HES Code: Protection of personal data announcement
PROTECTION OF THE PERSONAL DATA ANNOUNCEMENT REGARDING THE PROCESSING OF THE HES CODE DURING THE RESERVATION / SALES / CHECK-IN AND BOARDING PROCESSES WITHIN THE SCOPE OF THE FIGHT AGAINST COVID-19
This informative text has been prepared in accordance with the Personal Data Protection Law No. 6698 („Law“) and the European Union General Data Protection Regulation (GDPR) by Güneş Ekspres Havacılık A.Ş. as the data controller to clarify and provide information regarding the processing of the HES code during reservation/sales/check-in and boarding processes within the scope of the fight against COVID -19.
In accordance with the Directive of the Turkish Ministry of Health within the scope of the fight against the COVID- 19 pandemic, all passengers who have Turkish citizenship are obliged to provide a HES code which is obtained from the Ministry of Health of the Republic of Turkey to be accepted to all domestic flights within Turkey. The HES code should be submitted along with the passenger’s TR Identity Number to our Company during the reservation/sales process.
Your HES code and TR Identity Number will be shared with the Ministry of Health of the Republic of Turkey in accordance with the above-mentioned legislation and the Turkish Ministry of Health will inform our Company whether you are eligible for travelling or not by checking your HES code and TR Identity Number. In case you are not eligible for travelling according to your HES code, you will be notified by our communication channels through your contact information that has been provided during the booking/sales process and the respective sales/reservation process will be canceled immediately. If your HES code and/or TR identity number is not entered into the system, or your HES code does not match your TR identity number, or the HES code is not valid, or the validity period has expired, the code needs to be renewed and any other transaction related to the code is required during the reservation/sale process, you will be contacted through your contact information you have declared during the booking process.
You need to submit your HES code to our officials during the check-in and boarding processes along with a document showing your TR Identity Number. The HES code will be sent to the database of the Ministry of Health of the Republic of Turkey. In case you will not be deemed eligible for travelling, we are not allowed to board you on your flight.
Your personal data, your HES code and TR ID number, will be shared with the Turkish Ministry of Health within the scope of the protection of personal data announcement. The data that will be sent to our system by the Turkish Ministry of Health in return will be the information about your status whether you are eligible or not for the flight within the scope of the fight against the Covid-19 pandemic.
Your personal data mentioned above is processed and its usage has been limited to the purposes of establishing the public order and the security of the people, preventing the further spread of the pandemic, and protecting the health of our passengers, in accordance with the instructions and regulations of the authorized public institutions and organizations within the scope of the fight against Covid-19.
Your personal data specified in this text are processed and transferred based on the legal reason “It is necessary for compliance with a legal obligation to which the data controller is subject” that is declared in the article KVKK 5/2 (ç) and GDPR 6/1 (c).
Your personal data will be deleted when it is no longer needed for the specified purposes. Your personal data may need to be stored (as part of the legal period) during the legal processes that can be initiated against SunExpress. Personal data will be stored as long as SunExpress is legally obliged to keep it.
You may notify your requests that are within the scope of the 11th Article of the Law that is regulating the rights of the data subject, in accordance with the “ The Communique on the Procedures and Principles on the Application to Data Controller”, by sending in to the official address of SunExpress that is Yenigöl Mah Nergiz Sok No:84 PK No:07230 Muratpaşa/ Antalya or to email@example.com e-mail address.
You may send an e-mail to firstname.lastname@example.org e-mail address in order to request for your rights under the GDPR. Please note that we need to process your personal data in accordance with the legal obligation to fulfill your request and for identification purposes.