Reserve
Scorpios

Privacy Policy

Last updated: 12 February 2025

 

 

1. Introduction

This website is operated by Scorpios Projects Single Member P.C., a company registered in Greece under registration number 161643501000 (“Scorpios”, “we”, “us” and/or “our”). Our registered address is 63 Ypsilantou str., 11521, Athens (TIN 801694306).

This Privacy Notice provides details about our processing of your personal data, including how and why we use your personal data and how we keep it safe. It also explains the rights you have over your personal data. 

You should read this Privacy Notice so that you know what we do with your personal data. Please also read any other privacy notice that we may provide to you from time to time that may apply to our use of your personal data in specific circumstances. Specific information relating to the types of personal data processed and our purposes of processing that data is set out below.


Please see the “How to contact us” section at 18 below for details about how to contact us.  

 

 

2. Data Controller

Scorpios acts as the data controller for personal data collected during your use of the website (e.g., account creation, inquiries, initial reservation steps and browsing activity). Regarding reservations, depending on the nature of your reservation, personal data may be shared with our affiliated companies Paraga Beach Restaurant and Entertainment Services Societé Anonyme (“Scorpios Mykonos”) and SCO BODRUM TURİZM YATIRIMLARI ANONİM ŞİRKETİ (“Scorpios Bodrum”), according to the provisions in Appendixes 1 and 2 in this Privacy Notice.

 

 

3. GDPR Applicability

Regarding the use of the website, as well as the reservations at Scorpios Mykonos, as Scorpios and Scorpios Mykonos are based in the European Union (EU), the Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation-“GDPR”) applies to the collection and processing of personal data for all users of this website, regardless of their nationality or place of residence, as the processing occurs within the EU. 


Regarding the reservations at Scorpios Bodrum, your personal data is transferred to Scorpios Bodrum in Turkey according to appropriate safeguards that are in place to protect your information, in compliance with Articles 44–49 of GDPR. Please note that once your personal data is transferred to Scorpios Bodrum, you may not have all the rights granted under GDPR and any applicable rights and procedures will depend on the laws of your country of residence, the applicable laws of Turkey and/or the specific agreements governing our services.

Please also refer to Appendixes 1 and 2 in this Privacy Notice for specific provisions regarding the GDPR Applicability for Scorpios Mykonos and Scorpios Bodrum.

 

 

4. Explanation of terms

 

In this Privacy Notice:


personal data” (also referred to in this Privacy Notice as “personal information”) means any information that relates to you from which you can be directly or indirectly identified;

process” means any activity relating to personal data, including collection, use, sharing, storage and transmission; and

controller” is a legal term and refers to the company that makes decisions about how and why your personal data is processed and is therefore responsible for ensuring that the processing is done in accordance with relevant data protection laws.

 

 

5. How do we obtain your information?

 

Most of the personal information we process is provided to us directly by you when you engage with us, such as when you complete our web forms in order to make an information request, make an enquiry, attend an event, book a room and stay with us, purchase our goods or services or when you subscribe to our newsletter. 

We process personal information about you when you use or interact with our website or apps (as applicable) ("Sites"), create an account, generate or make any content on, or upload to, a Site, including preferences you set (such as choice of language), photographs and videos you upload, conversations and connections you have with other users and comments you make via our messaging services. 

When you visit, use or navigate our Sites, we may process certain information about you automatically. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our services, and other technical information which may identify you. This information is primarily needed to maintain the security and operation of our Sites, and for our internal analytics and reporting purposes. Like many businesses, we also collect information through cookies and similar technologies, which you can read more about in our Cookie Policy.

We may also collect personal information from available sources in the public domain and from other third parties.

In certain circumstances, we will also require certain personal data in order to manage our relationship with you/provide you with our services (e.g., your payment card details to take payment or certain information to enable you to create an account with us). 

Please note that we may combine the personal data that you provide to us with other information we collect about you when you make a reservation through third-party services, such as online restaurant/hotel reservation websites, so that we may process your requests. 

Where we don't need your personal data, we will make this clear, for instance we will explain if any data fields in our forms are optional and can be left blank.

If you submit any personal information relating to another person, you represent that you are authorised by that person to do so and to permit us to use the information in accordance with this Privacy Notice. 

 

 

6. What information do we collect?

 

We collect personal data about you, including the following:

 

Identity and Contact Information: first name, last name, title, postal address, email address and telephone numbers, driving licence, passport, CCTV and photographs.

Personal Details: age, gender and date of birth.

Information collected when you contact us: includes information in emails and other communications with us such as feedback and surveys.

Employment Data: employment details, including employment status, job title, employment address, telephone number and previous employment details.

Preferences: Preferred language, direct marketing and cookie preferences.

Nationality: nationality and citizenship. 

Financial Data: bank account details, tokenised payment card data and billing information.

Technical Data: device identifiers such as internet protocol (IP) address, usernames or similar identifiers, geolocation data, usage and login data.

Health and Medical Information: Health and disability information and dietary requirements.

 

Payment information

Any credit/debit card payments and other payments you make through our Sites will be processed by our third-party payment providers. The payment data you submit will be securely stored and encrypted by our payment service providers using up to date industry standards. Please note that aside from card information tokenisation, we do not directly process or store the debit/credit card data that you submit; this is handled by our third-party payment provider.

You may choose to opt out of us holding your card or payment data, although this means that you will need to re-supply us with card/payment details for the purpose of making any future purchases.

 

 

7. What are our lawful bases for processing your personal data?

We ensure that we have a lawful basis or bases for processing your personal data. Our lawful bases for processing your personal data (which are based on data protection law requirements in the European Economic Area (EEA)) are as follows:

• It is necessary in our legitimate interests. We have a legitimate business interest in processing your personal data. Our legitimate interests are in:
– Providing our products and services. 
– Analysing, managing, evaluating and improving our business.
– Dealing with your queries and feedback.
– Improving our guests' experiences
– Managing reservations
– Operating our facilities and events.
– Ensuring the security of our premises, facilities and property.
– Detection and prevention of crime.
– Maintaining the security of our websites.  
– Communicating with you regarding your reservation.
– Where we rely on legitimate interests, we have balanced our rights against your interests, fundamental rights and freedoms and determined that our legitimate interests are not overridden in those circumstances.

• It is necessary to comply with a legal obligation. We collect and process some information about you to comply with our legal obligations (e.g., in relation to accounting and tax requirements) and keep records as required by law.

• It is necessary for the performance of a contract between you and us or to take steps at your request prior to entering into the contract, for example, we will need to process your personal data to fulfil a transaction with you to provide our goods or services.

• In rare cases, it may be necessary to process your personal data to protect your or another person's vital interests (i.e. your life) – e.g. in emergency circumstances when communicating with first responders or medical professionals – or because it is necessary for the performance of a task in the public interest.

• In limited circumstances, we may request your consent to process your personal data.

 

When we process particularly sensitive personal data (also known as special categories of personal data) – e.g., health/disability data, sexual orientation, ethnicity/race or religious beliefs – we have an additional lawful basis for the processing of such personal data based on data protection law requirements in the EEA. In the limited circumstances where we process such personal data:

• We will request your explicit consent to do so.
• It is necessary for the establishment, exercise or defence of legal claims.
• It is necessary for reasons of substantial public interest.
• The personal data is manifestly made public by you.
• There may also be very rare occasions where we need to process this information to protect your or another person's vital interests (i.e., your or the other person's life) where you are physically or legally incapable of giving consent.

 

 

8. How and why do we use your information?

Please see below the details of the different purposes for which we use your personal data, as well as the lawful basis or bases relied upon for each purpose of use:

Fulfilment of reservation:
We may process information relating to your bookings. This includes bookings in our locations, restaurants, spas and gyms. The data may be processed for the purpose of completing your room reservation/restaurant reservation.

Lawful basis or bases: This processing is necessary for the performance of a contract and is necessary for the purposes of our legitimate interests. For special categories of data this processing is conducted with your explicit consent.

Reservation communications:
To communicate with you about your visit to our Site and Digital Channels, spas, gyms, restaurants and locations.

Lawful basis or bases: This processing is necessary for the purposes of our legitimate interests. For special categories of data this processing is conducted with your explicit consent.

Purchases:
To process transactions, Scorpios must collect data such as your name, purchase, and payment information.

Lawful basis or bases: This processing is necessary for the performance of a contract and Scorpios’ Legitimate Interests.

Events:
We also collect information regarding Scorpios events, attendance and ticketing which we require for the purposes of completing your ticket purchase and attendance at the event. Scorpios also uses personal information about attendees to plan and host corporate events, host online forums and social networks in which event attendees may participate.

Lawful basis or bases: This processing is necessary for the performance of a contract and is necessary for the purposes of our legitimate interests. For special categories of data this processing is conducted with your explicit consent.

Response to enquiries:
We may process information contained in or relating to any communication that you send to Scorpios. This data may include the communication content and metadata associated with the communication.

Lawful basis or bases: This processing is necessary for the purposes of our legitimate interests to respond to your queries. For special categories of data this processing is conducted with your explicit consent.

Marketing and promotions:
To communicate news and promotions to you relating to Scorpios’ products and services, or other marketing or promotional activities.

Lawful basis or bases: This processing is carried out with your explicit consent, following your opt-in.

To understand your preferences and interests:
To be able to improve the customer’s experience.

Lawful basis or bases: This processing is necessary for the purposes of our legitimate interests in improving our services. For special categories of data this processing is conducted with your explicit consent.

Detection and prevention of unlawful activity:
To obtain legal advice and/or to protect us, our staff and customers and the public against injury, theft, legal liability, fraud, abuse and other misconduct. This includes maintaining the security of our locations through the use of CCTV. Please note that footage is retained for one calendar month from the date of collection.

Lawful basis or bases: This processing is necessary for the purposes of our legitimate interests.

Account set-up and access
We will process your information to enable you to create an account and log-in to it via the Site.

Lawful basis or bases: This processing is necessary for the purposes of our legitimate interests.

To identify usage trends and understand our customer journeys:
We will process information about how you use our websites.

Lawful basis or bases: This processing is carried out where you consent to non-essential cookies via our website.

Website security monitoring:
We utilise various tools in order to ensure the security of our website.

Lawful basis or bases: This processing is necessary for the purposes of our legitimate interests.

Internal business purposes:
For our internal business purposes, such as data analysis, audits, market research, developing new products, improving our services, obtaining statistical information, identifying usage trends and visiting patterns, determining the effectiveness of our promotions and meeting contractual obligations.

Lawful basis or bases: This processing is necessary for the purposes of our legitimate interests in improving our products and services and for performing a contract.

Your Preferences:
To understand your preferences and interests and be able to improve your experience of our goods and services.

Lawful basis or bases: This processing is necessary for the purposes of our legitimate interests. For any special categories of personal data processed: explicit consent.

Our Sites:
To improve, promote and develop our Sites and promote popular conversations, programs and campaigns on the Sites.

Lawful basis or bases: This processing is necessary for the purposes of our legitimate interests.

Administrative and other communications:
To send you important information regarding our Sites, changes to our terms, conditions, and policies, or other administrative information (e.g., information about your reservations, such as reservation confirmations), to enforce our terms and conditions and policies, to provide you with customer/user support and to contact you for public health reasons and to comply with government guidelines, regulations and mandates.

Lawful basis or bases: This processing is necessary for the purposes of our legitimate interests, and it is necessary to comply with a legal obligation. For any special categories of personal data processed: explicit consent, legal claims, public information, vital interests and substantial public interest.

Our legal duties:
To comply with legal and regulatory requirements or demands in accordance with applicable law, a court order, subpoena, or other legal process.

Lawful basis or bases: This processing is necessary to comply with a legal obligation.

Corporate Arrangements:
To facilitate the sale or potential sale of our business or part of our business.

Lawful basis or bases: This processing is necessary for the purposes of our legitimate interests.

 

 

9. Do we share the information we receive?

 

Sharing within our group
As part of a global organisation, we may share your personal data with our group and affiliated companies in order to provide our services and benefits to you, such as for our general business management and corporate reporting purposes. With your consent, other group or affiliated companies may send information about their products or services to you. We also share personal data where support or functions are provided by other group and affiliated companies, such as in relation to customer services, website hosting and IT support and maintenance. 

Sharing outside our group
We may also share your personal data with third party service providers outside our group to provide us with services, such as

• card processing or payment service providers; 
• credit reference agencies; 
• IT suppliers and contractors (e.g. data hosting providers)
• analytics providers/ web analytics providers;
• providers of digital advertising services; 
• event organisers and
• providers of CRM, marketing and sales software solutions.  

We carry out due diligence to check that these service providers have appropriate security in place to protect your personal data and we enter into written contracts with them to impose appropriate security obligations on them.

We may also share your personal data with third parties who act as controllers of that data. We may share your personal data with:

• consultants and professional advisors, including our lawyers and accountants;
• prospective sellers, buyers or other third parties if we transfer, purchase, reorganise, merge or sell any part of our business;
• business partners;
• courts and court-appointed persons/entities;
• trade associations;
• our insurers; and
• government departments and statutory and regulatory bodies, including data protection regulators, law enforcement and tax/revenue offices.

 

 

10. Is your personal data sent outside the EEA?

Scorpios is part of a global organization that operates in many countries. We may share your personal information with other group or affiliated companies, our service providers, and other third parties that may be located in other countries. Although the data protection laws of these various countries may differ from those in your own country, we will take appropriate measures to ensure that your personal information is handled as described in this Privacy Notice and in accordance with the applicable law.

If we transfer your personal data outside the EEA (including to our group or affiliated companies), we will implement appropriate safeguards for that transfer in accordance with the applicable law, such as implementing standard contractual clauses for data transfers approved by the relevant data protection authorities or by transferring your data to countries which have been deemed by the relevant data authorities to provide adequate levels of data protection. If you would like to receive more information on the safeguards that we implement, including copies of relevant clauses of data transfer contracts, please contact us as indicated below.

 

 

11. How do we protect your personal data?

We take the security of the personal information we collect seriously. We have implemented and maintain technical and organisational security measures (as required by applicable data protection laws) to protect your personal information from accidental or unlawful destruction, damage, loss, alteration or unauthorised disclosure or access.  

Unfortunately, the transmission of information over the internet or public communications networks can never be completely secure and we therefore cannot 100 per cent guarantee the security of personal data that you provide to us online.

 

 

12. For how long will we keep your information?

We will keep your personal data only for as long as is necessary for the purposes outlined in this Privacy Notice, or for the duration required by any legal, regulatory, accounting or reporting requirements, whichever is longer. We will only ever retain your personal data for a limited period of time. 

To determine the appropriate retention period for your personal data, we consider the amount, nature and sensitivity of the personal data, the purposes for which we process it, applicable legal requirements or operational retention needs and whether we can achieve those purposes through other means.

Upon expiry of the applicable retention period, we will securely destroy your personal data in accordance with applicable laws and regulations. In some circumstances we may anonymise your personal data so that it can no longer be associated with you, in which case it is no longer personal data. 

 

 

13. Automated decision making 

Automated decisions are where a computer makes decisions about you without a person being involved. Profiling is the recording and analysis of a person's psychological and behavioural characteristics, to assess or predict their capabilities or to assist in identifying or classifying categories of people.

Scorpios does not make automated decisions about, or profile, its clients or customers.

 

 

14. What are your personal data protection rights?

Certain applicable data protection laws give you specific rights in relation to your personal data. In particular, if the processing of your personal data is subject to data protection law according to GDPR, you have the following rights in relation to your personal data:

Right of access: If you ask us, we will confirm whether we are processing your personal data and, subject to certain conditions, we will provide you with a copy of that personal data along with certain other details such as the purpose(s) of the data processing. 

Right to rectification: If your personal data is inaccurate or incomplete, you are entitled to ask that we correct or complete it.   Please help us to keep your personal data up to date by letting us know of any changes to your personal data (including changes to your contact details) as soon as possible.

Right to erasure: Subject to certain conditions, you may ask us to delete or remove your personal data, such as where we no longer need the personal data for the purposes for which it was collected or in case our legal basis for the processing is your consent and you withdraw consent.  

Right to restrict processing: You may ask us to restrict or “block” the processing of your personal data in certain circumstances, such as where you contest the accuracy of the personal data or object to us processing it. We will tell you before we lift any restriction on processing. 

Right to data portability: You have the right to obtain from us (or to have transferred to another controller) your personal data that we process by automated means on the basis of your consent or necessity for a contract with you. We will provide the personal data in a structured, commonly used and machine-readable format. 

Right to object: You may object to our processing of your personal data, and we will stop processing your personal data if (i) we are relying on a legitimate interest to process your personal data, unless we demonstrate compelling legitimate grounds for the processing or (ii) we are processing your personal data for direct marketing purposes.

Right to withdraw consent: If we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing of your personal data carried out before we received notice that you wished to withdraw your consent.

 

 

15. Right of complaint to the competent data protection authority

If you have a concern about our privacy practices, pursuant to this Privacy Policy and the applicable law, including the way we handled your personal data, we would appreciate the opportunity to put it right. However, you may be able to make a complaint to the competent data protection authority. 

If you are located in the EEA, you have the right to complain either to the competent data protection authority for your jurisdiction, a list of which can be found at https://edpb.europa.eu/about-edpb/board/members_en, or directly to the Greek Data Protection Authority (1-3 Kifissias street, Postal Code 11523 Athens, Telephone: +30 2106475600, E-mail: [email protected]).

If you are located outside the EEA, you have the right to complain directly to the Greek Data Protection Authority (1-3 Kifissias street, Postal Code 11523 Athens, Telephone: +30 2106475600, E-mail: [email protected]).

In any case, please also refer to the clarifications set in parts “2. Data Controllers” and “3. GDPR Applicability” of the present, as well as Appendixes 1 and 2 on this Privacy Notice.

 

 

16. Third party notices

This Privacy Notice may contain links to other third party websites. We are not responsible for the content of these other sites and you should read the privacy notices provided by such websites.

 

 

17. Changes to this Privacy Notice

We keep our Privacy Notice under regular review. Any changes we may make to our Privacy Notice in the future will be posted to this Site. Please check back frequently to see any updates or changes to this Privacy Notice.

 

 

18. How to contact us

If you have any questions about this notice or how we handle your personal data, please contact us at [email protected].

 


APPENDIX 1

PRIVACY NOTICE SPECIFIC PROVISION FOR SCORPIOS MYKONOS (GREECE)


Regarding reservations at Scorpios Mykonos, your personal data will be transferred to and processed by Paraga Beach Restaurant and Entertainment Services Societé Anonyme (“Scorpios Mykonos”), having its registered office in Athens, 63 Ypsilantou street, Postal Code 11521, with tax identification number 997180091, a Scorpios affiliated company, which owns and operates the club/restaurant Scorpios Mykonos. Scorpios Mykonos acts as the data controller for personal data collected for such reservations. 

This specific provision applies and relates to website visitors, customers or prospective customers and attendees at events at Scorpios Mykonos, people who make a reservation and/or visit Scorpios Mykonos, subscribers to Scorpios Mykonos’ publications or newsletters or with which you otherwise engage or communicate with Scorpios Mykonos.

Please note that Scorpios Mykonos’ Privacy Policy includes the same terms as the above Privacy Notice. So, except from the Data Controller distinction, the exact same terms apply.

 

APPENDIX 2

PRIVACY NOTICE SPECIFIC PROVISIONS FOR SCORPIOS BODRUM (TÜRKIYE)


For reservations at Scorpios Bodrum in Turkey, your personal data are processed by SCO BODRUM TURİZM YATIRIMLARI ANONİM ŞİRKETİ (“Scorpios Bodrum”), a company established under the laws of Turkey, having its registered office at Gölköy Mah. 312 Sk. No:3/49 Bodrum/Muğla, Turkey, with Bodrum Trade Registry number 20449 and TIN 757 101 8666, which owns and operates the club/restaurant Scorpios Bodrum and acts as the data controller for such reservations. In this case, this privacy notice applies and relates to customers or prospective customers and attendees at Scorpios Bodrum, people who make a reservation and/or visit Scorpios Bodrum, subscribers to Scorpios Bodrum’s publications or newsletters or otherwise engage or communicate with Scorpios Bodrum, living in Türkiye or outside of Türkiye and amends the above Privacy Notice in the following respects:

Processing of sensitive personal data

If Turkish law is applicable to your personal data, the information relating to “sensitive personal data” (also known as 'special categories of personal data') in Section 5 of the Privacy Notice is replaced as follows:

 

1. What are Scorpios Bodrum’s lawful bases for processing your personal data?

Sensitive personal data: 
Personal data relating to race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership to associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data are sensitive personal data.

Scorpios Bodrum may process data relating to your race, ethnic origin, religion, sect or other beliefs, appearance and dress and health on the basis of your explicit consent. 

Purposes of processing: 
On the other hand, personal data relating to health and sexual life may be processed without your explicit consent only for the purposes of protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing, by persons or authorized institutions and organizations under the obligation of confidentiality.

For customers or prospective customers and, attendees at Scorpios Bodrum’s events, people who make a reservation and/or visit Scorpios Bodrum, subscribers to Scorpios Bodrum’s publications or newsletters or otherwise engage or communicate with Scorpios Bodrum- Scorpios Bodrum may process your sensitive personal data for the purposes detailed in Section 8, “How and why do we use your information?” in the Privacy Notice. 

Data sharing
If Turkish law is applicable to your personal data, the following information is added to Section 9 of the Privacy Notice:

 

2. Does Scorpios Bodrum share the information it receives?

Scorpios Bodrum is part of a global organization that operates in many countries. Therefore, it can share your personal data among the group and affiliated companies, service providers, other third parties, public institutions and organizations, consultants and law offices established in Türkiye and/or the European Union/European Economic Area (“EEA”) and/or other countries by complying the requirements established under Article 8 and 9 of the Personal Data Protection Law numbered 6698 (“PDPL”) to fulfil the purposes established under this Section 9 (Does Scorpios Bodrum share the information it receives?). We have implemented and maintain appropriate technical and organisational security measures with respect to such data sharing. 

Legal grounds
If Turkish law is applicable to your personal data, the following information is added to Section 9 of the Privacy Notice as follows:

Personal data transfers within Türkiye 
Your personal data is transferred by Scorpios Bodrum to its group and affiliated companies, our business partners, third party service providers, suppliers, public institutions and organizations, consultants and law firms established in Türkiye based on the legal grounds listed below to fulfil the purposes established under Section 9 (Does Scorpios Bodrum share the information it receives?). Scorpios Bodrum has implemented and maintains appropriate and adequate security measures with respect to such data transfers. 

Legal grounds:
• Processing of personal data is explicitly provided for by the law.
• Processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of the contract. 
• Processing is necessary for us to fulfil our legal obligations. 
• Processing is mandatory for the establishment, exercise, or protection of a right.
• Processing is mandatory for the protection of the life or physical integrity of the data subject who is unable to provide his/her consent due to actual impossibility or whose consent is not legally valid.
• Personal data has been made public by the data subject.
• Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.

Your name, surname, email address and/or telephone number are processed within the scope of advertising and marketing activities upon your explicit consent and transferred to the third-party service providers and suppliers. 

Sensitive personal data (such as health data) can only be transferred with your explicit consent in line with the conditions for data transfer stipulated under the PDPL.

Cross-border personal data transfers
If Turkish law is applicable to your personal data, Section 10 of the Privacy Notice is replaced as follows:

 

3. Is your personal data sent outside your home country?

• In order to fulfil the purposes established Section 9 (Does Scorpios Bodrum share the information it receives?), Scorpios Bodrum transfers your personal data  among its group and affiliated companies, its service providers, and other third parties located outside Türkiye  and in case of the existence of a legal ground listed under Section 9 (Personal data transfers within Türkiye), personal data can be transferred outside Türkiye without your explicit consent under the following conditions:

• If the recipient country to which personal data will be transferred has an adequate level of protection; or
In the absence of an adequate level of protection, the data exporter and the data importer undertake an adequate level of protection in writing and obtain the Personal Data Protection Authority’s approval (or approval of Binding Corporate Rules). 

Sensitive personal data (such as health data) may be transferred outside Türkiye with your explicit consent in line with the conditions for data transfer stipulated under the PDPL.

Your personal data protection rights
If Turkish law is applicable to your personal data, Section 14 of the Privacy Notice is replaced as follows:

 

4. What are your personal data protection rights?

You have the following rights regarding your personal data under the PDPL: 

• To learn whether any of your personal data is being processed;
• To request information if personal data has been processed;
• To learn the purpose of the processing personal data and whether they are used in compliance with the purpose;
• To know the third parties to whom your personal data is transferred within the country or abroad; 
• To request the rectification of your incomplete or inaccurate data (if any);
• To request the erasure or destruction of your personal data;
• To request reporting of the transactions of rectification or disposal to third parties to whom your personal data have been transferred;
• To object to the occurrence of an unfavourable result against you as a result of analyzing the data processed solely through automated systems; and
• To claim compensation.

 

In order to exercise the aforementioned rights, you shall convey your request in writing, along with the information that will enable your identification, to Scorpios Bodrum through the following means of communication:
a) via e-mail to [email protected]
b) via mail to the address Gölköy Mahallesi, 312 Sokak, Bodrum, Muğla 48483, Türkiye

 

In order for your request to be responded quickly, “Personal Data Information Request” should be written on the application envelope and/or the subject of the email. 

Your submitted requests will be responded within 30 (thirty) days from the date of receipt of your request, depending on the nature of the request. If the information and documents you submit to Scorpios Bodrum are incomplete or incomprehensible, Scorpios Bodrum will contact you to clarify your request.