INFORMATION TEXT REGARDING THE PROCESSING OF PERSONAL DATA OF INDIVIDUALS RECEIVING PRODUCTS/SERVICES WITHIN THE SCOPE OF BUSINESS ACTIVITIES

Turquoise Tourism and Travel Agency Ltd. Co. (Hereinafter referred to as "Turquoise Tourism") would like to inform and enlighten you regarding the processing of personal data, the transfer of processed personal data, the methods and legal reasons for collecting your personal data, and other rights enumerated in Article 11 of the Law on Protection of Personal Data No. 6698 ("KVKK"), in accordance with Article 10 of the KVKK.

Your personal data may be processed, recorded, stored, classified, updated, and disclosed/transferred to third parties to the extent permitted by legislation or limited to the purpose for which they are processed, within the scope of the purposes explained below and in compliance with the principles of law and fairness.

DATA CONTROLLER AND REPRESENTATIVE

Pursuant to the Law, the "Data Controller" is “Turquoise Tourism and Travel Agency Ltd. Co.” operating at the address "Çubuklu Neighborhood, Orhan Veli Kanık Avenue, No:9/1, Kocadağ Plaza, 34810 Beykoz / Istanbul / Turkey".

PERSONAL DATA BEING PROCESSED

The following personal data of yours are processed within the scope of benefiting from our company’s products and services:

• Identity Information (Name, surname, Republic of Turkey identification number, and other identity data that can identify you),
• Contact Information (Your address, mobile phone number, email address, and other contact data),
• Financial Data (Bank account number, IBAN number, credit card information, payment details, billing information, etc.),
• Customer Transactions (Order and request details, information on cash desk receipts, etc.),
• Marketing (Shopping history details, surveys, cookie records, information obtained through campaign activities, etc.),
• Transaction Security (Website browsing details, IP address, website login/logout information, password, and account security details),
• Data required by authorized visa service companies for visa applications; such as photographs, travel and health insurance policy information, passport details, fee and payroll details, hotel and flight reservations, signature circulars, SGK documents, property declarations (title deeds, income-generating contracts, bank account statements), etc.,
• Other personal data that you submit within the framework of your requests, suggestions, and complaints.

PURPOSE OF PROCESSING PERSONAL DATA

Your personal data is processed for the purpose of enabling you to benefit from the services we offer as Turquoise Tourism, in accordance with the basic principles set out in KVKK and relevant legislation, based on your explicit consent and/or other circumstances foreseen in Article 5/2 of KVKK. The purposes of processing personal data by Turquoise Tourism include;

• Fulfilling the requirements of commercial activities carried out by our company and ensuring that individuals benefit from the products and services provided by our company,
• Carrying out your travel planning, reservations, and rentals,
• Managing visa applications submitted to consulates,
• Determining the commercial and operational business strategies and appropriate services of our company,
• Evaluating requests and complaints,
• Ensuring the conduct of company activities in accordance with company procedures or relevant legislation,
• Carrying out work executed with our business partners in different sectors according to needs and managing reference relationships,
• Complying with obligations to share information, report, and provide updates required by public institutions and all authorities, including ministries,
• Fulfilling information and document retention obligations arising from legal regulations,
• Managing our financial, communication, market research, and procurement operations,
• Managing legal processes to provide you with uninterrupted, better, and safer service, within the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698.

METHODS AND LEGAL GROUNDS FOR COLLECTING PERSONAL DATA

Your personal data may be obtained through physical or electronic environments such as Turquoise Tourism's production and management center, or business partners; offices, agencies, and other physical environments where you can communicate with us, call centers, websites, internet platforms, social media, or other public media; in written, verbal, audio, or video formats or through other physical or electronic methods.

We process your personal data collected through the above-mentioned methods based on one or more of the following legal grounds:

• If the processing is required by the provisions of laws and regulations in force in the Republic of Turkey (e.g., Turkish Code of Obligations, Turkish Commercial Code, Consumer Protection Law, Law No. 5651 on Regulation of Publications on the Internet and Combating Crimes Committed through Such Publications, and other relevant legislation),
• If the processing is directly related to the establishment or performance of a contract and is necessary for processing the personal data of the parties to the contract,
• If the processing is necessary for compliance with a legal obligation (e.g., fulfilling regulatory and supervisory requirements, meeting legally mandated requests, managing alternative dispute resolution methods and court processes, and complying with requests from courts),
• If your personal data is made public by you,
• If the processing is necessary for the legitimate interests of our company, provided that it does not harm your fundamental rights and freedoms.

For detailed information, please refer to our "Personal Data Protection and Processing Policy."

PARTIES TO WHOM PERSONAL DATA IS TRANSFERRED AND PURPOSE OF TRANSFER

Your personal data is processed in accordance with the principles of legality, accuracy, and relevance, and is retained for as long as required by the purposes for which they are processed or as mandated by the applicable legislation.

Your personal data may be transferred within the scope of the purposes mentioned above and in accordance with Articles 8 and 9 of the Law No. 6698, to:

Our business partners located domestically and/or abroad to ensure the continuity of our company’s activities and business processes, regulatory and supervisory public institutions and organizations, including TURSAB and relevant ministries, law enforcement authorities, courts, attorneys, consultants, auditors, and third parties from whom we receive consultancy services, authorized representatives and agents, insurance companies, airlines, hotels, rental companies, authorized visa application firms, notaries, banks and financial institutions, and service providers from whom we receive support in areas such as storage, archiving, IT support (servers, hosting, software, cloud computing, etc.) domestically and/or abroad.

RIGHTS OF THE DATA SUBJECT

As the owner of personal data, you have the following rights under Article 11 of the Law:

• To learn whether your personal data is being processed,
• To request information if your personal data has been processed,
• To learn the purpose of processing your personal data and whether it is used in accordance with that purpose,
• To know the third parties to whom your personal data is transferred domestically or abroad,
• To request the correction of incomplete or incorrect personal data,
• To request the deletion or destruction of personal data,
• To request that corrections, deletions, or destructions made to personal data be notified to third parties to whom the data has been transferred,
• To object to the processing of your data exclusively through automated systems resulting in a negative outcome for you,
• To demand compensation for damages in case of unlawful processing of personal data.

Pursuant to Article 4 of the Personal Data Protection Law No. 6698, it is important that the personal data we collect and process is accurate and up-to-date. Therefore, if there are any changes to your personal data, please notify us through the methods specified below.

IF YOU WOULD LIKE TO CONTACT US REGARDING YOUR REQUESTS

If requests are submitted in writing:
You may deliver a signed copy of the "KVKK Application Form" available on our website at http://www.ncturizm.com/ along with a document confirming your identity either in person, through a notary, or send it to "Çubuklu Neighborhood, Orhan Veli Kanık Avenue, No:9/1, Kocadağ Plaza, 34810 Beykoz / Istanbul / Turkey".

If requests are submitted electronically:
You may send the KVKK Application Form, signed with a secure electronic or mobile signature defined under the Electronic Signature Law No. 5070, to our company’s registered electronic mail (KEP) address (turquoiseturizm@hs06.kep.tr), or to our email address (muhasebe@ncturizm.com) using an email address that you have previously notified us of and is registered in our systems.

Your requests submitted to our company will be answered in writing or electronically as soon as possible and no later than thirty days, depending on the nature of your request.

Turquoise Tourism’s Personal Data Protection and Processing Policy and Application Form can be accessed at http://www.ncturizm.com/.

(Additional verifications (e.g., sending a message to your registered email address, or contacting you) may be requested to verify your identity and ensure the protection of your rights. If requests are made by third parties on behalf of personal data owners, the applicant must submit a notarized power of attorney specially authorized by the data owner.)

Turquoise Tourism and Travel Agency Ltd. Co.
Address: Çubuklu Neighborhood, Orhan Veli Kanık Avenue, No:9/1, Kocadağ Plaza, 34810 Beykoz / Istanbul / Turkey
Phone: +90 (216) 693 01 65
Email: muhasebe@ncturizm.com