PROTECTION OF PERSONAL DATA

PDPL

DISCLOSURE TEXT OF YELKEN TURİZM İNŞAAT OTO KİRALAMA FOTOĞRAF EMLAK TİCARET VE SANAYİ LİMİTED ŞİRKETİ REGARDING THE PROCESSING OF PERSONAL DATA

Law No. 6698 on the Protection of Personal Data has been entered into force upon its publication in the Official Gazette dated 07.04.2016 and numbered 29677. The Law, which was prepared by taking into account international documents, comparative law practices and the requirements of our country, aims to process and protect personal data in line with modern standards. The aim of the Law in this context is to regulate the conditions for processing personal data, the protection of fundamental rights and freedoms of individuals in the processing of personal data, and the obligations of natural and legal persons who process personal data and the procedures and principles to be followed.

Our Company is obliged to comply with the Law No. 6698 on the Protection of Personal Data and all personal data processed in its operational processes are covered by this law.

As Yelken Turizm İnşaat Oto. Kiralama Fotoğraf Emlak Ticaret ve Sanayi Ltd. Şti. (Company), we act in the capacity of data controller and take the necessary measures to protect the personal data.

General Principles for Processing Personal Data

Our Company acts in accordance with the general principles set forth by Law No. 6698 on the processing of personal data. Our general principles regarding the processing of personal data are as follows;

1) Compliance with the rules of law and honesty,

2) Be accurate and up-to-date when necessary,

3) Processing for specific, clear and legitimate purposes,

4) Being relevant, limited and proportionate to the purpose for which they are processed,

5) Retention for the period stipulated in the relevant legislation or required for the purpose for which they are processed.

Your personal data may be collected verbally, in writing or electronically through the offices, agencies, branches, dealers, call center, website, social media channels, mobile applications and similar means of our Company and our member workplaces, by automatic or non-automatic methods that may vary depending on the service, product or commercial activity provided by our Company.

In addition, your personal data may be processed when you call our call center with the intention of using our Company's services, visit our website, participate in trainings, seminars, organizations and meetings organized by our Company.

Legal Grounds for Collecting Personal Data

Your personal data is obtained in all kinds of verbal, written or electronic media for the purposes stated above in order to provide the products and services we offer by the Company within the legal framework determined and in this context, in order for our Company to fulfill its obligations arising from the contract and the law completely and accurately. Your personal data collected on this legal ground may also be processed and transferred for the purposes specified in this text within the scope of the personal data processing provisions and purposes specified in Articles 5 and 6 of the Personal Data Protection Law (KVKK).

Personal data are used by our company for the following purposes;

• Improving the services offered, developing new services and providing information about them,
• Promotion and marketing of campaigns and services for customers and prospective customers who have given consent for commercial electronic messages,
• Solving customer problems and complaints,
• Conducting statistical evaluations and market researches,
• Determination and implementation of the company's commercial and business strategies,
• Managing relationships with member companies and business partners,
• Tracking of accounting and payment transactions,
• Legal processes and compliance with legislation,
• Responding to information requests from administrative and judicial authorities,
• Internal reporting and planning of business development activities
• Financial control and reporting and realization of legal notifications,
• Managing internal control and audit activities,
• Ensuring information and process security and preventing malicious use,
• To make the necessary arrangements to ensure that the processed data is up-to-date and accurate and to carry out activities related to all these processes.

Transfer of Processed Personal Data

Our Company may share your personal data with our domestic and foreign business partners, member workplaces, agencies, banks, financial institutions, independent audit institutions, etc. and with persons and institutions permitted by the provisions of the Law on Payment and Securities Settlement Systems, Payment Services and Electronic Money Institutions and other legislation. The data stored may be transferred within the framework of the personal data processing provisions and purposes specified in Articles 8 and 9 of the KVK Law.

Records and documents related to the operations carried out by our Company with its customers are kept for a certain period of time within the scope of legal regulations and if you request the deletion of your personal data, this request can be fulfilled until the end of the period determined by legal regulations, and during this process, your personal data will not be processed and shared with third parties, except for the obligations arising from legal regulations.

Rights of the Personal Data Owner Listed in Article 11 of the KVK Law

As personal data owners, if you submit your requests regarding your rights to our Company by the methods set out below in this Clarification Text, our Company will finalize the request within thirty days at the latest without charging any fee depending on the nature of the request. However, if a fee is stipulated by the Personal Data Protection Board, the fee in the tariff determined will be charged by our Company. In this context, personal data owners have the following rights;

• To learn whether their personal data is processed or not,
• If their personal data has been processed, requesting information about it,
• To learn the purpose of processing their personal data and whether they are used in accordance with these purposes,
• To know about the third parties to whom their personal data are transferred at home or abroad,

To request correction of personal data in case of incomplete or incorrect processing and to request notification of the action taken within this scope to third parties to whom the personal data has been transferred,

• To request the deletion or disposal of personal data in the event that the reasons requiring its processing are eliminated, although it has been processed in accordance with the KVK Law and other relevant provisions of the law, and to request notification of the process carried out within this scope to third parties to whom their personal data was transferred,
• To object to the emergence of a result unfavorable to the person himself/herself when analyzing the processed data exclusively through automated systems,
• In case of any damage due to unlawful processing of their personal data, to request compensation for the damage.

Pursuant to paragraph 1 of Article 13 of the KVK Law, you can submit your request to exercise your rights mentioned above to our Company in writing or by other methods determined by the Personal Data Protection Board. Since the Personal Data Protection Board has not determined any method at the moment, you are required to submit your application to our Company in writing in accordance with the KVK Law. In this respect, the channels and procedures to submit your written application to our Company within the scope of Article 11 of the KVK Law are explained below.

In order to use your rights mentioned above, you can submit your requests containing the information necessary to identify you and your explanations regarding the right you request to use from the rights specified in Article 11 of the KVK Law together with other information requested by filling out the form at https://maceraatolyesi.com/kvkk-aydinlatma-metni address and delivering a signed copy of the form to ” address in person with documents identifying your identity, sending it by registered mail with return receipt, sending it through a notary public or other methods specified in the KVK Law, or you can send the relevant form to yelkenturizm@hs02.kep.tr with a secure electronic signature.