KVKK CLARIFICATION TEXT

TURIZMO TURİZM SEYAHAT ORGANİZASYON ANONİM ŞİRKETİ

Within the scope of the Law No. 6698 on the Protection of Personal Data (“KVKK”), Turizmo Turizm Seyahat Organizasyon Anonim Şirketi (“Company”) places great importance on the security of your personal data and hereby informs you in accordance with Articles 10 and 11 of the KVKK.

Data Controller

Turizmo Turizm Seyahat Organizasyon Anonim Şirketi, as the data controller, processes your personal data within the framework specified in this text.

Methods of Obtaining Personal Data and Legal Grounds

Your personal data may be collected through:

Our website,
Branches, offices, representatives, call centers, or other physical/digital channels,
Cookies and similar technologies,
E-mail, phone, fax, SMS or other communication channels,
Fully or partially automated means or non-automated methods that are part of a data recording system, in compliance with the data processing conditions specified in Articles 5 and 6 of the KVKK.

Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

Ensuring uninterrupted access to our products and services,
Managing and following up your requests and complaints,
Improving and promoting our services and offering personalized suggestions,
Conducting internal company processes,
Planning and executing commercial activities and strategies,
Ensuring legal and commercial security.

Parties to Whom Personal Data May Be Transferred

Your personal data may be shared, in accordance with Articles 8 and 9 of the KVKK, with:

Our business partners, suppliers, affiliates, and shareholders,
Google Analytics applications,
Legally authorized public institutions and organizations,
Authorized private legal entities.

Rights of Data Subjects

In accordance with Article 11 of the KVKK, as a data subject, you have the right to:

Learn whether your personal data is being processed,
Request information if your personal data has been processed,
Learn the purpose of processing your personal data and whether they are used in accordance with that purpose,
Know the third parties to whom your personal data is transferred domestically or abroad,
Request correction of your personal data if it is incomplete or incorrectly processed,
Request the deletion or destruction of your personal data in cases stipulated by the KVKK,
Request that the correction, deletion, or destruction processes be notified to third parties to whom personal data has been transferred,
Object to a result against you arising from the analysis of your personal data exclusively through automated systems,
Demand compensation if you suffer damage due to unlawful processing of your personal data.

Specific exceptions are set out in Article 28 of the KVKK.

Data Subject & Data Requests

A data subject may submit a request regarding one or more of the rights listed above by delivering a written application in person or by registered mail to the Company’s headquarters:

To learn whether personal data is processed,
To request information regarding the processing of personal data,
To learn the purpose of processing and whether it is used appropriately,
To learn about third parties to whom data is transferred domestically or abroad,
To request correction of incomplete or incorrect data,
To request the deletion or destruction of personal data within the scope of Article 7 of the Law,
To request notification of correction, deletion or destruction to third parties to whom personal data has been transferred,
To object to a result that is against the data subject through exclusive automated analysis,
To demand compensation for damages arising from unlawful processing.

The date the document is delivered to the Company is considered the application date.

In addition, the Board or the Customer may contact the Company through written communication or by any other method deemed appropriate.

Applications must include the applicant’s name, surname, signature, Turkish citizens’ ID number, nationality and passport number (or ID number if any) for foreigners, place of residence or business address for notifications, if any, e-mail address for notification, phone and fax numbers, and the subject of the request.

Furthermore, if a third party is to make a request on behalf of the data subject, a notarized special power of attorney issued by the data subject must be submitted. For applications made on behalf of children or persons under guardianship, a copy of the national ID and the guardianship decision is required.

Once the request is received by the Company, it will be concluded within 30 (thirty) days.