.
• • The adequate safeguarding of personal data complying with appropriate technical and legal security measures.

It should be noted that Skyway Travel may not disclose personal data unless ordered by a reasoned order of the judge or with the authorization of the owner, with the guarantees provided by law. Also, Skyway Travel may not refuse to deliver to a public entity information containing personal data provided that such requirement is made for the strict fulfillment of the powers of such entities assigned by law.

d. Proportionality. Any processing of personal data by Skyway Travel must be adequate, relevant, and not excessive to the purpose for which it was collected.

e. Quality. Personal data to be processed by Skyway Travel must be truthful, accurate, and, as far as possible, up to date, necessary, relevant, and adequate with respect to the purpose for which it was collected. They must be kept in such a way as to ensure their security and only for the time necessary to fulfill the purpose of the processing, respecting the applicable legal deadlines for the conservation of documents and information.

f. Security. Skyway Travel and the third parties to whom it entrusts the processing of personal data must adopt the necessary and appropriate technical, organizational, and legal measures to ensure the security of personal data against various risks, such as accidental loss or destruction by casualty, unauthorized access, covert use or infection by malware or computer viruses. These measures will be established, communicated and if necessary updated by Skyway Travel.

g. Adequate Level of Protection. In case Skyway Travel carries out international transfers of personal data, it shall ensure an adequate level of protection for the personal data to be processed or, at least, comparable to that provided by law.

h. Rights of the holders of personal data. Skyway Travel will have a simple and free procedure to address the rights of holders of personal data under the Act: (i) information, (ii) access, (iii) update, (iv) inclusion, (v) rectification, (vi) deletion, (vii) prevent the provision, (viii) opposition and (ix) objective treatment. Therefore Skyway Travel:

• • Will take the necessary measures to inform the holder of the personal data about the rights conferred by the Law.
• • Adopt measures that allow the holder of the personal data to keep them updated.
• • Will comply with the requirements and requests related to the aforementioned rights of the holders of personal data in a timely manner and within the terms of the law.

In the processes of attention to the rights of holders of personal data, the following guidelines shall apply:

• • Deleting or rectifying personal data will not proceed when it affects the rights or legitimate interests of Skyway Travel, its shareholders, employees, directors, or third parties or when there is a legal obligation to preserve personal data.
• • Skyway Travel may refuse specific requests when the disclosure of personal data may compromise or hinder ongoing judicial or administrative proceedings.

व्यक्तिगत डेटा का स्थानांतरण

Personal data processed by Skyway Travel may only be assigned or transferred to third parties for the fulfillment of purposes related to the legitimate interest of the assignor and the assignee and with the prior, express, free, unequivocal, and informed consent of the owner of the personal data. Such consent shall not be required in the cases permitted by law.

संवेदनशील डेटा का संग्रह

Skyway Travel will only collect personal data and/or sensitive data when strictly necessary and in compliance with the principles of purpose and proportionality. When the collection and processing of such data are derived from the fulfillment of a legal obligation, Skyway Travel will inform the owner of the data prior to its collection.

DISCLOSURE OF PERSONAL DATA

Skyway Travel will not disclose personal data to third parties except when:

• a) It is necessary for the purpose for which the personal data was collected; as in the provision of services through third parties and suppliers.
• b) The owner of the personal data is informed prior to disclosure or at the time of collection of personal data.
• c) The owner of the personal data gives its prior express consent.
• d) The consent is not required by law.
• e) Personal data are required by public entities within the scope of their competencies and legal attributions.
• f) The personal data are necessary to satisfy legitimate requirements of any company interested in acquiring any of the operations of Skyway Travel, with the prior consent of the owner; or,
• g) The access to personal data is by auditors and lawyers and other professionals obliged to keep professional secrecy.

व्यक्तिगत डेटा का हटाना

Once the processing of personal data has been completed and the principle of purpose has been fulfilled and provided that there is no legal mandate or reason that justifies the retention of personal data, Skyway Travel will proceed to delete them from its records. Alternatively, Skyway Travel may apply disassociation processes, or equivalent when for any commercial, statistical, or market analysis reason justifies the convenience of keeping such data. Skyway Travel will define in a timely manner the respective procedures necessary for the elimination of personal data.

दंड प्रावधान

It will be considered serious misconduct and subject to sanction the employee who commits any violation of the provisions set forth in this Policy. Skyway Travel will take the disciplinary measures it deems appropriate in cases of non-compliance with the obligations stipulated herein by employees.

नीति का प्रसार और प्रवर्तन

Skyway Travel will endeavor to: i) ensure compliance with the provisions of this Policy; ii) make this Policy known, observed, and respected by each employee; iii) publish this Policy in easily accessible places; and iv) subscribe to confidentiality obligations with employees, users, contractors and third parties who access personal data included in the databases.