UNDER THE LAW ON THE PROTECTION OF PERSONAL DATA NUMBER 6698
INFORMATION AND CONSENT

General Information on the Protection of Personal Data
In accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”), any information relating to an identified or identifiable natural person is personal data. All your personal data provided to our company by you with this consent will be recorded by OTESAN in its own systems, stored in these systems, preserved, data can be changed, rearranged, disclosed in accordance with the legislation, transferred, taken over, classified by OTESAN, for the reasons, purposes and methods detailed below. and you agree that it will be processed as required by the legislation, and you declare that you have read, understood and approved this letter of consent, which also explains your rights under the PDPL.

Identity of Data Controller: Ote-san tourism paz.san. ve tic. Ltd. sti. Institutions V.D. 649 039 3880
Purpose of Processing Personal Data: To provide the products and services offered to OTESAN customers under the best conditions, to provide products or services in a reliable and uninterrupted manner, to maximize customer satisfaction, to make payments, to fulfill various transactions related to the aforementioned services, to carry out operations and Identity information, address information, which are directly or indirectly related to the purposes of developing the aforementioned products and services or different products and services, carrying out promotional, marketing, advertising and campaign activities, informing you about opportunities, campaigns and other information, and fulfilling the requirements of the agreements concluded with you, obtains, saves, stores, preserves, changes, rearranges, discloses and transfers in accordance with the legislation, takes over, classifies, contact information, account information, mail information and other personal data, processes or prevents the use of data.

Persons to whom Processed Personal Data can be Transferred and Purpose of Transfer: OTESAN personal data to its employees, officers, auditors and consultants residing in Turkey or abroad, OTESAN affiliates and group companies, card payment systems institutions and organizations, services or activities to be provided to you in accordance with the provisions of the legislation. business partners and service providers, public institutions and organizations, for which services are received or worked with; Providing products or services provided by OTESAN in person or through subcontractors, providing products or services in a reliable and uninterrupted manner, maximizing customer satisfaction, making payments, fulfilling various transactions related to the aforementioned services, executing and developing operations, aforementioned products and services Data may be transferred for the purposes of promotion, marketing, advertising and campaign activities of different products and services, informing you about opportunities, campaigns and other information, fulfilling the requirements of the contracts concluded with you, keeping statistics, making internal plans, marketing and information research activities. . In addition, OTESAN reports the information required to be reported in accordance with the relevant legislation and the information requested by the public authorities to the aforementioned authorities in order to comply with OTESAN's disclosure obligations. Your data transferred within the scope of this article may be obtained, recorded, stored, preserved, changed, rearranged, disclosed, transferred, taken over, classified, processed or prevented from being used by third parties, in accordance with the personal data protection legislation.

Method and Legal Reason for Personal Data Collection: Your personal data can be collected verbally and/or in writing through OTESAN's call centers, internet pages, service points or through secure electronic media and in accordance with the contract concluded for service performance.

Your Personal Data Processed by the Data Controller: Identity information, phone information, e-mail information, account information, address information, bank information and other information...

Retention Period of Personal Data: After your personal data is processed in accordance with the legislation, it will be stored for a period of ten years, which is the statute of limitations, from the end of the legal relationship between the parties, and at the end of ten years, it will be destroyed or anonymized in accordance with the legislation.

Your Rights Specified in Article 11 of KVKK: As the owner of personal data, you can exercise the following rights by applying to Otesan, the data controller within the scope of KVKK:
a) learning whether your personal data is processed,
b) if your personal data has been processed,