Privacy and Security Policy

At Çet Yapı Turizm A.Ş. (hereinafter referred to as the “Company”), we attach great importance to the privacy and security of your data and exercise the utmost care to take all necessary technical and administrative measures. Through this Privacy and Security Policy, we also aim to fulfill our obligation to inform as set forth in Article 10 of the Personal Data Protection Law No. 6698 (“KVKK”) and help you understand which data we collect, why and how we collect it, what we do with it, and how we ensure its security.

The Company reserves the right to update this Privacy and Security Policy in accordance with any amendments made to the applicable legislation. By using our website, you acknowledge and accept that we may change this Privacy and Security Policy without prior notice and that we will publish any such changes on this page so you can stay informed about the types of data we collect, how we use it, and under what circumstances we may disclose it, if any. We recommend visiting our Privacy and Security Policy page each time you visit our website to remain updated on any changes.

Your personal data may be collected verbally, in writing, or electronically through automated or non-automated methods, including our Company units and offices, website, social media channels, mobile applications, and similar means, depending on the services provided and the Company’s commercial activities. Your personal data may also be processed and updated for as long as you benefit from our products and services.

Personal data may be processed when you contact our call center or use our website for the purpose of benefiting from our services, fill out the “Contact Us” form on the “Contact” page, visit our Company or website, or participate in training sessions, seminars, or events organized by our Company. Additionally, our Company automatically collects and stores certain information through the website, such as Internet Protocol (IP) addresses, browser type and language, internet service provider (ISP), referring and exit pages, operating system, date/time stamp, and clickstream data. We also use various technologies to collect data on how many times our website is viewed.

The collected personal data is processed for the following purposes, in accordance with the personal data processing conditions and purposes stated in Articles 5 and 6 of the KVKK:

• To carry out the necessary work by our business units for you to benefit from the products and services offered by our Company and our Group Companies;
• To offer customized products and services that suit your preferences, usage habits, and needs;
• To ensure legal and commercial security of our Company, Group Companies, and individuals with whom we maintain business relationships (administrative operations related to communication, physical security and supervision of locations belonging to the Company, customer evaluations, complaint management, reputation research, event management, legal compliance, audit, financial affairs, etc.);
• To determine and implement our Company’s commercial and business strategies;
• To execute our Company’s human resources policies.

Your personal data may be shared with our business partners, suppliers, Company officials, shareholders, legally authorized public institutions, and private individuals for the above purposes and in accordance with the data processing conditions and purposes stated in Articles 8 and 9 of the KVKK.

Your personal data is collected by our Company through all verbal, written, or electronic means, within the legal framework, for the purpose of providing the products and services we offer and fulfilling our Company’s contractual and legal responsibilities. Based on this legal reason, your personal data may also be processed and transferred for the purposes stated in Sections (1) and (2) above, in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK.

Our website is not intended for use by children under the age of 18. We do not knowingly collect personal data from individuals in this age group.

Please be informed that the Company will never request credit card information or other personal data via email or SMS. This fraudulent method, aimed at stealing your personal data, is known as “Phishing.” If you receive such a message that appears to be from our Company and asks for your personal information, please do not respond.

As personal data owners, if you submit your requests concerning your rights listed below to the Company through the methods stated in this Clarification Text, the Company will conclude your request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if a cost is foreseen by the Personal Data Protection Board, the fee in the tariff determined by the Board will be charged. Within this scope, personal data owners have the right to:

• Learn whether personal data is being processed;
• Request information if personal data has been processed;
• Learn the purpose of processing personal data and whether it is being used in accordance with that purpose;
• Know the third parties to whom personal data is transferred domestically or abroad;
• Request correction of personal data if it is incomplete or incorrectly processed and to request notification of such correction to third parties to whom the data has been transferred;
• Request deletion or destruction of personal data if the reasons for processing no longer exist, despite being processed in accordance with the KVKK and relevant laws, and to request notification of such deletion or destruction to third parties to whom the data has been transferred;
• Object to the emergence of a result against the individual by analyzing processed data exclusively through automated systems;
• Demand compensation for damages in case of unlawful processing of personal data.

In accordance with Article 13(1) of the KVKK, you may submit your request to exercise your above-mentioned rights by completing the Personal Data Owner Application Form and delivering it to the Company. Depending on the nature of your request, it will be concluded as soon as possible and within thirty days at the latest. If fulfilling your request requires an additional cost, a fee may be charged according to the tariff determined by the Personal Data Protection Board.

I have read and understood the above information and hereby give my explicit consent, under the KVKK and the Law on the Regulation of Electronic Commerce, to the processing of my personal data, including my contact information that I have shared or will share in the future, by Çet Yapı Turizm A.Ş. for the purpose of receiving advertisements, campaigns, news, and other similar benefits, and to be contacted through the methods specified in the form and below:

• Phone, electronic search engines
• SMS and MMS
• Email

I declare that the information I have provided to the Company is accurate, complete, and truthful, and I undertake to promptly inform the Company in writing of any changes to this information.

I have read and been informed about the Information Text and my rights.