TURUNC HOTELS

INFORMATION TEXT ON THE PROCESSING OF YOUR PERSONAL DATA

AY-TUR TURİZM SEN VE TİC.A.Ş. As Turunc Resort Hotel and Turunc Premium Hotel, which are subsidiaries of companies named , we attach great importance to ensuring the security of your personal data.

In this context, in accordance with the Law on the Protection of Personal Data No. 6698 (“KVK Law”) and the relevant legislation, in the processes of processing and transferring your personal data to third parties within the framework of our hotel and tourism activities, in order to prevent unlawful processing and access of your personal data and to ensure the appropriate level of security to ensure its preservation. We are taking the necessary measures. With full understanding of this responsibility, we, as Data Controller, process your personal data as explained below and within the limits ordered by the legislation.

This clarification text issued by our company has been updated on 27/05/2020. In case the whole or certain articles of the Declaration are renewed, the effective date and version of the Declaration will be updated. Statement on our company's website (www.turunchohotels.com.tr) is published and made available to the relevant persons.

o PERSON PROCESSING YOUR DATA:

As a company, we are the legal entity that determines the purposes and means of processing your personal data and is responsible for the establishment and management of the data recording system. Our Company will start to process your personal data by ensuring data security, once you give your explicit consent for the processing of your personal data or when your explicit consent is not required, we will inform you. While processing your personal data, we may also process your data by authorizing one or more data processors and providing the necessary level of security.

o LEGAL BASIS OF THE PROCESSING OF YOUR PERSONAL DATA, FOR WHAT PURPOSE IT CAN BE PROCESSED, BY WHAT METHODS IT CAN BE OBTAINED AND WHICH YOUR DATA WILL BE PROCESSED:

Your personal data may vary depending on the service, product or commercial activity provided by our Company; It can be collected verbally, in writing or electronically through automatic or non-automatic methods, offices, branches, dealers, call center, website, social media channels, mobile applications and similar means. As long as you benefit from our company's products and services, your personal data may be processed by creating and updating.

Your personal data KVK Law m. To be able to provide the services to be provided by our Company and to increase the quality of these services in accordance with the provisions of 5 and 6 and other relevant legislation provisions of the Identity Reporting Law, to carry out the activities stipulated by the public authorities and / or considered as exceptions, the sales and marketing activities of the company / group companies, information storage, reporting may be processed for the purposes of complying with information obligations.

In addition, your collected personal data, our business units to carry out the necessary studies to benefit you from the products and services offered by our Company, the products and services offered by our Company to be customized according to your tastes, usage habits and needs and recommended to you, Our Company and persons who have business relations with our Company, security (administrative operations for communication carried out by our company, ensuring the physical security and control of the company's locations, business partner / customer / supplier (authorized or employees) evaluation processes, legal compliance process, financial affairs, etc.), the product you receive / will receive in this regard and service related to our Company's fields of activity, such as communication about the service and its use in marketing activities, product/service offer, modeling, reporting, scoring, risk monitoring, current or new product studies and potential customer identification. It can be processed for the purposes of providing meat, increasing the quality of these services and performing other activities, complying with the information obligations and ensuring the execution of our Company's human resources policies.

For these purposes, your personal data in Annex-1 can be processed.

o SHARING YOUR PERSONAL DATA:

Your collected personal data; For the purposes we have explained above, our Subsidiaries, Business Partners, Suppliers, Company Officials, Shareholders, AY-TUR TURİZM SAN VE.TİC.A.Ş Group Companies and legally authorized public institutions and private persons are covered by Articles 8 and 9 of the KVK Law. may be transferred within the framework of the specified personal data processing conditions and purposes.

This information form is an annex and an integral part of your requests for all kinds of contracts and service procurement that you have signed with our Company.

o DISPOSAL OF YOUR PERSONAL DATA:

Our company stores the personal data it processes for the periods determined by the legislation, and if a separate period is not specified in the legislation; Personal data is stored for the period that requires processing in accordance with the practices of our Company and the practices of commercial life, depending on the services our company provides while processing that data, and after this period only for the periods of time required in practice in order to constitute evidence in possible legal disputes. After the expiry of the specified periods, in accordance with Article 7 of the KVK Law, the personal data in question is deleted, destroyed or anonymized on the first destruction date.

o YOUR RIGHTS REGARDING THE PROCESSING OF YOUR PERSONAL DATA:

Within the framework of Article 11 of the KVK Law, you can apply to our company and send us your requests below;

o To learn whether your personal data is processed or not, and if so, to request information about it,

o To learn the purpose of processing your personal data and whether they are used in accordance with the purpose,

o To learn the third parties to whom your personal data is transferred, in the country or abroad,

o Requesting correction of personal data in case of incomplete or incorrect processing,

o Requesting the deletion, destruction or anonymization of your personal data in case the reasons requiring the processing of your personal data disappear within the scope of Article 7 of the KVK Law,

o Requesting notification of the transactions made pursuant to subparagraphs (d) and (e) to the third parties to whom your personal data has been transferred,

o Objecting to a result against you by analyzing the processed data exclusively through automated systems,

o Requesting the compensation of the damage in case of damage due to unlawful processing of your personal data.

In accordance with the provisions of the KVK Law and the Communiqué on the Procedures and Principles of Application to the Data Controller published on 10.03.2018 and the relevant current legislation, www.turunchohotels.com.tr Using the application form at the address;

o AY-TUR TURİZM SEN VE TİC.A.Ş. For applications in terms of (Turunc Resort Hotel); Mah.36.Sok.No:5 By applying personally with a wet-signed petition to Marmaris/MUĞLA or by sending it to this address through a notary public,

o AY-TUR TURİZM SEN VE TİC.A.Ş. (Turunc Premium Hotel), by applying personally with a wet signed petition to Turunc Merkez Mah.Cumhuriyet Cad.No:1 Marmaris/MUĞLA or by sending it to this address via a notary public,

By Registered Electronic Mail, AY-TUR TURİZM SAN VE TİC.A.Ş. for [email protected]  AY-TUR TURİZM SAN VE TİC.A.Ş. for [email protected]  You can use it by sending an e-mail to your e-mail address.

Below, information is given about how your applications will be delivered to us, specific to the application channels.

In order for a person other than the person concerned to make a request, there must be a notarized special power of attorney issued by the relevant person on behalf of the person to apply.

In this context, your requests that you duly forward to our Company will be finalized within thirty days at the latest. In the event that the completion of your aforementioned requests requires a separate cost, our Company will charge the applicant the fee in the tariff determined by the Personal Data Protection Board (“Board”). If our company responds to your application through a recording medium such as CD or flash memory, a fee determined not to exceed the cost of the recording medium may be charged.

Our company may request information from the relevant person in order to determine whether the applicant is the owner of personal data, and may ask a question about the application to the relevant person in order to clarify the issues stated in the application.

Our company may reject the application of the applicant in the following cases by explaining the reason:

o Processing personal data for purposes such as research, planning and statistics by making them anonymous with official statistics.

o Processing personal data for art, history, literature or scientific purposes or within the scope of freedom of expression, provided that it does not violate national defense, national security, public security, public order, economic security, privacy of private life or personal rights or constitute a crime.

o Processing personal data within the scope of preventive, protective and intelligence activities carried out by public institutions and organizations authorized by law to ensure national defense, national security, public safety, public order or economic security.

o Processing of personal data by judicial authorities or execution authorities in relation to investigation, prosecution, trial or execution proceedings.

o The processing of personal data is necessary for the prevention of crime or for criminal investigation.

o Processing of personal data made public by the personal data owner.

o If personal data processing is required by the authorized and authorized public institutions and organizations and professional organizations in the nature of public institutions, for the execution of supervisory or regulation duties and for disciplinary investigation or prosecution, based on the authority granted by the law.

o The processing of personal data is necessary for the protection of the economic and financial interests of the State with regard to budgetary, tax and financial matters.

o The possibility that the request of the personal data owner may prevent the rights and freedoms of other persons

o Requests that require disproportionate effort.

o The requested information is publicly available.

In cases where the application is rejected in accordance with Article 14 of the KVK Law, the response given is insufficient or the application is not answered in due time; Complaints may be made to the Board within thirty days from the date our company learns of the answer, and in any case within sixty days from the date of application.

Application form: Please Click for Application Form

ANNEX 1: Please Click for Personal Data Categories